Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
File: xK3VunZitzHdCLz4c48TXZOu1FE.mft (raw, json)
Hash identifier: rN+hnxR8kv2FaOxkEhrKb9aUKsZ4x0BW3fmlZbPYPzY=
Subject key identifier: CD:39:0D:ED:CA:95:68:A2:9D:AF:61:56:C5:15:23:CF:46:27:B4:3D
Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
Certificate issuer: /CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Certificate serial: 019511A2747E46194491B3618A5E8AD88BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 02:00:14 +0000
Manifest this update: Mon 17 Feb 2025 02:00:14 +0000
Manifest next update: Tue 18 Feb 2025 02:00:14 +0000
Files and hashes: 1: Wmc5yYVaGJ7uHE24vbc7tW45DOM.roa (hash: eqf1mvXxL8vo0q3xITeHe/8//1Yj7TaFakzQyNyDmc8=)
2: ijYRlmNl6uA744Qux7JZwJCActg.roa (hash: pRc6ysDWq8mR6b4C/2Dfn02VAUo5UWjYvCBDj+PrKhE=)
3: xK3VunZitzHdCLz4c48TXZOu1FE.crl (hash: 2vEN9zH+dPmnaBq0TjL+fpBaCK478sCk/9xSQe1wkRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:74:7e:46:19:44:91:b3:61:8a:5e:8a:d8:8b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Validity
Not Before: Feb 17 02:00:14 2025 GMT
Not After : Feb 18 02:00:14 2025 GMT
Subject: CN=cd390dedca9568a29daf6156c51523cf4627b43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8e:89:9b:c1:2c:ac:fb:dc:0a:7e:11:d7:17:
5b:0d:66:a3:16:d0:4a:ba:74:5c:29:06:52:b5:4c:
5e:c6:06:75:5e:5d:53:df:11:44:da:ee:f3:54:5e:
51:67:d1:6b:df:1e:b9:86:44:97:ae:71:77:22:b0:
46:db:a8:c8:44:39:dd:0b:76:f2:df:57:35:38:93:
62:5c:41:5b:a5:9a:a4:43:25:4d:fe:ae:4a:7f:6e:
5a:aa:26:39:fc:f4:00:51:f1:45:6a:de:e5:ef:d0:
ac:86:da:af:21:fa:1b:6e:fa:8b:81:05:a8:6e:ba:
05:07:ba:8a:5f:23:b8:ad:65:b7:ab:14:33:89:10:
7e:65:db:0a:66:0c:91:87:e0:70:62:ca:8d:97:85:
6e:69:f2:ab:b6:9b:7c:b1:23:ab:13:4a:77:8c:4a:
31:50:8e:08:c2:62:06:9f:61:ba:1b:26:10:f0:43:
c9:5a:7a:be:87:28:44:07:7d:10:31:e9:df:a1:7e:
69:00:1f:5a:a1:17:7a:2a:44:94:e2:f7:8d:0e:26:
4d:75:fb:e0:95:c5:9a:ae:0c:75:ca:52:e7:2b:93:
21:20:82:57:dc:10:fa:55:89:a4:f0:43:16:23:8e:
61:95:fa:a8:63:80:4d:fe:51:21:d5:e8:d5:c6:ca:
55:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:39:0D:ED:CA:95:68:A2:9D:AF:61:56:C5:15:23:CF:46:27:B4:3D
X509v3 Authority Key Identifier:
keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:57:b0:a8:72:9b:f8:ca:30:28:25:39:fe:95:c3:12:b7:b6:
be:ff:a9:a1:bc:86:32:ee:8a:45:22:04:7e:66:51:0c:31:4d:
ae:00:21:86:e5:d9:bb:0c:11:da:40:9e:dd:9d:a0:9d:a1:6e:
ad:5e:aa:65:88:cd:8f:22:15:f3:47:03:39:c0:50:87:dc:6c:
1c:45:92:60:dc:ee:27:33:e5:9a:d2:c8:03:64:3d:2c:d8:30:
8b:8a:da:08:53:30:29:48:21:9d:c6:79:9e:11:c5:f5:88:a2:
c0:38:08:d1:43:08:07:68:ba:f1:67:63:e8:56:d9:4b:95:11:
c1:3f:b1:1c:16:d0:7b:a1:6e:ec:21:48:55:61:9b:b7:e5:eb:
1b:3b:22:94:55:85:1f:9c:4c:bc:8c:9f:03:9c:50:95:d0:bb:
cf:b8:19:27:7b:d5:68:b8:bb:5b:79:c1:f0:e2:51:d5:23:c2:
f2:0c:22:ef:9f:e9:21:d1:76:82:3a:7c:5c:9b:db:b1:07:6a:
81:43:e7:97:e5:60:f0:3b:15:b1:af:54:2f:ee:40:51:bf:bc:
44:b5:41:da:79:1c:a2:3b:7a:ca:88:4a:ef:bc:86:01:19:5e:
2a:54:f2:bc:8b:40:31:44:17:b6:0d:a6:82:fe:91:db:ca:f8:
21:ec:60:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:07 2025 by rpki-client