Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
File: xorAnHI17TE4Ph_ThzkY3RgzNCo.mft (raw, json)
Hash identifier: CQPywW6EFMXwWSHZTZ6WBGCxW8weeaJQ/5kDLl7jEiM=
Subject key identifier: 48:C1:E4:88:5B:90:C3:F3:BF:59:1A:4C:54:13:94:02:42:8F:A8:D7
Authority key identifier: C6:8A:C0:9C:72:35:ED:31:38:3E:1F:D3:87:39:18:DD:18:33:34:2A
Certificate issuer: /CN=c68ac09c7235ed31383e1fd3873918dd1833342a
Certificate serial: 0194BAF24D6C12B92C8CCF7459D7818E1AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
Manifest number: 03F9
Signing time: Fri 31 Jan 2025 06:00:29 +0000
Manifest this update: Fri 31 Jan 2025 06:00:29 +0000
Manifest next update: Sat 01 Feb 2025 06:00:29 +0000
Files and hashes: 1: xorAnHI17TE4Ph_ThzkY3RgzNCo.crl (hash: 9+KIOyCf222GxHkVVdt21Vw52bVrzrzVaXiMLhNUC60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:4d:6c:12:b9:2c:8c:cf:74:59:d7:81:8e:1a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ac09c7235ed31383e1fd3873918dd1833342a
Validity
Not Before: Jan 31 06:00:29 2025 GMT
Not After : Feb 1 06:00:29 2025 GMT
Subject: CN=48c1e4885b90c3f3bf591a4c54139402428fa8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2d:92:27:e2:15:cf:d4:fc:08:0c:1b:9a:bf:
a3:ec:96:32:48:f7:79:8d:73:ec:07:b9:45:49:bf:
e5:0e:4a:d6:55:62:d3:27:da:57:76:bd:61:36:f5:
af:4d:a4:e6:ef:a8:64:38:c6:f2:48:b3:5a:bb:95:
d3:0c:5d:9d:e9:31:75:bb:34:d9:9d:d9:65:ab:03:
37:b1:26:22:ca:1a:bc:53:24:0d:20:82:bd:4f:97:
47:cd:11:cc:6b:87:d1:2b:d7:ae:d7:d8:9d:2f:33:
4c:80:a4:35:6a:07:73:7a:3e:95:13:b7:76:d2:cd:
f0:2a:5a:a5:09:ab:e7:47:34:f6:c7:84:91:6b:84:
f5:61:6b:4e:ee:48:34:32:66:5d:52:18:07:c2:f0:
7c:95:01:51:fa:cd:95:f9:3e:18:21:b7:fd:28:ff:
16:59:d1:3a:14:39:f8:54:d9:79:e7:33:9b:7e:26:
67:9b:83:9b:83:c5:39:4e:f4:c5:a9:5d:40:59:9a:
d0:c4:54:5c:d9:d7:7a:a8:cb:c3:98:e4:19:ea:dc:
01:a2:61:fb:9c:f0:ce:32:7f:27:4a:ad:1d:a4:ef:
8e:07:ba:af:69:dc:2a:79:eb:2a:f3:a8:42:94:3f:
39:ca:38:a9:5f:a1:6e:dc:b4:36:e4:a3:84:be:5d:
bc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C1:E4:88:5B:90:C3:F3:BF:59:1A:4C:54:13:94:02:42:8F:A8:D7
X509v3 Authority Key Identifier:
keyid:C6:8A:C0:9C:72:35:ED:31:38:3E:1F:D3:87:39:18:DD:18:33:34:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:30:d4:1b:dd:53:51:6c:43:c4:b8:85:09:18:a9:11:d5:9e:
27:31:33:c4:1c:fb:c3:93:81:ae:93:f7:a1:a0:e7:07:f3:07:
e1:65:2f:39:e8:af:d1:ee:73:ec:ef:99:54:64:7e:35:68:f6:
f7:be:60:0c:68:0f:bf:8a:fa:bf:6c:b7:2d:d7:22:73:2e:c1:
92:71:53:24:00:42:00:47:35:75:00:23:aa:04:8a:03:93:73:
d4:66:66:47:d0:50:38:43:f1:30:da:8b:cf:c3:c7:61:74:e0:
3e:5a:85:22:3e:f8:9a:73:ec:61:80:ff:96:b7:40:6c:d5:8b:
d5:87:40:ed:df:f5:05:92:1a:9c:1d:d8:e2:65:96:4b:17:c6:
35:8a:0b:78:78:ca:60:fe:9e:e5:ad:b8:97:a5:37:f0:20:c3:
ae:3e:d3:6f:63:d3:34:05:0d:26:a4:1a:fa:8e:2f:e7:a8:c4:
81:8e:59:e9:16:d6:94:8a:b0:0e:59:ca:ed:c4:bc:14:55:12:
b9:4b:ac:f0:7d:b5:d1:4e:98:b6:1e:39:aa:eb:af:ec:b2:dd:
79:12:ac:3c:f1:6d:3d:a7:26:71:f5:74:1f:d0:ee:b1:8d:23:
d0:be:f7:6d:45:a1:2e:6a:c4:49:0a:11:ed:84:a3:c0:41:f8:
19:fc:42:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:39 2025 by rpki-client on console-fra.rpki-client.org