Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
File: XKn3Xcos07OTU-AwCzC6W2KXais.mft (raw, json)
Hash identifier: aJ53DXFveSLRAQK7DcsFL+iHmPexXt+D3nsOb81S9lE=
Subject key identifier: 8F:36:0E:3C:62:15:C0:93:E0:5B:F2:CB:69:D4:19:37:D0:92:4A:AD
Authority key identifier: 5C:A9:F7:5D:CA:2C:D3:B3:93:53:E0:30:0B:30:BA:5B:62:97:6A:2B
Certificate issuer: /CN=5ca9f75dca2cd3b39353e0300b30ba5b62976a2b
Certificate serial: 0194BAF23D613A71CC074FEEDC1E752609FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
Manifest number: 07B3
Signing time: Fri 31 Jan 2025 06:00:24 +0000
Manifest this update: Fri 31 Jan 2025 06:00:24 +0000
Manifest next update: Sat 01 Feb 2025 06:00:24 +0000
Files and hashes: 1: XKn3Xcos07OTU-AwCzC6W2KXais.crl (hash: hG6iw80WK2VDFhj4EKu3qukD2rUGL3QOenBAoQcfWU0=)
2: b9Hu80_829heeLvFjfJdJz5nCTc.roa (hash: j+SJeADqUhFu2qLu6938DWITw4JSWTcM1pVfvfeWeP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:3d:61:3a:71:cc:07:4f:ee:dc:1e:75:26:09:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca9f75dca2cd3b39353e0300b30ba5b62976a2b
Validity
Not Before: Jan 31 06:00:24 2025 GMT
Not After : Feb 1 06:00:24 2025 GMT
Subject: CN=8f360e3c6215c093e05bf2cb69d41937d0924aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c9:8f:16:c4:26:11:f4:03:33:3f:4e:05:9f:
4f:48:ef:61:af:dc:ce:2c:d0:5a:62:69:91:e6:9f:
1c:93:b0:36:70:d1:37:e1:42:8f:a1:92:b4:44:4b:
9b:0d:96:20:1d:af:ba:f0:52:49:32:f1:24:cc:4a:
67:cb:e2:0f:f6:58:75:91:1d:ca:54:50:38:b2:98:
e1:d6:44:11:7c:c5:56:2d:46:5f:d3:e5:d5:dc:32:
bb:b9:50:12:fe:cc:e3:be:79:d3:f9:26:ee:dc:a9:
69:f8:26:8f:99:97:2e:0a:a7:b3:12:ba:ac:c3:bc:
52:67:1d:29:28:d8:fa:18:5c:e1:a3:67:b9:de:44:
35:b6:63:56:96:bb:61:79:69:34:5a:00:73:bf:1c:
30:d9:09:5a:c3:41:fb:67:58:44:3b:8e:a2:5e:3e:
f4:69:5e:4f:f9:bb:25:c6:31:cb:be:1d:f7:66:2e:
63:72:5e:c0:ba:21:c8:4d:d1:9f:e9:0e:36:d5:a3:
c9:6b:df:59:da:e2:30:a8:e1:ef:10:14:62:81:a9:
7c:9a:98:b4:92:85:f8:86:d1:1d:fe:08:af:9a:31:
68:1c:62:d4:fe:7a:26:71:a1:39:75:49:2a:70:ab:
ae:0e:ef:f6:7a:78:db:c5:db:20:40:95:75:55:a5:
6d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:36:0E:3C:62:15:C0:93:E0:5B:F2:CB:69:D4:19:37:D0:92:4A:AD
X509v3 Authority Key Identifier:
keyid:5C:A9:F7:5D:CA:2C:D3:B3:93:53:E0:30:0B:30:BA:5B:62:97:6A:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:7c:88:18:3e:0d:59:e9:81:d8:52:f6:08:93:e0:72:16:3b:
1a:1d:f8:20:d4:69:50:ac:14:a4:9f:59:72:c1:72:56:ab:d0:
ab:36:66:41:f6:2d:f7:43:7e:30:6c:66:3b:b9:d2:b2:59:28:
d9:fc:77:93:19:ac:61:b8:ea:1e:c2:58:aa:68:78:82:5c:e4:
58:a8:ba:59:d5:4c:aa:fb:4c:b0:93:8e:64:82:38:2f:f8:22:
93:ce:23:30:be:e2:36:a2:0c:f1:be:42:0b:63:14:37:5b:70:
c0:9a:36:f0:bc:81:c6:28:2f:1a:f3:35:e2:bd:70:6f:14:89:
fe:75:8c:70:43:2f:32:b5:df:93:85:9b:65:d9:db:4a:68:3e:
78:a6:ab:2b:22:e9:a2:05:44:f6:a4:e5:e4:65:c7:91:52:ec:
c3:06:5e:74:24:ed:43:30:d5:77:b9:e9:0e:6d:d0:7c:bc:c1:
6b:01:44:be:92:3b:df:ca:6c:f2:21:0f:c5:65:2e:1f:f3:6e:
3b:8c:00:d0:dd:72:7b:7e:c9:73:0e:8b:ff:41:ee:05:62:22:
f1:e0:b6:24:3d:c9:ce:64:a9:0e:9a:f6:3a:f3:6a:51:8c:2d:
06:cb:0f:6b:de:57:aa:02:c8:de:c3:85:e6:01:3f:5e:f8:f1:
4e:c3:8c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:19 2025 by rpki-client on console-fra.rpki-client.org