Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
File: XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft (raw, json)
Hash identifier: 43xMvZdD8OxUyzGlhan2x9UyUqzUjU7Y9mUiJ2l1/00=
Subject key identifier: 20:1C:6F:79:4F:F4:28:1E:73:F7:31:6D:18:58:3F:27:10:D0:B3:E7
Authority key identifier: 5C:02:F9:81:BE:E7:95:21:A3:04:B6:8F:66:7F:EA:ED:81:EA:3F:F6
Certificate issuer: /CN=5c02f981bee79521a304b68f667feaed81ea3ff6
Certificate serial: 0194C3F5ED68A471443FB138B259CAA4296B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
Manifest number: 0E87
Signing time: Sun 02 Feb 2025 00:01:01 +0000
Manifest this update: Sun 02 Feb 2025 00:01:01 +0000
Manifest next update: Mon 03 Feb 2025 00:01:01 +0000
Files and hashes: 1: XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl (hash: 9el/2f5BkjNpndvNVtfc2A5io4MGo+ScyU5dhtuZqSI=)
2: o5qKOTRfTPnYThdIYO9xUeKi2sc.roa (hash: EOStnDBrp4FRFcFGDjBhhWwMtuAGb36N8+2XArtelwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:ed:68:a4:71:44:3f:b1:38:b2:59:ca:a4:29:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c02f981bee79521a304b68f667feaed81ea3ff6
Validity
Not Before: Feb 2 00:01:01 2025 GMT
Not After : Feb 3 00:01:01 2025 GMT
Subject: CN=201c6f794ff4281e73f7316d18583f2710d0b3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:09:aa:01:50:6b:ee:38:03:55:ed:9c:e5:
5a:e1:9f:25:3d:57:7c:62:ca:13:71:9a:21:15:40:
7f:aa:b1:0c:f9:8c:6b:ed:48:dd:fb:8a:db:cc:34:
66:6c:b9:4e:0e:46:ac:28:71:95:59:41:7e:f8:d5:
04:87:ac:79:c6:33:7d:ab:ba:f8:32:0c:21:76:75:
57:81:4a:91:e7:2f:6b:75:f6:fa:d6:41:dc:28:46:
54:35:e2:5f:fe:62:1c:68:83:8a:d6:90:86:39:7d:
ee:99:c9:6d:64:18:fb:e5:16:41:c5:dc:08:6f:81:
0f:77:44:1a:d3:70:59:40:7c:a5:af:cc:59:cc:eb:
42:35:0c:9a:b2:63:e2:a9:b4:c9:60:e5:c2:3b:cc:
7a:96:ae:30:c5:56:e9:28:24:7e:26:9d:0a:77:2b:
d5:84:09:78:b7:ea:54:c7:d4:a1:86:00:65:c4:34:
87:00:57:8a:c6:58:e7:40:1c:7d:6e:56:00:f0:ce:
cb:0b:cd:5b:ea:e2:f2:4a:e6:62:2d:87:b3:8d:16:
14:2e:30:0b:e5:e7:ca:ff:7d:e2:56:bf:e3:ea:02:
61:c4:97:70:79:f2:6a:58:49:c2:f6:1a:57:23:4a:
43:26:02:c9:57:39:cd:42:39:bb:e6:a5:09:b4:b8:
bb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1C:6F:79:4F:F4:28:1E:73:F7:31:6D:18:58:3F:27:10:D0:B3:E7
X509v3 Authority Key Identifier:
keyid:5C:02:F9:81:BE:E7:95:21:A3:04:B6:8F:66:7F:EA:ED:81:EA:3F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4f:8d:6f:5e:68:8f:f9:77:a2:cf:89:49:e7:ce:c5:e3:48:
e2:f4:c6:e7:24:9d:1a:cd:3f:ec:2f:8f:be:5e:b1:36:fb:ca:
59:05:ae:b9:bb:bb:e7:95:07:65:a9:75:b6:57:14:8f:92:5e:
16:3a:99:80:64:21:e2:d0:65:c0:83:66:7b:37:3d:aa:7c:4c:
2e:24:df:91:8a:5a:d9:b1:a7:ec:e4:5a:d8:34:84:68:6d:16:
e1:1f:50:df:32:5e:12:3f:fb:80:cb:92:50:08:4c:d0:7e:8b:
69:6c:e3:d7:d3:52:9c:36:b5:d7:9d:d5:5b:d7:bf:cb:86:e3:
7f:67:f4:b5:1d:a6:f8:ac:85:0f:ae:da:d0:a5:34:0a:c9:b9:
cd:9e:dd:e5:01:ee:e4:1c:f8:f0:21:5e:65:05:0c:ee:cc:49:
e5:ab:62:08:1d:39:b9:ea:6f:d5:3d:2a:38:1f:93:7a:11:b6:
70:7e:dd:db:2c:a4:ca:c8:8d:c4:5b:90:29:a3:37:b9:19:49:
62:b3:60:df:50:31:13:51:7e:e4:2d:d5:c1:19:24:9f:78:a1:
f7:86:2c:c2:19:b1:96:5b:ef:18:d4:c4:14:e2:be:3b:ff:c7:
20:5c:f8:20:00:17:f4:72:fc:5f:8b:55:26:6e:a6:e4:da:f2:
e2:0c:f9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:09 2025 by rpki-client