Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
File: x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft (raw, json)
Hash identifier: Jq1y4cC4Kk36QwS28+PO3kv7Os0MzoL2DysXoIytuOQ=
Subject key identifier: E6:CE:24:3B:49:C2:24:E8:47:D9:44:27:D8:AA:08:04:49:8A:40:73
Authority key identifier: C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5
Certificate issuer: /CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
Certificate serial: 0194C3BE34D815E2BE5A43C3BAEF5CFCF018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
Manifest number: 142F
Signing time: Sat 01 Feb 2025 23:00:09 +0000
Manifest this update: Sat 01 Feb 2025 23:00:09 +0000
Manifest next update: Sun 02 Feb 2025 23:00:09 +0000
Files and hashes: 1: Oh5MBrSNQL-MIQM7mvcTSl4Bxlw.roa (hash: hR4K2IN0h854R5KFI9PRtJJgGILNncSrA/6ie+JyY0U=)
2: x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl (hash: oFXDv078SU8IFTkp7ftUWvAt4VFvBzJ5VdtxFFKgli4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:34:d8:15:e2:be:5a:43:c3:ba:ef:5c:fc:f0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
Validity
Not Before: Feb 1 23:00:09 2025 GMT
Not After : Feb 2 23:00:09 2025 GMT
Subject: CN=e6ce243b49c224e847d94427d8aa0804498a4073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:c1:7d:0f:e1:5a:64:54:9d:35:d8:9a:a3:
b9:1a:fc:9e:2b:0c:0f:57:42:76:ab:07:ca:e5:b9:
14:46:e0:59:86:17:1a:29:73:e0:a2:84:f2:46:88:
52:62:30:54:68:e7:73:fe:5b:8a:0a:90:49:a7:14:
e4:2a:43:17:28:41:f8:6d:45:d0:4a:3a:60:66:a8:
37:98:3b:65:ac:e0:71:cc:f8:e0:fa:57:6f:28:4b:
d3:12:49:9d:39:09:da:42:b0:ce:06:48:22:68:75:
5e:c7:2e:28:68:a2:82:bb:18:b8:09:63:ed:70:40:
74:c1:d8:30:cd:92:7e:a1:b4:56:07:5f:ec:22:49:
b7:ef:bd:db:9a:42:0a:06:cb:9c:d8:ef:02:dc:b5:
b6:2c:ed:8a:fa:92:3c:3c:4e:68:79:7a:d0:de:df:
2e:bd:72:5e:42:b2:6b:5f:16:8b:da:7f:b6:0a:46:
a9:b1:d4:eb:ae:18:f4:9c:c4:96:5d:7b:e9:88:ab:
ab:01:55:b4:4e:09:d8:b2:7d:70:23:2c:e8:04:33:
98:df:49:df:a2:79:0b:f6:3e:54:9b:e4:83:04:7c:
f2:e9:44:2f:7a:e9:47:de:fc:9b:ce:e6:06:23:2a:
5c:8f:72:08:e5:6a:2d:13:6f:5e:9d:d2:ff:fb:48:
7c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CE:24:3B:49:C2:24:E8:47:D9:44:27:D8:AA:08:04:49:8A:40:73
X509v3 Authority Key Identifier:
keyid:C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:81:4f:bc:85:04:fa:68:dc:b0:f0:b7:0c:7e:31:fb:bc:04:
1c:18:2d:0f:ac:74:ce:72:bf:4d:54:a3:01:36:00:a4:8e:15:
a1:e8:af:f8:29:45:0b:80:e5:54:b8:6f:61:56:67:0b:dd:76:
7a:2d:3a:f0:99:b6:0d:3e:a9:03:36:29:10:c4:bf:ca:07:04:
87:2a:11:fa:44:4f:1a:25:40:9b:0f:d0:ba:3b:e8:bd:ab:44:
27:70:e8:e0:26:9b:86:af:0a:8a:27:25:b0:7a:c3:02:f3:39:
d8:66:9c:b4:1c:9d:c5:4e:99:96:96:52:3e:72:ed:39:cb:f4:
4b:2d:cd:03:91:a6:73:e4:3b:4b:cc:5f:bc:a1:30:51:57:52:
2f:ea:94:ed:ef:7c:9b:b3:59:c2:f5:8f:6e:b9:78:d0:84:57:
7c:8a:54:88:72:a3:40:79:f4:34:e0:d2:32:fe:b6:e0:28:eb:
ad:47:ba:dd:13:8d:e3:65:f0:ee:2f:c4:34:78:5f:e5:3a:32:
b4:66:18:1d:16:46:d8:b0:75:80:52:b6:cc:db:44:31:d3:83:
cc:f1:98:9b:b2:c9:76:4b:d3:3e:5c:82:46:d8:53:3f:36:bd:
7e:87:b5:9b:7e:9f:67:d5:5a:65:96:01:73:18:ae:f0:b8:58:
78:b2:50:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:24 2025 by rpki-client