Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
File: XB3W7EouHzdshVxYMSGVoAXNuFA.mft (raw, json)
Hash identifier: SNSq7p9s6IHrBxK9aCWkZ0rFJlp4ogyB94zt7rt1iC8=
Subject key identifier: 37:96:5C:BF:58:90:11:07:89:33:16:31:91:42:0A:5E:04:B6:9E:46
Authority key identifier: 5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
Certificate issuer: /CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Certificate serial: 0194C3874B11CFC278DF337562E4A5F22B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
Manifest number: 0A38
Signing time: Sat 01 Feb 2025 22:00:11 +0000
Manifest this update: Sat 01 Feb 2025 22:00:11 +0000
Manifest next update: Sun 02 Feb 2025 22:00:11 +0000
Files and hashes: 1: XB3W7EouHzdshVxYMSGVoAXNuFA.crl (hash: iioxLP2viivotUK5xLgAtKp4PQpIH6y/OeiOgR2QbbA=)
2: yHRB4Y2OAyzADCHywRZPrfJRG4I.roa (hash: NribQFyQGW5J2lu2xgI9G6pKO663m0SkQqZCGrWC3Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:4b:11:cf:c2:78:df:33:75:62:e4:a5:f2:2b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Validity
Not Before: Feb 1 22:00:11 2025 GMT
Not After : Feb 2 22:00:11 2025 GMT
Subject: CN=37965cbf589011078933163191420a5e04b69e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:41:7d:00:0c:bf:db:46:2d:26:aa:14:70:
8e:d8:1f:5a:80:5a:84:1b:23:08:5d:54:fa:8b:56:
52:55:13:ba:57:34:7a:41:f1:8b:85:1d:90:c4:82:
92:73:ed:ad:f5:6c:e3:0a:26:d3:84:71:80:09:47:
73:b9:12:55:dd:d0:b6:32:5c:35:93:4f:df:da:77:
6d:56:2b:5a:71:e8:d1:4f:95:82:14:10:41:38:d5:
a6:86:fc:ac:3c:a2:8d:2a:ea:eb:1e:b8:50:94:5d:
7f:85:fa:45:84:f8:35:15:c3:e7:94:6a:60:bc:7c:
c3:8f:2c:37:0e:0f:1d:76:32:0c:10:ca:a5:99:32:
be:34:4c:86:1d:4d:f7:88:1c:9f:41:e4:96:b1:32:
f5:d5:a8:e9:0f:28:7c:80:f4:09:49:9f:3c:e7:91:
21:68:e0:a3:43:b0:42:cf:f2:73:2d:66:de:7e:ed:
34:1b:88:4f:01:8e:11:83:8d:eb:8d:5e:2b:e5:f0:
55:92:b0:b1:45:4d:35:f1:a3:e7:c1:cb:bf:b6:b6:
a0:77:8b:be:08:5b:4b:4b:57:9d:17:f1:1f:10:9e:
76:8e:71:26:2c:d2:56:b1:0d:62:f3:9d:25:14:6e:
c8:07:3f:08:71:e3:19:d3:3e:04:96:5e:d8:6f:cf:
51:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:96:5C:BF:58:90:11:07:89:33:16:31:91:42:0A:5E:04:B6:9E:46
X509v3 Authority Key Identifier:
keyid:5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:65:92:d1:6f:bf:ed:9c:83:ff:5b:1a:74:ff:d7:53:08:76:
e3:49:1d:08:1e:e3:e4:5b:0c:5a:9b:54:1e:d6:fe:7d:7e:fd:
69:65:14:47:7a:76:b5:0b:96:6d:c5:60:b1:24:e5:be:e7:ea:
51:36:73:9d:37:fd:2a:3d:ee:f6:4a:58:1e:da:b7:d5:45:09:
8e:e0:41:90:6a:46:12:4d:4f:ed:ae:2a:0b:f1:44:72:a6:1f:
de:bb:b7:10:b8:9d:68:49:55:7f:d2:73:6d:55:b7:c2:bb:db:
69:21:8f:aa:2f:60:4c:7e:5f:90:04:99:31:82:3e:41:cc:df:
c2:18:7c:3d:e3:34:d7:da:93:15:d7:e8:19:9a:09:d9:33:3c:
d2:2d:52:1c:39:84:36:d9:1c:50:7b:59:62:6e:1f:8d:39:c4:
69:93:7e:1f:91:b4:a9:5d:1f:f4:38:98:1c:80:a0:4d:21:d0:
c3:35:99:0b:f9:af:46:f7:39:35:91:10:e1:f7:1d:a6:06:af:
96:50:20:30:15:0d:0e:52:1b:4e:0a:b0:2b:ae:46:23:56:d6:
82:8c:63:72:93:a6:25:cb:1b:40:c0:b4:b0:3e:9f:a7:7d:41:
11:ee:6c:bd:4c:19:97:5a:85:7a:10:95:6c:0f:65:4b:59:63:
d8:2c:1d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:16 2025 by rpki-client