Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.mft
File: XsApKzJbgsdEucIBMrg7M7Uv_5c.mft (raw, json)
Hash identifier: Tv+78jI4hxznnMMdLCi80LH7X5A2oyzce6dfuKaTWhU=
Subject key identifier: D9:56:4E:33:23:59:9E:D4:88:62:46:C4:1B:93:59:EC:F1:2B:8D:82
Authority key identifier: 5E:C0:29:2B:32:5B:82:C7:44:B9:C2:01:32:B8:3B:33:B5:2F:FF:97
Certificate issuer: /CN=5ec0292b325b82c744b9c20132b83b33b52fff97
Certificate serial: 0194C3F60615D0BE0376E0F5BADCD67FCFC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsApKzJbgsdEucIBMrg7M7Uv_5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.mft
Manifest number: 02EF
Signing time: Sun 02 Feb 2025 00:01:08 +0000
Manifest this update: Sun 02 Feb 2025 00:01:08 +0000
Manifest next update: Mon 03 Feb 2025 00:01:08 +0000
Files and hashes: 1: XsApKzJbgsdEucIBMrg7M7Uv_5c.crl (hash: I/KdQ9IkhJEeTGsUT8tzDIczEiE/FpUe/G++MUkOZCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsApKzJbgsdEucIBMrg7M7Uv_5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:06:15:d0:be:03:76:e0:f5:ba:dc:d6:7f:cf:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec0292b325b82c744b9c20132b83b33b52fff97
Validity
Not Before: Feb 2 00:01:08 2025 GMT
Not After : Feb 3 00:01:08 2025 GMT
Subject: CN=d9564e3323599ed4886246c41b9359ecf12b8d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f1:bb:68:04:33:38:ea:3d:02:b3:2b:30:1a:
cf:92:c0:79:77:77:61:0f:9a:d4:4e:5e:dd:3e:fb:
86:05:7e:f9:c2:5d:21:32:8c:67:70:3d:7f:fe:6f:
12:44:ae:75:63:72:02:ba:51:77:af:2e:8a:91:6a:
8a:e0:c2:4c:f4:a7:7e:01:b7:32:a6:a2:cc:91:f9:
d0:ac:f2:b7:da:fd:52:1f:28:a8:3b:65:9b:07:61:
17:94:0b:b4:e7:0b:ad:63:98:a3:f5:8d:8a:21:22:
c3:0a:33:c0:b7:76:e1:71:f2:3e:70:1b:7a:2b:0c:
ef:93:3f:dd:7d:bd:48:4c:fa:96:63:0e:dc:f8:32:
2c:df:81:9e:c5:de:4b:0b:21:73:bb:97:42:1d:70:
d2:76:42:30:71:14:e2:56:51:7c:ab:2b:e1:1f:23:
2c:d1:aa:4d:53:a4:0e:9b:d3:9e:a5:7b:b9:59:b6:
d3:25:8e:2d:de:b7:f5:43:f5:8a:ae:c4:ab:1a:a2:
68:e4:e9:96:54:3b:76:b4:00:ea:b5:f3:07:68:89:
e7:d4:67:32:78:48:3c:a8:63:8c:2e:22:65:05:cd:
0c:50:98:91:6a:dc:00:55:e0:65:e4:c5:de:fb:8b:
a8:fc:7b:26:f8:b8:5a:36:33:49:68:9c:1c:95:ff:
6a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:56:4E:33:23:59:9E:D4:88:62:46:C4:1B:93:59:EC:F1:2B:8D:82
X509v3 Authority Key Identifier:
keyid:5E:C0:29:2B:32:5B:82:C7:44:B9:C2:01:32:B8:3B:33:B5:2F:FF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsApKzJbgsdEucIBMrg7M7Uv_5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:84:44:db:1a:36:66:f7:f4:0a:74:24:a2:80:3b:05:f9:ed:
98:35:50:f1:79:3d:d7:7d:b6:57:cd:c0:7d:82:4a:ed:2c:ac:
3c:e7:dd:83:54:97:e7:0b:fa:a0:d3:c0:ef:c4:5b:fb:c8:aa:
d1:0e:7d:ca:fb:9e:25:84:f1:ce:93:0b:e8:8c:f7:56:43:67:
e7:d4:1a:38:31:22:d1:f8:3c:73:ce:aa:6c:94:2c:11:15:6b:
db:38:9c:67:27:98:5b:d3:43:fd:29:ca:5b:08:d3:c0:db:2d:
ff:af:6f:d7:67:d7:9c:ef:9c:3d:00:48:a6:51:f9:d3:77:51:
8e:a0:ae:90:03:95:41:b1:b6:d1:ac:c8:a0:c5:fe:6f:87:19:
e4:c3:8b:9d:b1:e5:ad:da:4f:7c:2d:23:aa:d0:ad:1b:13:01:
5b:73:fc:09:df:c6:44:99:89:2c:3e:37:63:c8:e8:72:22:43:
27:b2:27:4d:f0:ce:a7:9c:e9:d0:81:b9:ff:85:5d:08:8d:ab:
09:1f:3f:aa:b5:5b:da:58:d2:f7:3d:5f:b3:1f:e5:a9:5e:9f:
5d:db:73:48:ee:3b:c1:82:7d:fe:2a:35:8a:0b:6f:90:e8:02:
0b:8c:58:6b:21:88:18:c2:77:82:15:50:c1:d2:1c:e7:80:7b:
5e:8c:eb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:26 2025 by rpki-client