Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
File: xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft (raw, json)
Hash identifier: A819SBD36pXJFjj0vJKphMVAqUIv641UMKnJw3KZgOs=
Subject key identifier: 45:5C:36:C5:FF:12:7B:A7:5F:64:3A:4F:DA:7E:5B:54:9D:CB:EA:2F
Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
Certificate issuer: /CN=c576ba0c098dc472186223c91e7def5216e239f1
Certificate serial: 01941EF2EDA94C0D06BAFAB1BC46FAC3E48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
Manifest number: 02CC
Signing time: Tue 31 Dec 2024 23:00:24 +0000
Manifest this update: Tue 31 Dec 2024 23:00:24 +0000
Manifest next update: Wed 01 Jan 2025 23:00:24 +0000
Files and hashes: 1: KOrDBbgrMD7iK_AbDkuUd14i-HA.roa (hash: FXqigEdmtvEuf8DccU3894vg470lLWEEJoDQY0LvmbY=)
2: xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl (hash: yOICfnUCzWvtBlt2VfEY2KNOt9wW9INZfoIUwZ5NMy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jan 2025 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1e:f2:ed:a9:4c:0d:06:ba:fa:b1:bc:46:fa:c3:e4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1
Validity
Not Before: Dec 31 23:00:24 2024 GMT
Not After : Jan 1 23:00:24 2025 GMT
Subject: CN=455c36c5ff127ba75f643a4fda7e5b549dcbea2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:da:eb:0e:e7:aa:bb:fb:58:a9:0a:14:76:34:
01:19:d5:ed:61:97:88:46:8e:69:84:a9:cb:d5:57:
a4:7c:ce:65:b6:6d:74:f5:5e:21:f3:a4:71:62:ba:
53:c3:b7:0a:0b:ef:61:f3:56:ea:93:cb:39:14:43:
44:58:a6:7d:69:0e:25:78:4d:a8:c1:50:e5:92:ca:
e8:d5:70:f7:77:bc:0c:89:cf:18:4b:0f:e2:56:67:
47:1d:1c:72:84:ca:50:a6:20:8d:13:e9:a9:e4:76:
9d:5c:ed:fb:fb:66:4a:ff:0c:24:87:20:a5:6c:71:
a4:9a:80:28:07:36:7e:a7:2b:d6:37:a6:0f:70:d8:
95:1a:f3:c3:5c:fd:b5:05:81:6c:1a:e0:fe:90:91:
bc:7d:fe:4c:6d:71:de:69:48:24:27:58:0d:b2:70:
86:2f:c3:91:dd:c0:2b:92:f7:bb:7d:03:bb:aa:bc:
ae:ea:a3:3f:87:8d:a3:1e:9e:ac:97:eb:27:1d:09:
e3:bb:23:f0:eb:5d:ea:fa:de:60:3e:6d:2f:ae:8e:
aa:a0:02:92:fb:a2:eb:ae:99:e6:73:e5:f9:42:f3:
45:9d:51:08:34:82:c8:21:0d:77:fd:07:75:8e:30:
e0:ad:d5:63:60:32:00:44:25:36:26:f5:2c:e8:94:
6b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5C:36:C5:FF:12:7B:A7:5F:64:3A:4F:DA:7E:5B:54:9D:CB:EA:2F
X509v3 Authority Key Identifier:
keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:3f:95:3e:ce:05:fe:96:f8:94:e4:32:a5:f2:a6:c1:f8:0a:
01:00:a4:75:c1:7e:3c:25:a8:19:d9:ac:81:66:99:a3:3c:a5:
35:f6:6b:b2:c3:0a:21:13:9a:c6:23:ad:91:08:8c:3a:6e:5b:
b8:3f:fc:f5:14:e0:d2:3d:51:81:9a:eb:b6:e9:2e:63:0a:27:
58:e6:3b:6b:c1:f1:1e:82:ec:e8:42:cc:4d:de:d7:a1:8b:a2:
5f:cd:82:71:c7:2d:2d:20:58:8b:df:0c:61:d0:0d:30:86:bf:
a1:95:f7:9c:b9:8a:9e:1a:f2:ce:e9:de:1f:e9:e4:07:28:c9:
78:35:08:58:96:36:27:b9:bb:06:6b:c8:98:fb:6e:e2:15:3b:
45:26:06:db:19:20:64:e8:a8:18:9f:49:12:05:6b:7e:c5:fb:
c9:7f:76:05:86:1f:20:be:d3:bf:9f:79:48:30:ea:e8:d8:7f:
45:43:05:19:c4:87:18:c2:ed:7e:ea:f0:20:70:c2:12:d5:a3:
83:25:19:d2:a2:e4:d6:7a:7e:46:99:6e:88:67:bf:3b:94:9a:
cd:1f:d3:14:48:01:54:ed:3d:7e:9e:d5:e1:c3:eb:12:b5:7d:
be:5d:10:9f:a1:9f:3f:80:10:29:96:4d:e4:30:00:40:82:e2:
aa:a8:e0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 1 03:33:58 2025 by rpki-client on console-ams.rpki-client.org