Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
File: xVoeQFH2j-i3IOg92tM7dlHLfvk.mft (raw, json)
Hash identifier: wnoouheaYTMy0mVaG4QMCsx/xTyFPiGJnu/S8p3nb64=
Subject key identifier: 8A:5D:3E:37:1B:5B:87:FE:6C:B4:71:4C:E7:7B:D5:C4:5F:08:35:9C
Authority key identifier: C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
Certificate issuer: /CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Certificate serial: 0194C463B830B81A8A6E0E833092C64121C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
Manifest number: 0AB0
Signing time: Sun 02 Feb 2025 02:00:57 +0000
Manifest this update: Sun 02 Feb 2025 02:00:57 +0000
Manifest next update: Mon 03 Feb 2025 02:00:57 +0000
Files and hashes: 1: ZCz_B_c4Ab7TJ-Wdj6CNbe4vJM8.roa (hash: GKBVpj9NFqT4kWPy6LEsdkgiDMQ6Chmhcoso+7TmqfM=)
2: xVoeQFH2j-i3IOg92tM7dlHLfvk.crl (hash: 3Rs/X61+XXFpLQN6C4GkEHoPjh0Eeckkjy3/aAqatjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:b8:30:b8:1a:8a:6e:0e:83:30:92:c6:41:21:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Validity
Not Before: Feb 2 02:00:57 2025 GMT
Not After : Feb 3 02:00:57 2025 GMT
Subject: CN=8a5d3e371b5b87fe6cb4714ce77bd5c45f08359c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:d3:15:d9:67:1d:24:c7:08:7b:43:99:5c:
d6:ac:59:eb:5d:a2:c2:33:8b:6c:39:b3:d1:bf:2f:
54:8d:9a:5d:af:38:59:c6:41:0e:2a:53:c6:28:bf:
99:03:8d:85:ab:67:55:12:a7:29:28:af:a3:03:da:
16:c8:3e:17:b6:4b:cc:29:bd:54:39:25:21:24:7e:
9f:0e:4c:bb:26:2e:0d:0c:31:7a:af:d9:bc:94:5d:
7c:fe:40:0f:0a:46:c0:77:7a:9b:6c:64:db:ae:71:
2c:b9:ae:75:5f:11:0b:ff:ef:5d:f6:c5:c2:68:64:
30:92:28:82:3e:8e:cc:83:40:cd:74:14:95:57:6c:
08:75:69:a7:e8:e1:ab:8b:86:c4:31:ca:01:e4:11:
bd:02:03:7d:9d:65:46:c4:db:b4:30:84:bf:88:bd:
bb:04:b6:32:1a:1a:73:c2:ca:2e:cd:62:52:d6:f1:
26:5c:eb:71:ba:07:e2:ed:76:a4:9c:52:bc:b8:7b:
0b:a7:de:98:89:f6:7a:2d:7e:68:8c:f8:a4:59:6f:
f9:12:84:5f:0d:df:7a:68:72:59:6b:a0:76:44:de:
c4:d6:20:94:92:23:21:8f:50:b9:8d:e6:b8:5a:ca:
38:32:ab:3d:b9:68:45:35:bf:ba:97:5e:c6:93:a7:
60:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5D:3E:37:1B:5B:87:FE:6C:B4:71:4C:E7:7B:D5:C4:5F:08:35:9C
X509v3 Authority Key Identifier:
keyid:C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:05:6d:a7:80:2d:3a:e0:00:81:bb:7a:25:3f:aa:d2:cf:47:
9f:dd:ad:2b:c5:16:41:cc:6c:1a:69:62:14:8a:7d:c2:ef:aa:
fb:83:e7:1d:51:f4:a2:b0:ed:84:b0:b4:ad:47:d4:3b:5b:ff:
00:75:49:a5:8d:5f:78:0f:66:f3:84:65:c6:f2:cd:33:87:78:
e5:bc:1d:f3:ce:4d:46:5c:b6:ca:aa:c7:bc:13:ae:36:05:4c:
82:3b:22:b9:d9:7a:dc:91:54:a7:97:91:43:89:c9:fe:dd:b0:
a9:c9:30:e4:42:ea:da:99:25:9c:e3:8e:e3:9c:5a:5e:98:00:
e6:a6:53:e4:62:b0:41:d6:23:96:84:5e:b0:89:66:b7:37:43:
7f:4c:fc:a7:3e:f9:88:c0:2e:1a:50:f0:a2:ad:3f:34:d4:39:
29:85:17:e0:1b:62:e5:b0:4e:d2:12:9d:c2:15:59:7d:81:87:
9f:6a:42:cf:15:14:e1:16:0b:a7:6e:d0:85:ba:21:04:bc:fd:
df:24:12:67:9d:aa:76:12:74:6c:61:bd:2f:0b:27:62:ad:b7:
4b:bb:dc:5f:4d:ed:dd:3f:01:a9:24:ef:89:d5:89:eb:2b:42:
38:57:24:fb:fb:94:3c:c7:25:0b:42:ed:4e:9e:aa:7f:bd:b7:
eb:29:f3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:29 2025 by rpki-client