Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
File: xsfkNpOlMtPW70EYbXDXpsVfut4.mft (raw, json)
Hash identifier: ycj9XZpRyeZBffUS6WuluVNKQatrsePKtoCmrsO1mP4=
Subject key identifier: 20:E3:F9:56:A2:11:A1:C4:63:52:46:57:26:EE:91:73:EA:72:A8:23
Authority key identifier: C6:C7:E4:36:93:A5:32:D3:D6:EF:41:18:6D:70:D7:A6:C5:5F:BA:DE
Certificate issuer: /CN=c6c7e43693a532d3d6ef41186d70d7a6c55fbade
Certificate serial: 0194BABB8C8F556B62591AA931CCA52E8E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
Manifest number: 0FB7
Signing time: Fri 31 Jan 2025 05:00:40 +0000
Manifest this update: Fri 31 Jan 2025 05:00:40 +0000
Manifest next update: Sat 01 Feb 2025 05:00:40 +0000
Files and hashes: 1: xsfkNpOlMtPW70EYbXDXpsVfut4.crl (hash: j+f6tfgIOhtJIaxmYws2j28L0duRVuJ09OuuUZb/Sew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:8c:8f:55:6b:62:59:1a:a9:31:cc:a5:2e:8e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c7e43693a532d3d6ef41186d70d7a6c55fbade
Validity
Not Before: Jan 31 05:00:40 2025 GMT
Not After : Feb 1 05:00:40 2025 GMT
Subject: CN=20e3f956a211a1c46352465726ee9173ea72a823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:73:cb:eb:03:4f:40:0a:50:48:80:11:08:b6:
8b:55:2d:41:5a:ec:7a:de:88:05:e1:41:74:41:33:
09:ee:7e:81:02:5e:89:59:9e:c4:fc:f9:bb:ec:8b:
79:8f:1d:13:45:c3:16:e4:93:94:60:d6:7b:2f:cc:
59:ae:13:90:5a:df:54:2d:84:4d:6d:04:fc:fb:48:
90:f4:ca:34:e5:91:7a:17:fb:ef:e2:10:7c:c7:a4:
1a:41:5b:51:8e:63:6b:cd:5e:9f:52:45:fe:53:01:
8c:c9:06:62:60:67:5f:56:cc:df:7e:3b:6c:d9:04:
0f:5e:b0:96:bd:38:75:1c:24:96:3f:92:c7:aa:90:
28:46:39:96:5f:6e:44:e8:c6:4d:e7:47:45:e3:82:
47:8f:f0:59:3e:49:8b:02:50:d1:3c:37:b4:3b:b8:
a9:e9:d2:5f:02:7c:f6:45:cf:6f:53:21:ac:fd:48:
ca:49:f2:67:36:0b:d6:1b:66:47:b4:b6:6b:3b:76:
f7:85:29:b9:fa:d7:b5:47:7a:69:a4:7c:0b:43:fd:
be:fc:c4:fc:c1:20:5f:c6:ca:6c:4a:ea:9b:9a:ee:
40:1c:1b:ff:26:e2:4c:72:8f:20:10:67:4d:fb:78:
7e:47:2a:d4:15:7a:73:b7:b8:8b:e3:dc:92:7c:50:
bb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E3:F9:56:A2:11:A1:C4:63:52:46:57:26:EE:91:73:EA:72:A8:23
X509v3 Authority Key Identifier:
keyid:C6:C7:E4:36:93:A5:32:D3:D6:EF:41:18:6D:70:D7:A6:C5:5F:BA:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:3c:bf:cb:2a:4b:40:e3:66:07:8e:a0:86:54:82:28:cc:1e:
85:36:30:96:b9:a4:0e:5a:15:07:d4:00:9e:77:ca:ce:79:54:
77:de:f7:e5:24:ed:07:3b:54:4e:4e:f9:56:ef:5a:2e:8c:3c:
6e:fd:30:04:fe:21:11:f5:bf:03:d9:c3:5c:5b:35:66:72:25:
97:89:bc:58:f7:be:57:f1:25:b9:43:3b:92:88:5d:19:6e:61:
94:ea:05:ad:18:29:01:bc:20:b0:83:0a:39:3f:47:27:16:18:
7e:d8:a0:13:31:8c:ef:16:f2:2d:7d:a8:56:50:77:23:44:9e:
8f:72:fe:88:04:1a:ba:3a:97:ce:74:85:a1:d4:7e:c0:9a:c3:
8a:2f:1c:62:70:e5:9b:4d:6f:75:ef:06:8d:4b:c5:40:81:33:
bc:21:13:4c:a1:b9:40:ad:ed:4c:36:e7:eb:60:f7:2f:43:61:
6a:17:71:d4:a4:cb:ac:42:9c:b6:22:cd:17:7f:85:85:20:17:
51:a8:14:f0:ce:1e:44:02:ce:0f:17:0f:e3:92:5b:5c:d9:4b:
9c:81:ce:ba:91:47:62:84:fe:0f:ef:aa:bb:1b:51:00:d8:a3:
c9:5b:73:ac:11:44:21:9a:90:bf:44:bc:93:28:a0:4c:c5:e5:
fc:1e:d0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:47 2025 by rpki-client on console-fra.rpki-client.org