Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
File: xsfkNpOlMtPW70EYbXDXpsVfut4.mft (raw, json)
Hash identifier: EJWNXCEkW4zT09N8W7Zm3X8o+kHJSJOemKiXjoYwvXc=
Subject key identifier: FD:32:95:75:9E:3D:81:34:B3:3D:39:D1:A2:CD:AC:A7:E5:A9:C1:DE
Authority key identifier: C6:C7:E4:36:93:A5:32:D3:D6:EF:41:18:6D:70:D7:A6:C5:5F:BA:DE
Certificate issuer: /CN=c6c7e43693a532d3d6ef41186d70d7a6c55fbade
Certificate serial: 0194C463C665D4CEF6C00F6485ED67776CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
Manifest number: 0FBC
Signing time: Sun 02 Feb 2025 02:01:00 +0000
Manifest this update: Sun 02 Feb 2025 02:01:00 +0000
Manifest next update: Mon 03 Feb 2025 02:01:00 +0000
Files and hashes: 1: xsfkNpOlMtPW70EYbXDXpsVfut4.crl (hash: ZK+TXXNUW5EJqDpPYYJ/MmLfmrxWTB0FdPhsAhE8xXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:c6:65:d4:ce:f6:c0:0f:64:85:ed:67:77:6c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c7e43693a532d3d6ef41186d70d7a6c55fbade
Validity
Not Before: Feb 2 02:01:00 2025 GMT
Not After : Feb 3 02:01:00 2025 GMT
Subject: CN=fd3295759e3d8134b33d39d1a2cdaca7e5a9c1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ba:16:8e:41:e9:35:5a:8a:d4:1c:d9:f0:4e:
23:5d:3b:6a:ab:a0:0b:ef:79:af:b5:2b:f3:f5:6c:
c3:28:8b:ee:d0:b5:e0:ec:7d:8d:2b:00:6a:b6:74:
61:3b:14:dc:77:6f:74:d9:cd:53:6d:6c:cd:a6:9c:
ab:c4:54:bb:bd:10:25:95:28:cf:9f:90:e0:65:ec:
3a:46:11:ab:34:e2:49:65:33:12:ed:50:8a:0b:60:
87:1a:db:1a:02:ee:d5:1b:82:a4:69:32:ff:7b:e3:
68:4d:4f:46:80:08:ea:5c:84:14:fd:54:f0:e5:6d:
f0:06:22:f1:15:a0:e8:1d:c8:b8:17:fc:ee:f7:03:
f0:31:bb:38:a2:12:a8:9b:be:c3:73:0b:34:ad:62:
8a:fc:11:17:f0:8b:5d:35:01:21:e9:f2:0d:c2:43:
b5:ec:68:b2:71:8d:66:24:8c:f2:bf:bb:93:8d:fb:
ec:2a:6d:be:46:33:90:f2:fc:32:29:a9:6a:19:a2:
f3:d7:71:2f:49:ad:27:00:7a:6c:22:b6:4e:d8:26:
28:e5:42:63:17:6c:b3:f4:f5:ee:9e:9d:ef:98:bd:
8a:79:b3:a8:f0:6b:a5:1a:68:cd:8a:ed:db:1d:b0:
e3:42:2b:65:f9:a0:2f:09:df:99:7b:b1:ba:0c:3f:
26:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:32:95:75:9E:3D:81:34:B3:3D:39:D1:A2:CD:AC:A7:E5:A9:C1:DE
X509v3 Authority Key Identifier:
keyid:C6:C7:E4:36:93:A5:32:D3:D6:EF:41:18:6D:70:D7:A6:C5:5F:BA:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:01:be:c1:57:1c:da:9f:4c:98:f1:ed:3d:11:e6:0a:43:74:
2d:41:e9:7a:ee:31:ac:1f:82:9f:c1:13:ad:5c:6f:ac:80:9a:
1a:8a:83:cc:36:c2:71:a6:63:c1:38:89:e0:a2:9d:05:d2:d5:
6b:3f:64:a0:0c:cc:5a:25:37:19:c7:0a:d2:c1:e3:bd:3b:de:
50:ad:7c:63:f6:83:1c:9d:dd:49:13:3f:91:93:f8:2e:39:b2:
a0:92:d4:87:d9:32:74:05:c2:6b:b2:6b:99:6b:89:ff:a6:6b:
a7:4f:49:81:d1:32:e6:60:f0:da:67:36:78:41:20:f8:8c:38:
c1:8d:20:91:d3:b7:06:3e:18:10:d3:b3:32:a7:61:3b:3f:99:
41:3a:fc:31:3e:b8:13:3e:5a:dc:29:ba:b5:e6:d0:70:29:74:
3d:b1:78:ea:e3:16:44:14:3a:b0:50:37:38:3e:83:8d:f3:eb:
24:cc:61:64:63:30:20:24:9d:89:4c:2f:c4:30:b9:69:be:03:
27:ad:35:a8:1e:0e:48:31:02:9a:5a:57:4e:4b:00:54:70:97:
06:d3:10:94:11:9f:e1:4d:b6:65:fa:79:8e:79:a8:26:34:46:
ea:74:82:f7:f6:fb:87:62:03:5e:3a:65:45:08:38:31:96:cf:
14:bd:c8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:45:51 2025 by rpki-client