Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
File: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft (raw, json)
Hash identifier: o0ydvBcs7/OXPyEKO/nBYqXfhAeEZ60XOqApS5fBMkg=
Subject key identifier: 36:7D:24:4B:79:02:F6:1D:7B:01:EF:31:F4:BC:EA:6E:BA:8C:B5:DC
Authority key identifier: 5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30
Certificate issuer: /CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
Certificate serial: 0194BABBDC73D29AD8ADA6DA309721147480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
Manifest number: 10DE
Signing time: Fri 31 Jan 2025 05:01:01 +0000
Manifest this update: Fri 31 Jan 2025 05:01:01 +0000
Manifest next update: Sat 01 Feb 2025 05:01:01 +0000
Files and hashes: 1: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl (hash: NXrY7FvjGbkFAy0t4M2eWBfwcWPdZiusqI697gJoWbc=)
2: gbEdvQz4q0AdyM98MXiZjERkDX4.roa (hash: QnkSlwi1hREwXQkmvd9zqXoHe57V+gXhpktYubECCFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:dc:73:d2:9a:d8:ad:a6:da:30:97:21:14:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
Validity
Not Before: Jan 31 05:01:01 2025 GMT
Not After : Feb 1 05:01:01 2025 GMT
Subject: CN=367d244b7902f61d7b01ef31f4bcea6eba8cb5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:55:b1:99:ca:e3:a5:45:d4:a8:f0:12:66:
94:22:ed:90:34:16:42:9d:73:82:ad:59:a7:5e:c7:
b6:c3:1e:07:c0:6b:47:7f:c8:63:ba:ea:a5:b4:e1:
e7:1f:d8:33:6f:03:11:70:fe:fd:d9:04:78:46:20:
3f:67:2b:c8:41:33:cb:2f:c0:a1:4c:93:16:92:1b:
2d:c7:65:07:c3:c3:50:75:00:f4:10:1e:33:96:c9:
f4:c2:2c:d5:26:9f:74:af:b9:65:23:e3:41:dd:f5:
80:97:48:3d:19:68:36:d4:a3:8b:bb:e2:d6:43:c2:
fb:7c:f4:78:b6:55:24:53:1d:3d:b3:d0:f8:01:9e:
6c:99:48:53:27:ff:1b:2e:37:ed:38:fc:62:a9:68:
c5:d6:3d:e8:9e:37:64:d5:41:fa:ed:91:ee:a8:9b:
0d:fb:ac:62:e3:d8:34:85:46:d4:3f:bd:20:47:e4:
12:6a:72:1e:0b:57:0e:9f:51:0e:89:63:26:ac:d2:
cd:28:6c:d5:7f:b5:3c:f8:ce:65:fa:3a:72:b0:30:
5f:6a:32:03:02:d0:53:ef:b8:59:c3:88:f8:79:2e:
5d:67:fa:94:ce:0a:33:d5:f2:11:34:32:82:2f:4e:
88:19:f4:42:4c:42:57:c6:c9:a4:a5:98:ad:a2:7f:
67:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7D:24:4B:79:02:F6:1D:7B:01:EF:31:F4:BC:EA:6E:BA:8C:B5:DC
X509v3 Authority Key Identifier:
keyid:5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a8:bd:19:7e:25:cc:80:e1:e7:d3:6b:19:53:d1:53:60:16:
fa:30:22:2c:e1:fd:95:27:7b:ec:32:86:d8:12:22:98:04:c4:
25:3a:71:8e:77:cf:e6:a4:e1:f9:af:e5:6c:f6:f3:45:22:2d:
cf:5e:71:ff:97:1f:d7:ab:59:42:1a:43:d3:eb:82:99:8f:72:
a0:a4:23:a0:be:49:22:08:fa:f8:a1:15:09:84:cf:e5:33:b4:
da:35:e7:26:ee:12:c4:6e:88:77:ac:c4:50:b2:7b:b0:9d:17:
1e:c0:6f:cd:ef:5d:9a:02:63:98:0f:18:ad:e2:1e:f9:c0:52:
34:8f:92:be:d4:bc:cc:80:91:a0:f4:0a:8c:6c:c9:c0:bb:ba:
ea:31:e2:b8:35:7f:ce:45:aa:90:97:34:b9:ba:7d:31:e5:27:
dc:68:6d:b9:a5:17:8e:5a:d8:0d:90:e8:da:10:d8:35:cb:d1:
b9:fd:69:6e:c5:5e:68:06:c9:39:2b:63:b1:b7:94:c6:5e:1d:
c0:60:47:bc:07:27:a7:6a:7a:29:80:d4:ba:9d:88:a9:ba:64:
cb:38:e0:4e:28:91:64:56:87:e2:a9:38:4b:c5:57:dc:b1:fa:
5d:57:67:2d:d3:fc:28:bd:b9:08:5c:43:71:24:96:0d:9d:65:
07:9e:3f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:49 2025 by rpki-client on console-fra.rpki-client.org