Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
File: xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft (raw, json)
Hash identifier: N1D04Ja0vxFvyAC+vCEnUfOahrHzsOUBiW75ActrHWA=
Subject key identifier: 2F:DF:50:C0:21:94:D1:9B:79:CD:60:41:3F:1D:2C:94:37:8B:CD:85
Authority key identifier: C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
Certificate issuer: /CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Certificate serial: 0194BB5FE8E50F33F8FA502CDE4DF9C50D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 08:00:12 +0000
Manifest this update: Fri 31 Jan 2025 08:00:12 +0000
Manifest next update: Sat 01 Feb 2025 08:00:12 +0000
Files and hashes: 1: p5qeM8pBglCmH9S_-by9le3dhdY.roa (hash: gGcCXxeFnJoe5nYFMp9atB7TAawQ8UzeF434Tg+y5lc=)
2: pzUgONhqi68QY0VvGpWltJYJNYw.roa (hash: Uq9NSVRaA6mFyoWNmYT8pc0z0L/fxwW0Qlau9RSv6Cw=)
3: xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl (hash: Xxo83vO8k1cylSGcGXGCoTa8AcCCcKgqcAqb45BzlqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:e8:e5:0f:33:f8:fa:50:2c:de:4d:f9:c5:0d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Validity
Not Before: Jan 31 08:00:12 2025 GMT
Not After : Feb 1 08:00:12 2025 GMT
Subject: CN=2fdf50c02194d19b79cd60413f1d2c94378bcd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b1:85:88:2d:11:4f:ac:e1:d3:56:b9:7d:2e:
99:c3:4f:16:10:96:e7:f2:d9:4d:97:b6:44:ab:c5:
ff:82:e1:a3:1d:9f:44:90:57:07:b7:8f:27:43:73:
67:71:50:e3:09:0c:63:11:c7:b9:2d:62:dc:46:f5:
de:f4:f9:8d:26:be:4e:0f:a0:8d:d0:5c:30:70:d6:
2c:2b:30:31:c2:b3:e7:df:3f:97:2a:06:04:37:29:
f8:3c:0a:11:60:fa:58:fa:fd:c4:6b:d6:31:52:de:
0b:73:ac:af:2d:d7:dd:31:48:54:e8:50:61:b1:0e:
be:96:16:43:de:a2:85:fb:96:3a:fc:d4:fc:b9:f6:
25:00:62:6e:77:4e:db:87:91:06:02:6e:dd:a3:d0:
77:51:1e:d5:a8:13:39:47:96:68:78:9c:a0:2b:35:
b4:21:2c:42:5e:ab:08:b5:e3:15:3f:cd:b0:a3:66:
8d:6f:bb:cb:f7:fa:54:6c:3f:e1:2f:11:0a:25:e4:
a8:3e:11:a8:b0:a0:46:b8:71:84:57:4c:6c:51:bc:
7b:37:27:9c:f3:dc:50:83:85:a6:b6:e6:31:33:7e:
3f:13:68:7d:60:d0:06:58:24:b8:42:5a:30:8b:9a:
c2:35:e5:98:34:88:65:12:a4:34:b2:83:4e:25:17:
8b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DF:50:C0:21:94:D1:9B:79:CD:60:41:3F:1D:2C:94:37:8B:CD:85
X509v3 Authority Key Identifier:
keyid:C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:35:8e:31:42:d4:ff:a3:65:6a:1c:17:0c:d0:63:14:ef:13:
e0:79:39:80:f9:32:63:df:84:bd:dc:0c:c8:8d:2e:a0:38:38:
ec:31:e9:2b:8a:b8:cb:87:0f:08:eb:e6:56:42:5c:4d:e3:77:
08:53:64:28:8b:75:88:55:27:52:88:8b:f3:d0:03:9b:06:b7:
96:b7:80:69:e3:63:8f:09:a9:4f:30:87:54:e6:e8:31:ee:ee:
0b:1c:38:bc:a4:f9:02:65:b6:e1:4b:90:d0:25:cc:0b:5b:0f:
29:01:91:14:f4:fc:ea:74:07:1a:e2:0f:62:00:40:72:ad:6f:
e0:7e:fd:64:06:0b:a1:6c:d6:e9:30:f2:dd:ef:02:aa:b1:71:
c7:d2:dd:e3:76:80:7e:56:63:94:69:ef:18:ea:eb:cd:1e:a0:
de:df:79:2a:df:64:9e:4a:ab:d1:98:fc:df:37:c3:51:a7:3f:
f7:4e:fb:3b:84:41:39:af:a6:4e:f9:3e:86:20:23:1c:da:f7:
6c:e9:c1:ff:d2:cb:54:a7:97:5f:3e:1c:b3:b5:0a:91:99:72:
28:2c:d1:03:3b:ba:f5:25:fe:3a:40:4c:b9:10:b4:de:a5:ba:
69:ec:40:dd:04:be:df:02:d3:14:7d:9b:47:63:9e:d9:b9:3c:
22:9d:90:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:37 2025 by rpki-client on console-fra.rpki-client.org