Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
File: XCnLotrPDvn6IgkAMrsVmhCRQPA.mft (raw, json)
Hash identifier: 1S7eaePZDZMZGMMJ+V1/z3LOfCznLC+TV0su7nsWUUY=
Subject key identifier: F7:4E:50:A8:D8:DB:55:B2:95:68:31:C9:FC:1C:DF:D7:52:67:C0:5F
Authority key identifier: 5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
Certificate issuer: /CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Certificate serial: 019511A26B2F53009CB672E8782DC391E006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 02:00:11 +0000
Manifest this update: Mon 17 Feb 2025 02:00:11 +0000
Manifest next update: Tue 18 Feb 2025 02:00:11 +0000
Files and hashes: 1: XCnLotrPDvn6IgkAMrsVmhCRQPA.crl (hash: UIdinUFI+oV6IR0aBgM0gZ2ClVLdiGF/yp4Wg7ErsYY=)
2: uMKYK0zWnMRt1XBJkaQ1CMnyyVw.roa (hash: yhNmYUr+FS9v4wFEYBgKw1+Munbk5IEg7AdZjbcucQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:6b:2f:53:00:9c:b6:72:e8:78:2d:c3:91:e0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Validity
Not Before: Feb 17 02:00:11 2025 GMT
Not After : Feb 18 02:00:11 2025 GMT
Subject: CN=f74e50a8d8db55b2956831c9fc1cdfd75267c05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:fe:0c:39:8e:7d:34:06:b0:e4:3e:6e:c9:
f8:e2:b6:26:a4:dc:e3:5d:87:14:7e:8d:27:e9:41:
81:bf:b0:b1:b7:80:cb:a5:7e:2b:52:68:38:62:dd:
7d:76:8b:64:10:87:3d:09:85:25:4f:b8:19:5e:76:
16:14:15:80:c2:6c:54:ac:d2:8f:8c:08:2b:3d:8a:
c9:da:a0:81:db:2b:ce:95:25:b1:dd:0c:3e:8d:cc:
96:a5:ec:24:62:b7:32:a6:e8:f2:76:99:af:86:e1:
b0:db:1a:7d:a8:db:ff:ef:e5:92:04:15:b7:1e:a2:
9b:75:4b:de:c2:b5:ae:4e:46:3f:e1:ff:e7:5e:0c:
28:10:d8:6b:77:af:36:78:2b:6b:a4:7f:ed:2a:08:
2b:bd:96:7f:db:f5:47:f8:bd:83:6a:0c:f7:ec:4d:
0a:f4:e2:04:54:ad:ad:6b:3f:f0:bd:08:56:f2:92:
4c:94:6d:ea:9c:21:3f:56:68:17:90:d3:35:05:58:
a5:51:80:2e:cf:6e:0d:0c:f0:72:77:ae:db:51:3c:
b9:18:fa:8a:bd:5d:09:a0:fa:8a:d2:1f:b6:9b:e5:
72:b4:0d:ab:ef:8c:c4:95:13:96:21:2e:c3:c3:5a:
45:e6:49:75:c1:98:82:da:d6:24:88:5d:4f:0a:a3:
5e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4E:50:A8:D8:DB:55:B2:95:68:31:C9:FC:1C:DF:D7:52:67:C0:5F
X509v3 Authority Key Identifier:
keyid:5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:4d:a0:42:1a:85:b4:aa:6b:4e:d2:cf:ee:b2:ad:66:d1:89:
7b:3f:66:e4:7b:89:2d:53:a6:fe:0e:88:7a:08:a5:14:c4:26:
fe:28:50:75:a6:52:9a:c1:ba:10:d1:d0:8b:49:33:d6:a5:8b:
dd:19:f4:84:d5:52:f7:4f:0c:18:73:2b:03:2b:85:04:48:7f:
50:6d:1c:cb:1c:79:38:4e:e9:a8:6f:2d:fb:6a:4c:44:7f:c3:
3c:28:6d:05:cc:84:74:c2:30:2f:7f:fe:45:e1:e6:68:11:82:
f1:1d:86:af:bc:87:85:37:46:57:0b:66:5b:be:f6:ad:e3:98:
3b:db:5c:8f:3c:50:cc:a4:1e:bd:6c:02:c1:a9:96:58:18:79:
ab:92:d0:84:75:2f:92:66:5c:d6:0a:4f:6b:45:ff:6e:75:08:
95:e6:06:b1:98:d8:60:da:c8:01:2d:38:9e:49:11:59:ac:7d:
ac:63:a5:71:09:66:40:03:94:23:da:54:c3:0f:29:7f:fc:01:
ee:9b:20:06:9e:da:d7:49:6c:05:cc:b9:b7:12:60:2a:04:6e:
ae:94:03:47:0e:eb:35:1a:80:6d:06:8a:3b:ef:48:0b:ae:ac:
90:23:47:be:1e:b2:dc:f4:cd:a9:b9:3b:d3:af:3f:bc:21:c1:
22:d5:87:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:37 2025 by rpki-client