Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
File: XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft (raw, json)
Hash identifier: N3W9r4Bttj79m8E+WEFs4YuQlbuAGnjVPCwhElgxqFw=
Subject key identifier: C6:AA:17:1D:E0:5E:71:C2:9B:A7:2A:7F:91:1E:A6:C8:A9:E1:53:03
Authority key identifier: 5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
Certificate issuer: /CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Certificate serial: 019510FE140DD9D3A820EE8FCA42E2C9D849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
Manifest number: 0A81
Signing time: Sun 16 Feb 2025 23:00:41 +0000
Manifest this update: Sun 16 Feb 2025 23:00:41 +0000
Manifest next update: Mon 17 Feb 2025 23:00:41 +0000
Files and hashes: 1: FBX0FyPBfgM5SwvSaWt3-Nf-3Ug.roa (hash: Xc41MAtSc+ruCG6VKyrq0wjruSgKp5EwL1g2WUQj6WQ=)
2: XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl (hash: 42hEybZYLt5GogwtQ49kJ73XPeUev7FqFOJ21tQyWcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:14:0d:d9:d3:a8:20:ee:8f:ca:42:e2:c9:d8:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Validity
Not Before: Feb 16 23:00:41 2025 GMT
Not After : Feb 17 23:00:41 2025 GMT
Subject: CN=c6aa171de05e71c29ba72a7f911ea6c8a9e15303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:ed:d6:c7:77:ab:cd:25:e1:a2:c9:99:6e:
78:65:0e:a9:a8:0f:9a:d4:a7:7a:2a:32:e9:25:2d:
e5:98:45:5f:c3:db:f4:d8:34:4d:00:a9:42:7e:48:
65:bb:81:20:7c:f1:58:e8:47:38:80:15:e9:36:46:
31:75:c4:c7:43:ff:a3:30:d0:a6:89:39:e2:b1:8a:
51:38:d0:d6:34:92:6d:44:44:fb:71:4c:d2:59:34:
54:30:fc:46:18:06:0e:e6:2a:ca:d3:0c:e6:d0:4c:
ea:74:02:bf:cd:5a:23:3f:4a:9d:53:95:76:17:5f:
07:0a:ee:a2:fb:05:a3:c0:6a:c6:e3:a5:c6:12:26:
e1:46:03:61:7f:8b:e8:23:ba:eb:d1:bb:0a:f2:1d:
90:32:e9:b6:38:74:b8:9f:c1:56:df:00:af:27:b1:
9f:75:ea:38:2d:aa:f5:40:5a:2e:c2:30:88:c2:78:
45:35:96:cb:79:9e:21:87:ef:bb:cb:3d:14:a7:a8:
4e:10:0e:4f:8b:70:48:df:b0:85:80:b2:e0:f0:92:
c3:57:34:45:85:57:f7:88:a8:bd:13:21:cf:7c:67:
2e:08:a2:ea:5d:1e:f4:f8:61:16:cd:c7:03:bb:ea:
fd:ce:e4:4c:8e:2a:5c:0d:1f:bc:5a:df:76:28:ce:
da:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AA:17:1D:E0:5E:71:C2:9B:A7:2A:7F:91:1E:A6:C8:A9:E1:53:03
X509v3 Authority Key Identifier:
keyid:5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5a:70:bd:dc:fc:de:9c:57:c4:34:5d:dd:90:de:84:80:c2:
1f:5b:2c:3e:72:92:1d:f4:f5:c3:7b:86:64:f9:1c:d9:43:81:
78:be:b3:9e:02:6d:bb:61:c4:c9:36:5e:e2:73:0f:24:f3:90:
da:fd:8b:28:b9:32:f0:ed:53:a5:7b:c7:34:01:5a:97:08:fe:
78:d4:c5:75:dd:0b:3e:34:ae:c2:c7:b0:29:09:f8:55:fb:6f:
28:41:58:2a:af:3c:4f:67:f8:cb:a0:87:88:55:cd:a0:f5:d7:
84:ac:ac:2d:e6:f1:58:bf:80:f5:cd:6f:0b:c6:d4:87:c6:65:
4d:86:7d:6d:ba:6f:38:75:ab:33:ad:48:1f:a1:2d:dc:18:3a:
7e:f8:d4:3a:c4:c7:ed:e7:16:9c:9d:3e:63:44:85:f4:12:e8:
03:99:6f:99:7d:97:20:03:d2:27:dd:44:43:5d:6a:25:9d:96:
5d:5d:0a:84:a4:2f:9a:af:3d:dc:02:b6:4e:ee:44:87:5d:f7:
b1:92:b2:1b:b4:4e:11:00:5e:79:46:29:80:b6:d1:38:de:91:
bc:00:50:7e:1e:db:33:ea:9c:bc:81:8f:24:a7:91:36:01:4d:
32:c3:f9:68:3b:1e:9f:6a:9b:48:f5:7c:6e:8f:9e:67:07:63:
d8:31:d1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:31 2025 by rpki-client