Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
File: xorAnHI17TE4Ph_ThzkY3RgzNCo.mft (raw, json)
Hash identifier: ffJl57iWOXTMkgQ+ENTC87a41kPaNUDxOVOWscAt6r0=
Subject key identifier: 0E:A8:4B:1A:5F:1C:C3:15:38:CF:C8:AB:9B:60:FD:BC:2E:28:DB:FF
Authority key identifier: C6:8A:C0:9C:72:35:ED:31:38:3E:1F:D3:87:39:18:DD:18:33:34:2A
Certificate issuer: /CN=c68ac09c7235ed31383e1fd3873918dd1833342a
Certificate serial: 0194C49A3A39588A82F50D50C0C81A99C7F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
Manifest number: 03FE
Signing time: Sun 02 Feb 2025 03:00:29 +0000
Manifest this update: Sun 02 Feb 2025 03:00:29 +0000
Manifest next update: Mon 03 Feb 2025 03:00:29 +0000
Files and hashes: 1: xorAnHI17TE4Ph_ThzkY3RgzNCo.crl (hash: NmRMCCcFDmJfQvLs0U0+SRxPsYlaDvy87OYHrTU5ZBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:3a:39:58:8a:82:f5:0d:50:c0:c8:1a:99:c7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ac09c7235ed31383e1fd3873918dd1833342a
Validity
Not Before: Feb 2 03:00:29 2025 GMT
Not After : Feb 3 03:00:29 2025 GMT
Subject: CN=0ea84b1a5f1cc31538cfc8ab9b60fdbc2e28dbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:37:61:42:fc:a9:8c:13:3e:48:6c:ca:9a:8f:
81:82:3f:6d:45:e7:a5:1d:99:07:05:5a:bc:33:4c:
9b:05:4d:3e:a8:d9:29:41:c0:77:d5:e6:3a:0a:d4:
96:49:9a:f0:e1:bb:cc:84:30:ce:ca:0f:44:be:eb:
04:f3:1a:76:8c:77:3e:af:3b:c4:ff:1d:bb:f6:72:
28:94:00:6a:b3:c7:46:66:83:71:84:4f:ef:0a:b3:
64:99:2b:92:c9:65:12:97:ea:e2:dd:d0:53:01:a5:
81:2c:3b:b2:02:69:76:00:c9:cd:c7:63:e1:86:37:
e3:f8:41:93:2e:73:5b:ab:a5:42:b4:59:e9:40:02:
54:95:87:e1:f2:71:db:eb:53:b0:3d:ad:7b:1f:44:
06:25:bc:c2:b6:06:f4:5a:67:aa:34:d6:03:f6:8d:
b4:d9:41:1a:14:ff:37:b7:9e:e0:8c:b6:1c:7c:35:
48:43:17:e7:37:48:f5:e1:a6:fa:36:2a:e5:68:06:
93:f3:19:c3:10:53:1b:bb:6f:91:37:5f:e6:be:71:
78:eb:69:35:fc:af:01:12:2c:87:ee:f6:42:90:d3:
14:9e:06:03:4d:59:ab:00:10:13:a7:99:77:a0:bc:
3b:bd:3c:ed:70:1c:1e:88:d3:2e:b4:42:82:c0:11:
ae:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A8:4B:1A:5F:1C:C3:15:38:CF:C8:AB:9B:60:FD:BC:2E:28:DB:FF
X509v3 Authority Key Identifier:
keyid:C6:8A:C0:9C:72:35:ED:31:38:3E:1F:D3:87:39:18:DD:18:33:34:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:54:7e:5b:4b:96:37:29:f4:e9:fc:8d:26:40:8d:91:8b:a5:
c4:d6:33:67:b8:7c:c6:19:35:9a:42:84:72:98:ea:27:2a:6c:
4c:70:db:f0:77:e2:f9:3a:22:c4:f0:f2:b6:27:13:8d:a0:2c:
04:9b:51:a1:70:cb:ca:fc:36:02:54:4f:21:d5:27:02:c4:a9:
a9:e4:bf:6a:af:5e:03:4f:b5:39:5a:7d:ba:f9:92:d3:3a:b5:
10:d7:12:a0:22:9c:bb:14:6e:e6:00:65:d3:50:42:ec:7e:7a:
aa:5a:cf:19:57:06:1c:6f:cf:fc:90:8e:6d:77:63:1e:98:05:
13:09:a4:32:5f:da:f4:82:60:20:16:de:a9:33:e8:06:9d:b9:
d1:84:2d:3b:f2:ef:4b:a4:4c:f7:9d:d3:5a:4e:47:8b:cb:2f:
71:a0:fd:d0:22:0a:ff:d4:01:fb:52:b3:ee:68:85:c6:ff:20:
41:d0:98:a9:18:bc:1d:02:df:d7:4c:e0:0c:76:22:3d:ca:6e:
27:6b:7e:fb:af:e9:41:eb:6c:be:18:36:15:cb:3b:17:3f:1b:
a5:9e:b9:3f:fd:d7:fe:84:4f:fa:0d:84:23:28:f4:a8:63:64:
df:10:90:0f:6f:a4:22:52:25:16:e7:b4:6e:76:0c:d1:15:23:
2a:72:65:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:56 2025 by rpki-client