Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
File: XCnLotrPDvn6IgkAMrsVmhCRQPA.mft (raw, json)
Hash identifier: WfW4rKT7z6PIaGc1ZwxTrJpGppW4nKEYC2HNhxK7+jI=
Subject key identifier: 01:03:BE:1E:1D:7C:71:14:88:C1:ED:0E:AC:9A:7D:F7:81:3D:64:D1
Authority key identifier: 5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
Certificate issuer: /CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Certificate serial: 0194BABBC4C65CB0E2CD2580BA507D119BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 05:00:55 +0000
Manifest this update: Fri 31 Jan 2025 05:00:55 +0000
Manifest next update: Sat 01 Feb 2025 05:00:55 +0000
Files and hashes: 1: XCnLotrPDvn6IgkAMrsVmhCRQPA.crl (hash: zkIwn+17tuhy6u2ApHt40/6B3dtSrSwjDvomtvs5iXs=)
2: uMKYK0zWnMRt1XBJkaQ1CMnyyVw.roa (hash: yhNmYUr+FS9v4wFEYBgKw1+Munbk5IEg7AdZjbcucQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:c4:c6:5c:b0:e2:cd:25:80:ba:50:7d:11:9b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Validity
Not Before: Jan 31 05:00:55 2025 GMT
Not After : Feb 1 05:00:55 2025 GMT
Subject: CN=0103be1e1d7c711488c1ed0eac9a7df7813d64d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:f0:03:05:b1:6a:e3:15:db:86:f6:2e:6e:
fb:9b:9d:0d:26:25:d3:b9:b6:de:04:81:92:f5:8c:
52:fa:36:9c:01:42:86:ca:6b:54:80:19:c9:d5:d2:
7d:88:42:09:4e:23:4e:3d:4c:4d:07:1b:f4:7d:67:
43:10:05:3e:14:90:a5:eb:2c:2c:18:8e:c4:d8:c9:
ff:d5:91:32:ed:25:9f:2b:c0:df:99:13:69:7a:96:
a4:95:6d:ed:8e:be:fa:0a:36:64:4f:17:6a:9f:f0:
b5:79:0b:f6:19:e7:5a:ee:b9:c3:4f:8b:64:27:61:
3b:69:9f:b9:71:29:39:31:60:cf:9e:7e:bb:ed:36:
ed:6a:34:25:4e:37:41:4b:17:3e:cf:81:c2:79:6b:
da:e8:a9:cf:16:23:0a:f0:8b:05:70:86:ea:4a:6f:
81:d4:30:59:46:3c:a5:59:76:fa:f7:75:d7:1b:bb:
7f:a6:7b:ab:40:d8:3a:00:60:a9:81:2f:21:75:47:
2e:dd:1b:eb:0a:d8:62:6a:aa:8a:85:b7:0a:9c:79:
a2:95:12:e6:23:d3:52:7e:3b:be:f9:2a:20:69:87:
ba:2f:21:66:45:c3:1e:5a:7d:64:ae:27:7a:e8:55:
5a:be:92:15:2a:cb:86:cd:60:fc:7a:b7:82:ad:67:
5e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:03:BE:1E:1D:7C:71:14:88:C1:ED:0E:AC:9A:7D:F7:81:3D:64:D1
X509v3 Authority Key Identifier:
keyid:5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f6:e7:92:83:05:c1:e7:74:73:cc:a9:4e:39:1f:28:4b:bd:0c:
cc:d8:35:04:de:6d:5d:1d:ed:63:fa:da:e8:20:cf:93:d9:d6:
c5:58:0e:95:b1:3e:d4:c6:be:6f:63:12:b4:53:b4:18:53:54:
21:a3:2d:fc:c4:d2:3c:ef:c1:70:d9:9c:6b:d6:3c:a7:20:23:
10:9f:e0:26:36:12:c3:eb:51:0f:07:54:24:4e:bf:05:04:4e:
20:ad:20:0f:17:51:5e:17:30:26:a4:be:1e:fc:13:96:7b:9b:
99:6d:af:65:7b:9f:5b:67:1c:cd:4d:a2:39:fc:a3:d7:65:1f:
41:ab:33:59:36:ce:ba:08:33:db:44:60:b9:93:a6:59:94:2a:
9d:39:d9:63:cc:4d:d9:fd:e0:b0:c8:f5:eb:a2:ee:50:64:1d:
01:9f:a5:45:9d:2c:ea:e7:1e:4d:96:a8:08:23:6e:fd:70:d3:
fa:a0:47:5b:c8:60:94:af:b9:2a:a8:4b:d7:c2:79:5e:ec:98:
95:7a:41:0c:20:73:5f:88:df:c2:22:49:6a:ac:92:4d:6d:e5:
44:74:06:f5:fd:96:77:e5:24:8a:02:51:9f:85:7e:df:96:c5:
37:d3:be:51:c8:a6:8e:e0:08:d5:bb:f3:fd:d0:98:c5:8c:c1:
c5:4d:b8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:39 2025 by rpki-client on console-fra.rpki-client.org