Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
File: xEuito7PJQE5XMZUCOiTWsnYbJc.mft (raw, json)
Hash identifier: nm6R6W6XrI2WgQ1EtBdeAFcGIerR60ueVDdXDna9bSM=
Subject key identifier: 84:C4:E6:75:C9:39:3D:33:5F:0D:57:B0:B5:C7:8B:A1:4B:09:B8:D6
Authority key identifier: C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97
Certificate issuer: /CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
Certificate serial: 0194C463909FFB25FB3D3BADCD783A6EC1D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
Manifest number: 0109
Signing time: Sun 02 Feb 2025 02:00:46 +0000
Manifest this update: Sun 02 Feb 2025 02:00:46 +0000
Manifest next update: Mon 03 Feb 2025 02:00:46 +0000
Files and hashes: 1: xEuito7PJQE5XMZUCOiTWsnYbJc.crl (hash: LcxNxTtlXkH5Gdr1pjKCI30fFefZps528qdV+fuPQAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:90:9f:fb:25:fb:3d:3b:ad:cd:78:3a:6e:c1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
Validity
Not Before: Feb 2 02:00:46 2025 GMT
Not After : Feb 3 02:00:46 2025 GMT
Subject: CN=84c4e675c9393d335f0d57b0b5c78ba14b09b8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a6:4f:a6:23:8d:64:a3:3a:84:fc:ca:1b:72:
d0:13:a9:8d:f0:94:a3:f2:7d:80:fd:5e:72:0f:2f:
c6:b9:15:1c:4c:66:f0:bd:c7:55:e4:95:b0:0e:58:
47:8a:ae:45:c6:b6:40:c0:b8:bc:65:3b:0a:57:4a:
ad:e6:c4:49:a9:eb:c7:84:26:a7:1b:db:30:d5:72:
12:2c:1b:e4:70:33:ae:d2:1f:05:9f:0a:90:f7:ac:
4e:c1:ad:1d:f7:c9:3d:36:ff:e9:64:ed:77:a3:98:
ae:8a:a5:c6:4c:c6:0c:c8:20:52:05:3f:27:13:99:
b9:98:3d:99:d5:88:d3:23:2e:0c:7c:2c:7b:32:e8:
db:02:7d:dd:b7:5c:dd:a3:b5:fe:76:86:7f:fc:65:
fd:69:91:4c:1c:d5:80:4c:bf:45:fd:cc:1a:5c:54:
4a:47:0a:c4:69:43:38:a4:09:5b:e4:10:c1:0b:4f:
6a:55:31:03:b9:46:63:dc:66:26:4b:02:4c:98:9f:
9a:f0:a9:10:7a:50:4c:62:ae:48:ab:cb:04:d5:39:
87:75:8c:2a:a0:d7:a3:49:5a:d0:ab:8b:2f:27:c9:
db:ea:2e:88:c1:ef:1a:4c:3c:12:8e:4e:37:51:e4:
80:d2:be:36:61:a2:a4:9c:90:4e:3b:47:8c:2d:6f:
37:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C4:E6:75:C9:39:3D:33:5F:0D:57:B0:B5:C7:8B:A1:4B:09:B8:D6
X509v3 Authority Key Identifier:
keyid:C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:37:76:bc:93:9b:0e:87:61:63:94:5c:39:f4:0e:ac:9c:8b:
65:2f:11:d1:dc:16:49:37:8f:75:94:7c:9b:a6:62:a1:c7:95:
41:63:5a:80:74:88:e4:0b:e7:48:f2:29:89:6e:fe:a7:67:94:
9f:07:2d:20:f5:33:73:b5:2d:83:92:18:44:16:58:06:57:f8:
9d:20:b0:01:55:4a:ef:86:53:3f:45:f2:c6:2f:d8:76:29:e6:
ee:4c:25:63:9e:2a:ff:d2:a9:fd:2b:d6:03:4f:36:2e:fb:f9:
0f:17:31:5e:bf:aa:e1:24:71:4e:93:f6:47:7a:e2:3f:ba:83:
d8:37:42:88:ce:0d:ea:59:60:fe:b8:4c:f7:f3:49:18:8c:1b:
6f:da:57:35:39:c3:08:35:9d:a9:ea:25:26:ac:ba:c5:08:23:
32:16:31:0e:dc:39:48:ec:41:6a:ed:ad:77:89:b4:6b:13:54:
98:e8:0a:53:9b:4a:1b:01:3a:7e:ba:24:aa:73:44:f8:a5:67:
c1:62:e8:a3:7d:6a:64:6b:b1:0b:6d:cd:bd:d3:74:f7:0a:75:
83:a4:76:6f:38:32:14:d9:03:8a:61:96:4c:fe:f2:e4:0c:c4:
80:0c:0b:b8:1d:46:12:87:6c:80:36:2d:6e:3b:8d:17:80:26:
57:bc:72:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:58:14 2025 by rpki-client