Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
File: XGsMABqZq2KW4kIXO_fn_c8DwBk.mft (raw, json)
Hash identifier: GIPlX+cRaAOTYpdcTl+fKwzdlDxjIKAW5sRmFqJlCfY=
Subject key identifier: 62:6B:41:95:ED:C5:92:81:0F:E7:8A:4A:6E:C0:E5:2B:10:4D:5D:C4
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 0194BB5FED968F360D08FCEDD253059B4DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
Manifest number: 0C9E
Signing time: Fri 31 Jan 2025 08:00:13 +0000
Manifest this update: Fri 31 Jan 2025 08:00:13 +0000
Manifest next update: Sat 01 Feb 2025 08:00:13 +0000
Files and hashes: 1: LwM623k2kR7q91QrhiqdXUwBs7k.roa (hash: RKu1QnAXYUI9f91c+0fb1S3SkGsEsHeC3eprd1gKm7I=)
2: Qd9wy5ftMyh8sTeaWrLO_wpaFTE.roa (hash: oY8TR8QpN82rkBsByfJvFbSYDVr2vD7taUzMtyjJcBc=)
3: XGsMABqZq2KW4kIXO_fn_c8DwBk.crl (hash: 34Kdj+/ibOpMwIbiZZLRkPQCVXCYsLisDKkBhLQzjew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:ed:96:8f:36:0d:08:fc:ed:d2:53:05:9b:4d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Jan 31 08:00:13 2025 GMT
Not After : Feb 1 08:00:13 2025 GMT
Subject: CN=626b4195edc592810fe78a4a6ec0e52b104d5dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:5c:3e:f6:25:e1:b4:30:bc:89:ed:f4:34:
4f:7c:9f:8f:1a:a4:e3:ea:35:6b:5d:46:8d:c3:71:
ad:96:d0:cf:9c:e0:c7:21:38:fe:74:a5:17:5b:a1:
6a:67:76:e4:f9:5b:50:2e:01:0c:23:cf:27:b0:19:
7a:a1:bf:53:02:3c:e5:5c:fd:7c:26:31:d8:20:45:
f2:92:f9:96:69:58:dc:f1:76:28:30:da:74:35:9b:
a8:3a:35:97:15:56:05:a8:9c:cf:87:7d:26:39:b0:
f6:8c:8c:9e:74:30:37:ab:0b:54:b7:a5:d2:19:90:
e3:82:32:9f:d5:a0:a6:0f:8f:64:f6:da:d7:5f:d3:
c8:3e:02:1a:1e:55:4c:37:0b:f8:43:dd:88:47:27:
d0:3e:e1:7a:ad:f3:d7:61:35:53:ec:b2:8e:a5:0d:
28:49:7a:3c:aa:5b:56:80:75:0e:9f:3f:5f:93:04:
17:6e:86:7f:8c:e5:54:36:36:a0:ff:da:07:1b:81:
32:38:7c:17:fe:88:02:54:67:bf:61:da:8f:67:8f:
5e:c8:f2:0a:fc:fc:bc:47:68:be:9a:92:81:22:a0:
16:22:93:8d:5e:da:76:a9:d9:c7:cb:21:8a:9a:c3:
5b:11:79:df:f6:0e:64:fd:ed:44:fe:bb:95:f9:6c:
b3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6B:41:95:ED:C5:92:81:0F:E7:8A:4A:6E:C0:E5:2B:10:4D:5D:C4
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:db:6c:7c:52:4b:1d:79:55:2a:08:08:dc:67:51:6d:25:4d:
26:c8:77:97:c1:bd:60:fb:95:88:50:8f:f1:21:92:64:97:76:
d1:a1:43:77:4e:b4:d8:76:65:62:3d:85:42:8b:ac:4b:e0:e2:
b2:68:5b:4f:4d:69:3c:5d:65:63:a7:ae:63:fd:14:2b:a2:eb:
8c:37:3a:4b:92:e3:09:3b:b8:6c:b2:74:04:1a:5c:25:60:5b:
7b:d1:da:a8:3e:89:f9:62:b2:6c:16:b7:6d:52:5b:d3:c3:61:
50:f7:1b:8e:11:4f:d1:5f:70:b6:2a:55:e0:b9:05:6c:43:1c:
87:2f:b7:ae:08:e9:81:b7:7e:1b:c2:fc:48:e6:ab:e6:f2:95:
34:11:c2:da:40:51:28:e2:c5:47:dc:67:ff:94:96:de:1a:21:
c9:44:88:00:de:31:31:d4:a0:e1:79:1d:ed:66:e4:4a:43:e0:
66:20:f8:e1:5d:7b:05:41:b8:04:95:c4:ce:f0:a9:35:49:4d:
63:21:53:93:8d:18:6f:b8:6f:d4:8c:02:3a:9f:8d:78:15:c3:
7e:e6:dd:e4:85:dc:69:71:28:c2:8c:1a:77:bd:4a:e0:04:1d:
54:6a:23:a2:c4:0c:d1:6a:b4:a9:0d:52:e9:68:1a:30:47:50:
fe:60:89:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:50 2025 by rpki-client on console-fra.rpki-client.org