Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
File: XD6sD3atIc1SRFk-TBe6Zxtejuk.mft (raw, json)
Hash identifier: W3rA3h67KieqrusDLZUBLDqtMfwC7LFumsmVTjlofnc=
Subject key identifier: 63:22:64:31:9E:3C:4E:4B:32:E6:00:AE:49:DE:98:26:F7:F4:EB:37
Authority key identifier: 5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
Certificate issuer: /CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Certificate serial: 0194BB604AC2D545CBBCEFE1A879FEC3CED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
Manifest number: 108B
Signing time: Fri 31 Jan 2025 08:00:37 +0000
Manifest this update: Fri 31 Jan 2025 08:00:37 +0000
Manifest next update: Sat 01 Feb 2025 08:00:37 +0000
Files and hashes: 1: XD6sD3atIc1SRFk-TBe6Zxtejuk.crl (hash: s5cmUNWm3e0cv66YJQstFXfQTES3Jl0NfsFSj6v1FTs=)
2: ml5z24U6xSCTuhnWBbQRxmv1hXU.roa (hash: NWPcXIF3UeWnsTiTzSSB4msAqIPsOtzwP/oaG1rR2kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:4a:c2:d5:45:cb:bc:ef:e1:a8:79:fe:c3:ce:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Validity
Not Before: Jan 31 08:00:37 2025 GMT
Not After : Feb 1 08:00:37 2025 GMT
Subject: CN=632264319e3c4e4b32e600ae49de9826f7f4eb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:45:d7:cf:08:32:13:ef:76:c7:a3:5b:24:
0f:3d:ca:59:2b:51:99:c7:22:db:c4:c1:7b:f6:29:
07:5d:d6:f7:28:d5:69:90:dc:52:d8:82:d1:06:04:
76:ae:05:13:5d:b9:12:84:8d:64:5a:72:f3:bc:ba:
b7:7e:f7:02:98:c9:6d:bb:cb:35:16:ff:1a:97:e1:
3e:00:02:8f:f5:38:16:93:74:bb:23:f4:bf:40:3c:
91:8d:28:40:e9:36:ef:dd:91:93:0c:cd:56:3e:ae:
39:eb:20:ac:67:bb:0f:40:ff:7d:4c:d7:f4:25:f1:
36:00:64:13:1f:bb:29:39:7c:bc:86:57:b1:3e:f2:
64:72:82:ab:e2:51:81:e4:3c:a7:38:f0:6d:95:38:
31:97:c6:e9:b3:b5:d2:bf:85:d1:3c:e3:fd:fc:0d:
6f:29:eb:a7:c5:aa:53:5f:78:82:84:56:a2:23:8d:
30:af:94:e8:63:fb:98:f3:65:4f:b1:eb:34:af:06:
06:98:b4:3c:f8:31:a4:df:9b:5d:6f:bb:88:f6:34:
fd:11:be:f6:d9:27:7b:12:9f:b4:1a:b7:5f:04:ee:
f0:3e:53:23:d1:94:75:57:8f:2a:9f:3c:b7:08:e9:
34:9c:ba:55:bd:2a:60:bc:ba:f4:d4:36:8b:ed:26:
59:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:22:64:31:9E:3C:4E:4B:32:E6:00:AE:49:DE:98:26:F7:F4:EB:37
X509v3 Authority Key Identifier:
keyid:5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:79:71:9a:fc:f6:06:c9:ba:2a:e2:05:ff:97:b7:2d:3f:5a:
0f:65:c0:98:5b:ac:b8:d3:3e:7a:c0:b0:8a:14:2e:ca:e9:18:
fb:4c:96:0d:d0:98:42:f1:4b:d2:ee:08:ea:8a:55:97:f7:6e:
59:fb:81:7a:00:58:34:40:de:4f:5f:c3:6e:9a:80:7a:51:d4:
ae:64:27:31:0e:b9:00:1a:f7:65:2d:50:33:0c:32:2c:f1:68:
a9:6a:76:06:b3:e5:a1:a4:f7:e8:c5:64:0e:3e:b9:73:f4:ba:
e5:6a:b9:e2:20:d4:32:15:71:46:9d:e4:e8:6f:c8:b7:83:04:
7d:e8:96:d3:2f:ab:52:a9:e6:bf:cd:67:4d:3e:76:76:f7:b8:
c0:e2:f8:a1:c2:c2:4d:92:fc:be:53:6f:ab:3a:63:d5:e8:af:
02:29:6c:91:8a:28:91:f2:ea:b7:5e:13:01:44:30:e0:bc:be:
0a:05:1e:68:87:de:0a:95:38:7a:ab:28:cc:59:95:3a:df:bf:
3c:ae:4f:c7:3b:b3:b7:12:bd:72:45:d9:75:c5:63:c5:4d:04:
01:4d:e8:d4:93:50:f5:5f:b7:9a:65:57:71:e5:98:07:cc:58:
76:1f:bd:83:9e:8b:a3:63:fb:78:86:0e:53:a1:e4:75:a1:ee:
93:91:e6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:41 2025 by rpki-client on console-fra.rpki-client.org