Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
File: XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft (raw, json)
Hash identifier: LaJHMFGYAX//cT/lRupQMvdvOS0ia5LZ26kleScXs4g=
Subject key identifier: 6D:8B:07:09:24:B3:AF:B3:9C:C2:3D:8C:18:69:7C:D2:21:32:CD:B4
Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
Certificate issuer: /CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Certificate serial: 0194BAF27DCDF3A65A92A911A295BFF8DCF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 06:00:41 +0000
Manifest this update: Fri 31 Jan 2025 06:00:41 +0000
Manifest next update: Sat 01 Feb 2025 06:00:41 +0000
Files and hashes: 1: SPO79W-RKvYGHUZUo_GKPu1EhfI.roa (hash: cEdKpQm01CKeHg+/Jj2Tpv6ISl0LACkf+X0dbIBfckM=)
2: VcpLmnndha8Y-vfgXC2dpkPqHYo.roa (hash: LeB85j8HcdjYpxaE0+430+0+/Pe7eOGrdSERq3WAn0k=)
3: XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl (hash: E4egyX2GTFwvaga45D/Lrv954QXqH7jFRQj93soEvz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:7d:cd:f3:a6:5a:92:a9:11:a2:95:bf:f8:dc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Validity
Not Before: Jan 31 06:00:41 2025 GMT
Not After : Feb 1 06:00:41 2025 GMT
Subject: CN=6d8b070924b3afb39cc23d8c18697cd22132cdb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b8:90:3e:47:ca:4b:68:77:0a:ff:1c:77:b9:
d9:bb:e9:66:61:37:be:e4:09:ae:f9:00:29:69:aa:
c7:d4:81:df:3e:b5:33:c2:c8:7e:db:3c:76:d3:d8:
a4:7c:7a:1f:64:87:97:fb:d7:61:3f:75:6a:15:ca:
f6:16:c6:93:82:fa:e4:71:49:8a:de:7e:62:75:b6:
4f:78:b8:04:ae:b1:f9:72:da:40:c9:f6:4b:4d:db:
f0:dc:a2:0e:7a:f7:7a:f4:73:ce:03:fe:87:83:86:
56:37:40:b4:3b:b8:9c:2d:cf:be:0e:dc:58:b6:64:
dc:c7:ff:0e:c1:0d:df:dd:d4:08:cf:19:03:10:66:
a3:01:90:ea:ab:f6:44:be:35:5d:3b:64:5e:79:b2:
57:81:c1:59:f0:5b:28:be:80:c2:99:9d:96:ed:0b:
f8:c6:1d:69:9f:ca:0c:3d:44:5a:2e:bd:bf:8c:87:
4e:0c:55:e9:d1:01:22:4c:18:3a:24:09:2b:ae:c0:
8f:a1:38:4d:a2:c4:44:0c:c8:ff:94:7a:48:8e:ed:
68:38:6b:72:17:c4:d0:2c:00:55:ba:90:d8:fb:74:
17:2e:00:63:2d:e3:99:7e:00:e1:b8:27:27:c9:bc:
e9:06:65:ea:11:6f:38:be:36:c1:f0:a8:33:52:5c:
cf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8B:07:09:24:B3:AF:B3:9C:C2:3D:8C:18:69:7C:D2:21:32:CD:B4
X509v3 Authority Key Identifier:
keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:38:3e:fe:2f:f6:58:01:83:65:45:9f:23:4d:39:89:cf:8e:
da:72:46:fb:6a:8b:4e:f0:fc:09:2d:c0:d5:48:9e:f9:33:d3:
ef:91:2b:d1:f1:72:dc:a3:8e:c0:40:9d:40:9c:71:9c:c3:e2:
9b:c1:0d:db:9a:5d:f4:ee:9d:bf:29:ad:2e:ad:c4:bb:5d:b0:
43:4e:8a:ec:05:f5:64:0b:ed:04:95:5d:85:5e:01:68:50:77:
e2:73:29:c2:71:d0:16:25:73:92:53:22:04:6c:85:a1:71:18:
e2:36:06:f1:4f:77:63:e9:38:0e:11:d0:f0:28:eb:bf:5b:4f:
7a:ae:db:fd:10:08:c8:64:6e:6a:11:32:fc:13:1a:c7:28:20:
5a:57:9f:94:82:19:7a:fc:8e:b7:dc:b8:37:95:bc:e6:92:1a:
79:49:41:09:34:22:3d:35:ca:72:88:bc:00:ad:a6:3b:37:2a:
77:ea:84:dc:33:4d:91:d2:0f:e4:77:12:60:9e:eb:ad:56:de:
ea:34:b4:fa:a0:1a:4c:71:97:a7:7a:68:52:fd:f3:f7:04:95:
83:59:84:32:f2:fe:cb:c5:d2:90:a8:0e:8d:07:28:9f:d3:68:
e5:f4:14:e7:27:75:ec:59:8c:7f:f6:89:f1:44:09:b8:ab:67:
13:bd:1d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:37 2025 by rpki-client on console-fra.rpki-client.org