Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
File: xU3YgoUsxFhrH-40wFAdXbfWDws.mft (raw, json)
Hash identifier: MDfeDxdVkrOPDBYTZHkqtCa/K3q1H8rVSZGBf6y+mDw=
Subject key identifier: 0D:F1:60:64:3D:75:A2:94:33:F1:32:E1:E7:0D:7A:51:FA:6F:23:C0
Authority key identifier: C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B
Certificate issuer: /CN=c54dd882852cc4586b1fee34c0501d5db7d60f0b
Certificate serial: 0194BB295ABA14E9AE711C3F7D028EB434B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
Manifest number: 05EE
Signing time: Fri 31 Jan 2025 07:00:37 +0000
Manifest this update: Fri 31 Jan 2025 07:00:37 +0000
Manifest next update: Sat 01 Feb 2025 07:00:37 +0000
Files and hashes: 1: XArLVttX_wCBnKO2u8bWM8Vk3NU.roa (hash: BE5h5QGSzKEJoBRH8Cvw/x+Z7DD6UePHMldATT7VyV4=)
2: xU3YgoUsxFhrH-40wFAdXbfWDws.crl (hash: zrlV0RBiiyzcBEOIaoyi2A7qvh1E01YdWwJqKhsZG3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:5a:ba:14:e9:ae:71:1c:3f:7d:02:8e:b4:34:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54dd882852cc4586b1fee34c0501d5db7d60f0b
Validity
Not Before: Jan 31 07:00:37 2025 GMT
Not After : Feb 1 07:00:37 2025 GMT
Subject: CN=0df160643d75a29433f132e1e70d7a51fa6f23c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a7:1b:f4:0e:3d:1a:96:f8:50:d1:7c:8a:e8:
60:07:89:60:5c:a4:6b:48:0e:c2:95:b2:cd:f4:12:
7a:56:c1:01:19:69:a3:f3:ab:fd:0a:65:d7:64:42:
5f:af:a1:9f:49:b5:31:bf:e5:b5:fc:f2:04:30:41:
6f:7c:61:91:bc:18:fc:2d:c9:08:80:bc:3a:27:9a:
59:f3:e2:d6:6b:55:11:d2:8c:4e:bd:24:bf:fa:fc:
1b:7f:50:86:12:80:45:57:60:38:d1:0a:09:e5:ce:
c9:59:d4:c3:7d:2c:23:6e:f6:6c:ab:ea:fb:fb:b9:
e2:58:55:f4:3f:a0:96:e3:38:21:d6:2e:9e:0e:16:
70:a7:c3:0f:db:7d:7d:f5:1c:3c:77:ae:54:d2:77:
40:2d:2b:2e:9c:c3:23:4c:58:0c:bf:df:f9:cc:51:
ce:cd:a9:79:a8:e9:8d:7c:69:e4:14:31:52:7d:bf:
45:62:42:0e:91:c8:8e:6b:3d:ca:2d:3c:e9:8e:2f:
b0:e8:81:77:25:fa:ed:40:f0:80:3f:e6:63:e6:90:
4b:4f:83:03:17:c9:4e:9b:f2:3b:88:ef:5f:f1:30:
86:0f:04:15:73:ec:c3:21:0d:44:cc:98:b0:60:a5:
82:4f:b6:e6:cc:a9:95:5a:ab:79:29:13:51:24:35:
cd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F1:60:64:3D:75:A2:94:33:F1:32:E1:E7:0D:7A:51:FA:6F:23:C0
X509v3 Authority Key Identifier:
keyid:C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:22:5c:c1:16:14:6a:cd:86:97:46:ce:12:fb:e2:da:af:62:
a0:77:80:8d:55:e6:3b:1a:09:da:fe:f8:c4:b6:5a:3c:a4:a1:
7f:a7:87:25:19:3d:bf:6a:3e:47:56:d8:08:ac:48:ae:37:e0:
5a:3e:ec:6d:ab:77:ae:f8:f2:18:df:66:af:2f:7b:0e:88:3f:
b0:69:a7:d0:c5:ec:76:25:5b:27:65:df:a1:ea:8f:94:88:86:
4e:8b:d7:ed:73:8d:99:32:d0:5d:c4:8c:dc:05:34:bf:82:c7:
ce:96:c2:f8:b0:c0:b8:a4:61:20:6a:67:59:d0:55:c7:ff:67:
7c:d5:51:84:33:e8:e4:83:8a:01:ba:8d:31:47:1e:e2:0c:eb:
11:ca:12:30:84:e1:08:19:d6:29:09:fb:a5:d3:cf:c0:12:c2:
d9:bb:5d:4d:d3:d9:70:c0:6a:82:15:ef:c7:18:cf:65:f5:79:
61:c5:43:7e:a8:f7:34:18:cf:43:43:42:71:eb:47:82:b2:94:
d6:44:f1:46:68:0d:c5:3d:ad:1e:c5:70:af:61:94:78:c0:0e:
53:8e:f3:2e:04:d9:70:81:e1:0d:b9:bf:07:be:d4:df:ef:4b:
9f:7c:2a:d6:bf:a7:48:39:7b:09:77:99:3b:27:08:f6:6c:60:
60:10:ca:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:45 2025 by rpki-client on console-fra.rpki-client.org