Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
File: X-WOcyoPcfTwEwLWIWcXO9mxfME.mft (raw, json)
Hash identifier: JIK+dTQyY3JtXk8xwBb/rBUUUylX14iBefV/FlLLugI=
Subject key identifier: A3:16:5B:0E:68:5D:DC:A2:6E:CC:2A:3A:D6:99:47:5A:0A:10:89:85
Authority key identifier: 5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
Certificate issuer: /CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Certificate serial: 0195116BA712135ADD67AE5902715C0B8E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
Manifest number: 0F25
Signing time: Mon 17 Feb 2025 01:00:22 +0000
Manifest this update: Mon 17 Feb 2025 01:00:22 +0000
Manifest next update: Tue 18 Feb 2025 01:00:22 +0000
Files and hashes: 1: X-WOcyoPcfTwEwLWIWcXO9mxfME.crl (hash: ZcwOcodUCIBCXTzSKrgcKYeNL4BgYSEYfmZdjPpBL14=)
2: xBWezcOjf0HLBQBmbtDyglq06CU.roa (hash: dlL0ZUaafY/fyT+lFkSao0d0hLl5qFvGU+tiAKR4bcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:a7:12:13:5a:dd:67:ae:59:02:71:5c:0b:8e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Validity
Not Before: Feb 17 01:00:22 2025 GMT
Not After : Feb 18 01:00:22 2025 GMT
Subject: CN=a3165b0e685ddca26ecc2a3ad699475a0a108985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:7f:7c:5d:27:63:53:58:9e:a7:60:51:d7:
0f:53:d6:0e:8b:67:09:69:0a:3b:38:65:1e:a7:85:
17:10:78:48:b0:24:b6:69:30:6a:5b:a0:d9:8a:74:
d6:4f:ff:a8:bb:16:ad:d7:e2:cb:f8:5f:36:7d:5f:
fe:db:18:81:fb:d9:6c:d1:02:62:62:e6:6c:9c:5e:
3f:61:86:b3:72:d5:a8:f8:ef:6f:d6:f1:c9:91:23:
82:86:81:9f:c6:f2:a2:d0:5b:52:3f:2f:71:df:1f:
d1:02:fa:3a:6c:60:fc:76:c8:4e:0e:99:ee:ba:c8:
b7:c4:30:f2:0d:5a:18:52:dc:30:11:ae:69:e4:5a:
f1:c1:bc:88:79:9b:cd:cd:a1:d9:52:87:72:60:cb:
11:a7:cf:55:e7:b3:f6:02:1f:91:2c:94:ae:37:98:
52:a5:bd:b7:37:1f:57:55:eb:ca:18:97:f8:76:43:
82:81:bb:2f:4c:dc:31:86:a8:56:42:f1:01:d3:41:
c2:9d:40:0b:29:d8:ab:84:f5:c5:1e:8c:8b:e9:3e:
0e:b7:36:62:72:97:4f:46:76:1e:c0:84:a5:ee:d3:
0c:63:2f:dd:b1:99:04:13:cd:13:c0:0e:fb:75:bb:
13:83:97:12:6b:cd:87:55:16:69:e0:4d:c0:d6:00:
94:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:16:5B:0E:68:5D:DC:A2:6E:CC:2A:3A:D6:99:47:5A:0A:10:89:85
X509v3 Authority Key Identifier:
keyid:5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:58:31:4d:8a:28:29:1b:27:c6:ac:41:2b:2b:f8:37:c1:e8:
80:9b:99:70:8e:1e:41:a4:f4:67:8d:0d:d9:de:ce:ce:55:bd:
81:27:0d:41:be:d0:9a:6d:7d:98:53:18:1e:ae:ed:7c:99:df:
c5:b6:73:51:3c:fd:01:dd:ca:78:dd:f9:ee:12:a6:7a:b8:33:
03:81:14:72:8b:df:77:ef:3c:4d:28:39:4d:e5:dd:f0:31:0f:
46:97:4b:c0:0b:30:b2:50:bd:bf:f3:86:44:21:49:7b:fb:52:
18:aa:f2:b8:39:3e:a7:3f:f5:08:1d:15:c1:a5:66:8a:12:4b:
b0:1a:eb:62:73:3c:90:93:d4:b8:86:ad:a2:91:15:05:34:97:
eb:44:9e:03:de:b9:9e:78:27:f3:ee:68:e7:6b:fd:db:6d:e5:
d3:8c:12:68:d6:7d:8a:cb:74:82:e4:1d:18:09:73:3c:44:9b:
18:95:d3:9b:f7:88:40:31:ff:68:2b:41:83:7b:f8:b8:b3:7a:
fa:1f:54:0f:76:e3:a8:67:2f:5f:a5:a9:e5:6c:0d:6d:3d:19:
30:21:d9:9f:21:aa:89:c2:57:2c:ce:b1:6f:4d:81:88:80:01:
e3:22:ca:34:4b:6f:d6:f7:ac:db:ed:60:67:55:0b:86:e8:82:
24:6d:94:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:10 2025 by rpki-client