Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
File: xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft (raw, json)
Hash identifier: JodzzfjTUiItAk/64DKwbjmDFM0wBFHhiA5ggiJ3JKo=
Subject key identifier: 41:D8:C8:C2:14:9C:4F:4B:5C:7B:4F:43:2C:98:BC:DF:30:F4:93:F5
Authority key identifier: C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
Certificate issuer: /CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Certificate serial: 019511D94E4100C7C3B1B33C889CE64EBD22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
Manifest number: 13AE
Signing time: Mon 17 Feb 2025 03:00:08 +0000
Manifest this update: Mon 17 Feb 2025 03:00:08 +0000
Manifest next update: Tue 18 Feb 2025 03:00:08 +0000
Files and hashes: 1: C3xZoR3LtseXs9YgZ15-hhPr18E.roa (hash: 1WbsEFbzKO5s8iSa/8CXV3aiHCeUKDOXCmds/8JgsxY=)
2: xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl (hash: VeLwitNuivObCXpTmbg01WdXMecOnHD0zDESeK6Ajhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:4e:41:00:c7:c3:b1:b3:3c:88:9c:e6:4e:bd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Validity
Not Before: Feb 17 03:00:08 2025 GMT
Not After : Feb 18 03:00:08 2025 GMT
Subject: CN=41d8c8c2149c4f4b5c7b4f432c98bcdf30f493f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:5d:a4:59:9c:c4:9b:7f:56:d6:53:ec:76:
86:0c:6f:d2:09:21:03:45:10:4e:0d:b8:0f:da:35:
2b:a6:1e:2f:eb:eb:09:d0:00:a1:99:4e:1f:88:76:
c3:80:23:a7:0b:bb:e2:b0:e3:e5:31:42:b5:fa:71:
e2:88:1f:cb:3d:a5:23:56:ca:f0:39:82:92:3e:c4:
47:c5:85:9d:d5:59:46:60:a8:09:e8:93:73:94:03:
f8:a5:74:71:4a:d9:c4:cd:8b:0a:99:e6:c7:71:a8:
34:8c:17:da:78:9a:75:84:70:29:83:9b:03:c3:ab:
42:57:4e:ff:4c:55:18:da:0a:86:49:e5:f1:c8:44:
69:e0:2f:76:21:0f:65:cd:ad:7f:ec:a6:97:2c:92:
e4:91:b1:78:fc:fe:db:e4:22:3c:a6:19:4b:d4:e7:
6c:2d:b4:1f:8e:0f:09:91:ee:cc:47:c5:ab:bf:6f:
55:30:78:14:16:27:5e:56:86:96:1a:08:ec:21:d9:
46:1c:ed:6a:b7:f6:28:1c:03:19:2f:6e:62:9f:68:
18:7a:7c:58:01:1a:2c:56:7b:10:75:c6:d6:00:95:
ae:e4:0d:e0:89:50:69:2b:1f:0e:c7:5d:be:4d:0c:
38:c2:a9:f2:95:a2:8f:4e:41:28:23:99:4d:36:f0:
5b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D8:C8:C2:14:9C:4F:4B:5C:7B:4F:43:2C:98:BC:DF:30:F4:93:F5
X509v3 Authority Key Identifier:
keyid:C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:0b:72:d4:05:f8:6d:4c:2d:54:75:b4:3e:56:3e:6d:e1:ae:
06:e9:0d:6f:b8:b5:31:d2:7b:18:0f:8b:6b:0c:40:5c:c8:63:
77:4d:e9:9e:86:cb:15:c4:0b:6b:2a:38:19:40:a4:95:39:39:
f7:df:79:6d:cf:58:58:7a:0c:8d:18:03:e4:0b:99:3c:17:e6:
b5:8c:02:ca:58:d7:1e:09:86:58:0e:8c:55:42:b1:e3:6d:3f:
16:30:ea:97:dd:3b:42:7a:06:9a:c9:1b:45:7a:2b:34:a2:e5:
3b:13:cb:eb:f8:92:8f:59:b1:0e:71:b5:b3:39:e1:48:fc:26:
9a:89:78:e6:7b:d0:dd:58:95:09:d1:7e:f5:3a:9e:a1:6c:87:
e9:80:32:1c:a3:73:f5:9b:f3:b6:d7:3d:03:83:cc:de:1a:b0:
a8:42:0c:43:3d:7f:04:74:93:0c:2b:a9:e1:e4:4e:09:fd:b0:
94:2d:db:20:53:32:32:73:0d:13:3c:16:b7:c1:4a:a3:fe:c5:
02:21:2d:31:6a:d4:e0:8a:c5:75:c0:0b:72:f2:ab:ec:f2:c8:
7f:f7:85:d3:a9:78:5a:e4:90:f0:ac:bc:ac:a5:a5:6f:68:1a:
aa:c7:fb:41:f6:8c:e1:d4:b1:22:fd:89:de:64:cc:c5:38:5c:
d8:a9:d7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:50 2025 by rpki-client