Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
File: xtEbZP_hjvpC9DpsdlY53uONAn4.mft (raw, json)
Hash identifier: JRr9g1+WAI85mEB1SzDsW/UeHthgJ/hqUjspYvp3vgs=
Subject key identifier: 8D:FD:FC:16:7B:47:DA:E0:5B:65:DF:50:D1:5A:01:45:6C:BA:AD:A6
Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Certificate serial: 0195113470302CCCF7F8ACD7B00EBA79D973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
Manifest number: 0CDD
Signing time: Mon 17 Feb 2025 00:00:04 +0000
Manifest this update: Mon 17 Feb 2025 00:00:04 +0000
Manifest next update: Tue 18 Feb 2025 00:00:04 +0000
Files and hashes: 1: 5stymyV2VXExRNfPDRHs0SsKv84.roa (hash: LAJy81D8Y1W3Al27GIYu76cE8aqvZvfTwIjGsrUN8O8=)
2: wX4zTXXZMo2WWHOKinMvyAiRYeE.roa (hash: dkBnWGmwxThQE3RCE6xz1EoswQLwUBpuloKrWzo2tUE=)
3: xtEbZP_hjvpC9DpsdlY53uONAn4.crl (hash: a7FKzoA5Ex5c/Ct7/KXX6ZRcMVm9BmafxIq1fbdj6KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:70:30:2c:cc:f7:f8:ac:d7:b0:0e:ba:79:d9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Validity
Not Before: Feb 17 00:00:04 2025 GMT
Not After : Feb 18 00:00:04 2025 GMT
Subject: CN=8dfdfc167b47dae05b65df50d15a01456cbaada6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:ad:1a:73:90:52:85:f7:8d:08:ce:f6:66:
9b:b1:83:1f:35:4c:f6:95:dc:1a:e8:01:f1:f2:e6:
3b:eb:54:58:9c:42:87:52:f1:cd:55:f4:46:69:bc:
9a:28:58:46:b2:b7:05:e0:36:90:64:47:94:4a:23:
31:24:33:e7:2a:1e:0c:d3:e5:a3:9b:11:f7:39:da:
f1:44:e7:21:d7:63:0a:88:2a:70:a5:93:34:8f:7c:
d0:8e:94:35:ad:d7:05:74:03:ae:af:b0:62:82:c0:
8c:30:1e:e5:54:69:71:7b:78:a2:d3:d3:e7:fc:9c:
6f:1e:5e:6a:71:c5:18:69:bc:f8:b5:49:76:ca:7f:
40:de:c8:c4:ce:f2:f9:aa:d6:85:99:66:01:8e:93:
fa:3b:69:fd:7c:13:cd:f8:66:8d:a0:34:a4:24:f3:
64:44:63:f3:f7:f7:bf:fe:a0:da:8a:3e:ec:1c:3a:
96:be:f8:f6:45:3b:b4:a4:78:ca:b2:9c:67:5f:b3:
37:19:74:b6:25:7d:69:15:d9:9d:41:11:8b:48:4a:
04:45:4e:23:79:8d:ea:30:8c:f3:4b:af:a9:33:1f:
5d:24:4a:f8:ed:36:c7:74:dc:c7:b0:c5:52:84:1e:
2b:5f:04:e8:30:d4:f3:8f:b6:7e:dd:80:60:e6:3f:
87:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FD:FC:16:7B:47:DA:E0:5B:65:DF:50:D1:5A:01:45:6C:BA:AD:A6
X509v3 Authority Key Identifier:
keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a7:25:26:c5:d4:f4:37:b4:32:f6:e8:81:4c:6f:54:6d:31:
99:2d:31:42:6e:01:38:78:43:9e:28:b8:bd:f2:32:4f:47:8d:
72:15:56:f1:06:96:8c:75:76:cd:da:e3:42:dc:8b:ec:48:7c:
39:d2:0e:05:41:6e:f5:ad:c5:53:04:84:b3:b3:2f:32:d1:a7:
f4:6b:8f:f1:d8:b6:ef:98:6b:6a:fb:c9:88:ca:d7:da:3a:e5:
97:ee:9b:be:55:52:72:cf:3d:76:d5:4a:67:ba:64:1d:3b:0e:
f7:7b:11:5a:07:5d:e1:3c:59:2f:07:37:40:31:0d:9f:5f:2f:
a6:f1:29:f2:b7:11:45:22:21:7a:c4:96:29:85:b8:77:e4:0e:
8f:2a:cf:ca:49:8f:08:44:d6:98:e1:75:36:02:1a:93:04:2a:
41:6d:08:8e:4d:b3:57:03:8a:55:e6:84:aa:cf:83:52:77:46:
b1:f4:54:87:ed:9d:1c:80:d8:bc:ea:bc:02:2d:26:38:c5:9c:
40:a8:da:0e:e4:4d:bf:f4:dc:51:9c:5a:e0:51:46:e8:48:83:
5c:65:31:26:fa:d0:b4:9c:fd:77:15:66:d8:55:0d:0f:72:59:
e6:12:c0:36:3a:75:fb:db:98:12:7c:4d:44:f3:8a:55:40:c2:
02:48:f6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:13 2025 by rpki-client