Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
File: XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft (raw, json)
Hash identifier: ieZhKDMjdQN5stb5zKVI/1rWDxBEC+vs8tLrof3ZDzs=
Subject key identifier: 39:6F:7B:A3:F5:C7:FC:10:06:03:3F:4E:21:B2:70:D9:88:42:25:34
Authority key identifier: 5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75
Certificate issuer: /CN=5c757007aebf00098a800228db1f5930ee66e675
Certificate serial: 0194C4630CCB3D688DE4C8542842065127BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
Manifest number: 0434
Signing time: Sun 02 Feb 2025 02:00:13 +0000
Manifest this update: Sun 02 Feb 2025 02:00:13 +0000
Manifest next update: Mon 03 Feb 2025 02:00:13 +0000
Files and hashes: 1: XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl (hash: r3Z7ixx2Us3KNfd/Pu29Eykmfy+iqp+fK3FFN7Kvtxs=)
2: zeSSBsoxeiaEub6sPGDgBihsYlQ.roa (hash: ZJtLDNZbI5epQGziT22ZjYkOk6GcLflWv5h+Gm6/V1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:0c:cb:3d:68:8d:e4:c8:54:28:42:06:51:27:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c757007aebf00098a800228db1f5930ee66e675
Validity
Not Before: Feb 2 02:00:13 2025 GMT
Not After : Feb 3 02:00:13 2025 GMT
Subject: CN=396f7ba3f5c7fc1006033f4e21b270d988422534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0e:c9:5b:d4:72:09:dc:ce:85:8a:d5:2a:22:
7f:0d:b3:a7:98:4b:4a:1d:97:46:73:0d:b2:9a:e7:
fb:52:1b:96:97:8e:b9:48:e9:cc:49:19:ae:50:c3:
c6:2d:4f:84:25:32:f8:58:52:e8:06:12:75:57:a5:
10:f2:de:10:58:ba:b2:8f:86:a2:64:1c:72:19:32:
8b:73:db:54:fc:5c:16:f8:b3:19:b1:00:7b:17:84:
89:e6:94:e1:fe:aa:49:f9:46:12:9d:03:5d:b3:c2:
da:aa:23:b4:a2:59:cd:e2:39:00:6d:c2:e6:e1:53:
68:ac:a2:d3:0c:b4:9b:13:fc:01:76:97:f1:fb:f4:
9a:7b:55:f6:a4:2b:04:44:7d:b2:c5:44:79:a8:b1:
40:3b:22:1d:19:8b:94:42:fe:bd:f2:86:18:68:65:
7c:a0:8d:f2:40:88:f1:52:af:30:23:2a:e4:a6:cd:
79:df:19:47:47:c9:33:53:85:f4:0e:b6:de:c2:c2:
63:e6:c9:33:e3:17:8a:73:b5:04:86:7d:e9:c3:05:
48:59:b0:63:3c:39:dd:84:13:d0:b4:a6:5a:41:70:
4c:79:2c:36:f4:7d:bc:df:52:be:2b:c4:16:a7:5e:
62:dc:ec:30:15:9c:1a:ce:d0:6f:12:97:31:18:70:
1b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6F:7B:A3:F5:C7:FC:10:06:03:3F:4E:21:B2:70:D9:88:42:25:34
X509v3 Authority Key Identifier:
keyid:5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:5c:cb:c7:81:b0:76:ed:67:05:8d:76:68:bd:2c:c9:f2:64:
68:88:cd:b9:18:32:db:15:c8:3a:fd:82:63:ab:9d:a1:d9:1c:
d1:82:e2:7d:cc:5e:08:71:46:ab:66:37:0d:fc:85:90:a0:27:
70:60:57:11:49:0c:5d:32:5d:30:73:3f:6f:2c:5d:57:df:02:
4c:ba:59:5f:d1:3f:d0:fb:8d:a9:9e:28:cc:d6:bb:aa:93:83:
9b:88:03:ae:30:a2:34:ed:6a:3f:09:3d:39:8e:1b:64:10:06:
96:a2:5e:c5:dc:78:46:10:11:65:6c:ab:0e:f2:d2:98:dc:39:
b0:4e:fd:54:ef:5b:fe:1d:ab:f4:3d:80:5f:a6:e6:8b:ee:b4:
7d:38:93:a7:27:66:26:04:b3:00:39:8e:c3:dc:c3:4c:af:f9:
64:9d:29:15:59:2b:b2:00:85:36:37:05:bb:75:d0:21:fb:38:
70:42:64:bb:a9:85:20:7d:c6:d3:52:d2:10:b3:cf:64:2a:f2:
b6:ea:5f:21:87:f4:89:03:5f:51:c1:12:57:bc:d1:1c:65:b8:
1b:8e:6a:e0:c3:91:f8:0d:90:87:51:06:f4:a6:e8:61:a8:bd:
39:ec:74:fd:4f:3b:ce:30:62:b5:a0:b7:7f:9c:bd:37:b5:64:
ef:66:97:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:39 2025 by rpki-client