Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
File: XDodlz-bM5HorayqZk0bI9d48Ag.mft (raw, json)
Hash identifier: 64E0zWi5ychqMskqz+F7Ig+dMJNuSmq5Z6WuOOGeQTE=
Subject key identifier: 6C:E5:D5:3E:61:34:FB:B1:C7:F5:1A:37:EC:6E:A3:50:E0:00:A4:61
Authority key identifier: 5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
Certificate issuer: /CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Certificate serial: 0194BAF2189BA51774C0080978F3893EA82D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 06:00:15 +0000
Manifest this update: Fri 31 Jan 2025 06:00:15 +0000
Manifest next update: Sat 01 Feb 2025 06:00:15 +0000
Files and hashes: 1: XDodlz-bM5HorayqZk0bI9d48Ag.crl (hash: qnr8K5B8Fsa7QrirQ9Ax3kV6onTqBzNc5Ppv4YzJo6s=)
2: azbP8xztM6HoR6j7EeBVt4EbnIg.roa (hash: rva5hYZTrXadJatsMxoY0q+lj0tXHojolGsaODfl/yk=)
3: j7b7vmD8KPkdCnlVP71o2CqtU94.roa (hash: vTXrjDCvGjQOipbgO3jSLM/qIjBdRpKJ9yHdB1QKUs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:18:9b:a5:17:74:c0:08:09:78:f3:89:3e:a8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Validity
Not Before: Jan 31 06:00:15 2025 GMT
Not After : Feb 1 06:00:15 2025 GMT
Subject: CN=6ce5d53e6134fbb1c7f51a37ec6ea350e000a461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:41:c3:ef:56:8f:19:1c:ab:6d:29:34:04:
ae:a1:e9:94:3c:a0:df:fe:45:c4:97:82:c9:04:65:
f9:d7:8a:5a:c5:3d:5b:a2:0e:cf:63:46:54:c1:11:
91:5a:27:9e:ff:9c:23:be:ae:d8:18:a3:7d:f5:88:
ab:5f:2a:df:a9:a7:59:e8:d5:3b:40:a7:64:ed:bb:
5e:c8:01:48:aa:3a:3c:9a:ed:94:95:ca:9e:36:b9:
cc:97:b7:ec:bd:1c:a4:2f:5a:80:6d:9a:5c:c7:39:
71:bd:3e:d0:db:bc:4f:52:48:a4:ec:1d:86:ae:46:
5d:4c:af:77:6e:59:dc:4b:c7:93:11:b0:42:0e:d0:
06:c4:ff:12:50:51:1a:ed:f0:db:43:b5:48:de:e2:
93:1f:f8:09:a6:83:c2:7e:39:b0:5b:e4:c9:15:01:
81:b8:3e:cb:d4:28:bb:05:7a:f8:ea:0e:50:6a:99:
02:f7:e7:9a:24:99:01:df:8a:c0:2b:b2:63:73:97:
a3:3a:76:2d:ec:53:1e:61:ed:b2:b7:bd:48:02:79:
5a:f4:74:9d:02:9b:55:aa:84:f5:08:ef:7a:55:69:
7c:6f:46:a9:44:27:57:4d:c1:4a:17:80:1a:6c:9d:
70:5d:83:e5:64:e6:34:2e:e5:e2:35:8b:96:61:08:
95:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E5:D5:3E:61:34:FB:B1:C7:F5:1A:37:EC:6E:A3:50:E0:00:A4:61
X509v3 Authority Key Identifier:
keyid:5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:15:3c:1e:76:bf:45:7a:5c:fc:64:8d:8a:cf:d8:5e:cc:19:
34:68:25:1f:fd:d2:13:c0:b6:83:1f:61:88:f6:74:60:f5:4d:
47:37:da:37:d1:57:d0:d3:e3:08:78:f0:bf:ec:17:d4:7d:71:
7a:31:05:aa:c6:7b:b0:5f:14:19:e1:fb:ae:64:ad:59:55:de:
ef:17:3f:85:a0:99:41:ac:bf:ad:5f:31:26:d5:41:8f:6e:c4:
ad:34:51:1c:5a:bd:65:e2:20:aa:b4:46:31:93:70:01:7b:e2:
a4:21:36:f8:04:06:f5:66:67:e4:5d:96:ff:ea:2b:c9:8b:31:
53:08:2d:52:a3:27:89:10:5a:9d:d6:7c:0f:c0:46:f4:84:fc:
c1:ec:41:e3:bb:b7:a6:22:16:df:50:73:c3:05:fc:6a:4a:f4:
18:53:c9:36:7b:75:97:55:43:29:97:c9:e0:5f:fa:eb:47:8c:
bf:b0:fc:9a:35:fe:25:73:fa:7d:34:4f:56:70:81:6e:4d:b3:
ed:34:22:db:2f:bf:e2:1e:8e:60:b6:c8:96:e8:36:e9:29:f0:
ce:d9:60:e9:ad:d4:2b:b5:8c:7d:ed:75:14:f6:76:06:0c:42:
c8:db:b8:bf:62:6e:e4:3c:37:65:13:18:29:4d:fb:49:1d:f9:
37:c5:5f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:53 2025 by rpki-client on console-fra.rpki-client.org