Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
File: xHqEBhZxYD3cKujuqcrVHudarsY.mft (raw, json)
Hash identifier: PAiluFx4lWhgszRFqElyBE1pjSnsGJNgrdHv7umioK8=
Subject key identifier: B0:F0:56:EB:2D:5C:5F:CB:93:17:D3:5E:D2:09:61:0F:B6:89:4F:23
Authority key identifier: C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6
Certificate issuer: /CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
Certificate serial: 019510C819ECB12FC90B7B3F7FCB844E787B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
Manifest number: 1455
Signing time: Sun 16 Feb 2025 22:01:44 +0000
Manifest this update: Sun 16 Feb 2025 22:01:44 +0000
Manifest next update: Mon 17 Feb 2025 22:01:44 +0000
Files and hashes: 1: 1G_BWf-F8T8J8X8N9NNB4K_YYMY.roa (hash: kKD9/wMia+gnqXI1OLYz+C+9k0a7eBZ1ba1nm7Hyp0A=)
2: xHqEBhZxYD3cKujuqcrVHudarsY.crl (hash: XfZrAjrU7hYTi5ZXX0I0Aj+zwqXvFdSdtgFfAx51p60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c8:19:ec:b1:2f:c9:0b:7b:3f:7f:cb:84:4e:78:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
Validity
Not Before: Feb 16 22:01:44 2025 GMT
Not After : Feb 17 22:01:44 2025 GMT
Subject: CN=b0f056eb2d5c5fcb9317d35ed209610fb6894f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:53:47:0e:08:ca:c5:ed:7c:f8:94:81:35:
5a:c8:14:4c:10:fc:d6:fa:90:29:a8:e5:b4:44:b3:
47:ec:9b:ea:a2:e1:3a:07:1b:06:ad:a8:3e:ad:9c:
de:f1:94:ef:d3:d2:f0:7a:36:d3:5a:9a:db:12:ca:
d5:41:a5:66:f1:e2:e7:4f:98:d8:bf:d2:d6:c8:87:
86:10:e6:e7:c5:38:53:5f:e3:50:ef:31:9c:71:f5:
4c:70:06:c6:2d:46:9a:e8:6a:6f:d4:aa:d5:f3:29:
c1:90:58:bb:2d:81:bc:96:42:0b:54:6f:6e:7c:b0:
3c:bb:60:e1:bc:57:be:ec:e1:48:79:be:71:20:b6:
6c:88:eb:a0:15:85:83:58:55:fe:77:aa:b6:f9:60:
5f:3b:51:94:9a:70:2c:01:f5:00:4e:d1:a6:e9:cc:
9e:69:61:7e:e0:ba:d2:cb:5b:9d:74:f4:be:b3:8d:
0e:66:14:4d:aa:d8:df:12:26:45:62:0f:a1:fc:80:
65:de:3d:c1:ea:04:10:00:62:01:cc:31:4e:ea:ca:
5c:9f:02:62:03:b3:3c:fd:fd:f3:cd:bc:11:dd:e8:
77:5e:fd:ab:a7:4a:fc:5e:45:1f:1a:80:b7:7b:d9:
e8:bd:77:d4:ae:a2:b1:87:87:7f:ed:14:0e:59:f1:
68:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F0:56:EB:2D:5C:5F:CB:93:17:D3:5E:D2:09:61:0F:B6:89:4F:23
X509v3 Authority Key Identifier:
keyid:C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:89:80:38:41:e1:dc:e7:36:f4:ec:a2:f6:ff:e5:46:25:05:
cb:27:04:be:31:36:f0:78:36:32:e0:c6:23:4c:ab:69:2a:57:
12:5b:94:b1:7a:d3:68:52:da:f8:2a:81:16:db:4b:03:0d:3b:
6a:fb:11:cc:88:00:db:64:6d:5f:45:b9:ba:92:c2:1c:91:ee:
8f:6a:26:e1:d5:ff:d3:8c:4c:81:19:0e:d5:29:24:8f:d7:d8:
08:29:48:f9:e5:c1:b3:3d:b4:cc:62:4a:a1:97:fe:31:b0:f8:
15:b4:dd:21:39:eb:07:e4:b8:d6:71:df:ac:90:88:11:23:51:
80:9b:c8:e5:f8:58:02:23:f1:74:7a:b7:06:d8:6b:f3:52:99:
65:a0:6c:bb:f6:3f:b1:19:99:40:70:52:63:43:e8:74:6d:88:
fc:9f:64:ae:a4:f3:f9:89:25:96:e1:a5:ea:17:81:4c:89:4f:
92:b8:4c:e6:b8:b4:de:18:e9:41:46:9d:37:00:94:e3:2b:25:
bb:3b:f7:08:f0:fc:fe:f5:60:2b:53:53:e1:3c:68:38:dc:60:
ae:8b:bc:d6:8f:95:eb:0f:51:76:38:e7:db:d0:3e:90:0d:7f:
97:42:ed:d4:12:34:85:86:ac:69:fc:cb:0a:2f:92:96:a1:bb:
f0:2e:cc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:38 2025 by rpki-client