Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft
File: XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft (raw, json)
Hash identifier: 7I1UIIszPwLTbmTbpQ2Xzqd2Fh4TZxpKcPVGPDyeLl4=
Subject key identifier: FA:9F:35:1D:5E:B7:21:9A:3B:99:85:C4:C0:20:F6:55:EB:AD:16:D0
Authority key identifier: 5E:EC:D2:03:10:7A:6E:4C:09:62:ED:5A:C4:18:09:E8:C9:2F:D6:B7
Certificate issuer: /CN=5eecd203107a6e4c0962ed5ac41809e8c92fd6b7
Certificate serial: 0194C4637A5F341387FF4A2F893DC676D104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft
Manifest number: 083B
Signing time: Sun 02 Feb 2025 02:00:41 +0000
Manifest this update: Sun 02 Feb 2025 02:00:41 +0000
Manifest next update: Mon 03 Feb 2025 02:00:41 +0000
Files and hashes: 1: XuzSAxB6bkwJYu1axBgJ6Mkv1rc.crl (hash: t3jXwbx8rFg6XXiEs8eGSTjRDpYOAIC2e7o5RACffwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:7a:5f:34:13:87:ff:4a:2f:89:3d:c6:76:d1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eecd203107a6e4c0962ed5ac41809e8c92fd6b7
Validity
Not Before: Feb 2 02:00:41 2025 GMT
Not After : Feb 3 02:00:41 2025 GMT
Subject: CN=fa9f351d5eb7219a3b9985c4c020f655ebad16d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8f:af:e3:b1:35:1b:02:ae:42:25:f6:df:d8:
a9:56:a8:af:85:76:6d:57:c8:4d:5b:28:35:e2:01:
d4:b6:fc:40:48:f7:c8:33:93:ac:1e:fb:7d:2f:9f:
c5:0f:cc:a9:ee:a9:32:5d:bd:a4:9a:39:b6:31:05:
ae:12:30:56:e5:0b:9d:ec:9e:5f:ee:0c:9e:58:8c:
5f:ce:9d:2d:c7:06:32:1c:2c:fa:35:70:12:68:c8:
0c:88:8c:4a:cd:38:38:46:f7:8b:71:ab:c6:cd:ea:
2f:02:fa:3d:59:1b:b9:f4:e6:c5:80:94:48:7e:0c:
b9:56:38:58:2d:70:89:ad:c2:16:5d:f4:06:a4:78:
c8:00:e9:0a:a7:e9:50:a3:bd:b1:9f:e3:57:5d:a6:
b9:ab:57:57:fc:22:a7:c8:3f:a3:5b:25:72:96:6e:
b2:b5:f5:7b:67:b5:36:a0:d1:46:3e:97:0b:1f:55:
3d:10:89:ce:08:cc:84:08:bd:9b:40:5d:8b:48:47:
9a:87:08:d4:02:36:c1:f1:31:e0:bb:65:3d:34:59:
df:22:52:3a:b6:d7:ea:7e:1f:82:4e:07:13:b7:5f:
c9:d7:3a:74:c4:44:6c:d3:ac:bc:03:20:64:2b:bd:
e5:c2:ed:8c:92:c3:d9:28:a3:dc:17:16:4d:6c:93:
9e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9F:35:1D:5E:B7:21:9A:3B:99:85:C4:C0:20:F6:55:EB:AD:16:D0
X509v3 Authority Key Identifier:
keyid:5E:EC:D2:03:10:7A:6E:4C:09:62:ED:5A:C4:18:09:E8:C9:2F:D6:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3d:df:3f:32:46:de:42:63:0e:c7:22:ca:a1:21:f1:ba:ba:
5a:59:05:19:92:b4:a8:b8:ac:13:dc:6c:14:65:66:19:fc:6f:
91:5d:e4:56:77:24:90:d0:f0:f7:2e:c8:d8:b8:31:40:0d:cd:
55:2d:17:02:14:14:59:36:1d:eb:36:d4:d7:b8:1b:db:61:24:
6a:6c:54:a3:6b:84:85:19:fa:7b:25:9f:0d:73:63:5e:27:97:
d6:dd:cc:20:a0:26:b4:c9:6d:0c:57:7e:f2:bc:a1:8f:03:62:
63:33:6a:97:a3:fc:e2:57:c4:c9:59:e9:26:20:90:85:a5:59:
25:9a:d2:2a:c6:f4:29:e1:3d:39:64:9c:69:3d:db:b7:5d:e2:
7c:dc:3e:93:9b:dc:57:df:13:fe:c7:e1:ff:05:a7:13:f9:73:
d8:39:d6:93:e5:47:21:2a:fb:4b:db:66:89:e8:ae:d6:5c:2b:
01:5e:9c:d6:b4:89:ae:b4:74:53:b2:29:02:31:42:60:ac:05:
63:ef:0d:b0:06:97:5d:35:d3:99:b3:18:42:c5:37:4a:86:5c:
e1:7a:d2:3f:70:70:47:0d:9d:ff:c2:34:3b:80:1e:3e:1a:c7:
04:0b:26:4a:64:74:2d:9e:f9:18:39:6d:a5:4f:58:a0:47:58:
da:5f:7a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:48 2025 by rpki-client