Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.mft
File: xQkxs_iAn_sx6V_THf8pd6xAgHk.mft (raw, json)
Hash identifier: Tg7WpFOUWzK8Vqq7ygjc7DqpTBpmdzhnMufh3ksnr30=
Subject key identifier: 0E:A5:AD:C9:69:DB:4A:14:FC:7F:AD:62:59:AF:AD:AA:14:A2:89:16
Authority key identifier: C5:09:31:B3:F8:80:9F:FB:31:E9:5F:D3:1D:FF:29:77:AC:40:80:79
Certificate issuer: /CN=c50931b3f8809ffb31e95fd31dff2977ac408079
Certificate serial: 0194C319ABC5BEA5AD7C5D3D19C6C034877F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQkxs_iAn_sx6V_THf8pd6xAgHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.mft
Manifest number: 0304
Signing time: Sat 01 Feb 2025 20:00:26 +0000
Manifest this update: Sat 01 Feb 2025 20:00:26 +0000
Manifest next update: Sun 02 Feb 2025 20:00:26 +0000
Files and hashes: 1: xQkxs_iAn_sx6V_THf8pd6xAgHk.crl (hash: UGGkxAU/nME6K2AevpycU/hsdQysQPVeRJJufR3rlXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQkxs_iAn_sx6V_THf8pd6xAgHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:19:ab:c5:be:a5:ad:7c:5d:3d:19:c6:c0:34:87:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50931b3f8809ffb31e95fd31dff2977ac408079
Validity
Not Before: Feb 1 20:00:26 2025 GMT
Not After : Feb 2 20:00:26 2025 GMT
Subject: CN=0ea5adc969db4a14fc7fad6259afadaa14a28916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:70:ea:0a:82:d2:fe:d3:52:e5:59:c5:d0:
c1:d0:69:8e:2f:7c:9a:2e:1f:81:dc:e5:0f:49:27:
0c:52:0e:22:9c:41:1e:31:96:81:77:56:d5:c4:25:
6e:25:a8:f7:03:94:0c:d4:5c:03:70:0c:a3:5d:ee:
56:6c:43:ed:fe:9e:2b:11:9b:f7:46:db:82:de:b9:
b2:5a:9d:75:d4:c0:92:a3:3d:bf:41:7f:e3:d5:ab:
4e:ae:dc:f7:d5:15:a7:ac:18:83:93:51:10:88:06:
46:67:5b:5f:86:cd:90:68:dd:2f:cd:c9:61:72:28:
f6:b8:70:51:e1:84:f0:50:33:3e:63:ac:fc:f9:83:
f3:07:6d:7c:fc:80:dc:ae:9e:1c:fd:b6:76:82:b6:
27:6c:55:90:21:fa:f1:7c:1a:99:10:68:30:3c:06:
45:9a:cc:5e:01:31:d0:51:9b:68:c1:67:fa:17:90:
49:fe:ae:48:45:c8:d1:4a:2c:b2:df:19:44:04:6e:
e1:5a:3b:4d:7b:bd:38:e4:79:77:89:2c:24:42:25:
bf:86:52:59:7b:dd:6c:85:e4:c2:a1:1e:3a:d9:c1:
f6:97:0e:15:53:c0:8a:b2:c6:b9:8f:94:8f:da:21:
8f:f1:72:90:cb:87:89:1d:62:42:67:54:ab:00:36:
d1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A5:AD:C9:69:DB:4A:14:FC:7F:AD:62:59:AF:AD:AA:14:A2:89:16
X509v3 Authority Key Identifier:
keyid:C5:09:31:B3:F8:80:9F:FB:31:E9:5F:D3:1D:FF:29:77:AC:40:80:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQkxs_iAn_sx6V_THf8pd6xAgHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6c:e6:d7:39:36:49:75:c0:ef:f3:83:3d:3e:36:6a:cf:a7:
40:53:36:09:6c:3f:28:c0:05:92:49:d4:2c:e4:81:a3:09:55:
de:a4:6d:ae:f6:b4:f8:f3:55:ca:6a:aa:64:cf:b3:00:8f:29:
f3:0e:42:60:19:1d:39:e2:66:df:d1:02:19:3d:a4:fe:05:b9:
56:2f:aa:f3:54:8a:c5:84:67:d1:0e:ae:5d:93:b9:92:63:80:
3b:85:01:c0:84:17:0a:d5:cc:ec:7d:e0:5c:db:c8:3d:49:3c:
8a:8c:be:82:3e:6a:99:23:cb:64:3e:48:4f:3f:5d:f0:bd:5c:
3a:b9:58:e9:78:bb:58:d1:4a:ba:9b:27:7f:81:fd:aa:8f:46:
7a:ae:eb:e3:e6:8d:eb:dd:47:3a:21:17:ba:ab:87:45:f0:aa:
59:9b:4b:7a:86:a4:6e:76:33:a1:3e:73:8f:be:0e:4f:9d:8e:
72:5d:f1:08:1e:a1:f9:6e:c3:6f:b9:21:33:fd:f6:8f:9d:a3:
3c:6a:04:47:e3:7b:c8:cc:9e:00:71:f4:67:18:f1:88:1a:ca:
de:1c:f1:ed:d8:95:5f:6d:47:51:c1:72:7f:6f:e1:85:9a:be:
6e:2b:17:c5:b1:85:9d:97:e1:bc:eb:ba:29:a0:d9:67:8b:3c:
26:dc:21:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:05:15 2025 by rpki-client