Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
File: XinALSYfkT6lv4PCvHwzQUpCvMo.mft (raw, json)
Hash identifier: eRZdVD3gWER1rvCXxRZPn0dDM6sJv1j10qAcS+V6XVI=
Subject key identifier: 93:EB:25:97:88:74:F3:08:50:16:AF:00:D5:90:9C:97:73:12:84:B2
Authority key identifier: 5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
Certificate issuer: /CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Certificate serial: 0194C4D0EEFC0157E9BA90C32F50B864B30C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
Manifest number: 0B16
Signing time: Sun 02 Feb 2025 04:00:14 +0000
Manifest this update: Sun 02 Feb 2025 04:00:14 +0000
Manifest next update: Mon 03 Feb 2025 04:00:14 +0000
Files and hashes: 1: 38xzFnggY2WqYErPpIPdnil2M-I.roa (hash: 3L7P4weXGgXURnYb88EC9SZdycP07LPWwVA0kWFKQpE=)
2: XinALSYfkT6lv4PCvHwzQUpCvMo.crl (hash: FitONNYemR4QLZ0JNqJxI5pWXXAv7gBS1s3428XKwaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:ee:fc:01:57:e9:ba:90:c3:2f:50:b8:64:b3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Validity
Not Before: Feb 2 04:00:14 2025 GMT
Not After : Feb 3 04:00:14 2025 GMT
Subject: CN=93eb25978874f3085016af00d5909c97731284b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:f7:a5:b6:1a:88:6c:62:9e:9e:72:c6:63:
77:0a:f1:6e:af:95:6e:32:7b:d3:e3:87:78:73:86:
46:74:b8:f7:39:3e:dc:ec:53:ee:a4:e2:1c:33:df:
28:d4:de:6d:37:95:27:97:0b:33:12:92:7b:81:46:
02:a6:e2:da:ca:f0:19:50:22:ee:4a:50:20:a2:26:
85:51:88:6a:0a:fa:94:6e:8f:67:3b:26:5a:75:9d:
56:4f:87:48:1a:7c:74:dc:d5:25:b6:a4:02:68:cc:
eb:34:d4:20:c6:f5:bc:33:99:c6:88:44:84:f8:f6:
30:57:13:af:2b:9d:61:9f:67:66:e2:96:b3:b1:54:
60:ca:95:c5:22:46:59:77:a0:02:5d:ad:41:a4:7c:
cf:ce:34:ab:31:97:4b:ee:7b:b5:dc:e7:2b:f0:78:
c6:92:12:6d:0b:b1:a0:c6:06:ed:6b:e2:29:d2:ec:
03:64:0a:be:cb:e0:67:bd:2d:a6:0e:b2:18:f9:1a:
16:18:0e:88:f7:45:ec:18:a4:80:a4:31:96:be:0f:
9a:85:7d:03:51:7d:9d:55:ea:43:17:6a:fe:12:17:
5e:7f:a9:8c:34:dc:fc:4c:fc:89:12:e9:9c:49:e4:
0c:d8:b0:79:c2:ab:b6:99:b8:5c:be:fc:62:ae:bb:
c6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EB:25:97:88:74:F3:08:50:16:AF:00:D5:90:9C:97:73:12:84:B2
X509v3 Authority Key Identifier:
keyid:5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:da:c3:61:40:da:82:bf:ba:e7:47:c4:d6:d4:55:a0:30:a2:
a7:67:2a:6e:06:61:e1:be:f5:c8:4c:8d:88:d1:08:0d:47:31:
5d:8b:0c:4e:3d:b9:cb:da:92:37:a4:bc:fa:25:3f:3a:dc:7c:
4b:cd:80:6a:4c:bd:e9:a9:68:07:11:7d:b3:7f:01:ac:ed:d0:
28:5d:e6:1b:f7:c8:9c:7a:d5:bc:b3:56:54:08:25:2f:1c:7c:
68:02:23:c7:f0:fc:a3:1f:5b:f7:a1:e1:41:0f:77:62:35:b9:
c4:a0:dc:ab:84:3c:97:58:c4:d5:ca:a7:cd:11:30:86:3f:11:
f4:e4:88:b5:e4:83:32:04:53:b1:1e:83:df:c3:bd:ec:28:bc:
df:e0:aa:c9:3b:72:33:c4:b4:97:93:62:46:00:a4:f0:74:e0:
9a:be:85:e2:dd:a3:f6:d9:84:35:06:a2:c0:d5:cb:bf:e4:2f:
db:e6:f8:7a:f2:e0:3c:b4:a2:d5:1a:ed:9b:0b:30:02:5f:bc:
0b:5f:a4:4c:62:6d:a5:7c:b4:87:ce:1c:58:00:5e:36:f1:ae:
07:7e:db:4e:d9:b5:e1:ad:68:4d:e7:cd:d5:4a:c8:9c:81:b9:
40:16:c2:7e:ab:47:89:d9:fd:38:ba:18:ef:54:f1:13:52:82:
c1:a3:ee:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0O78AVfpupDDL1C4ZLMMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMjljMDJkMjYxZjkxM2VhNWJmODNjMmJjN2MzMzQxNGE0
MmJjY2EwHhcNMjUwMjAyMDQwMDE0WhcNMjUwMjAzMDQwMDE0WjAzMTEwLwYDVQQD
Eyg5M2ViMjU5Nzg4NzRmMzA4NTAxNmFmMDBkNTkwOWM5NzczMTI4NGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgD3pbYaiGxinp5yxmN3CvFur5Vu
MnvT44d4c4ZGdLj3OT7c7FPupOIcM98o1N5tN5UnlwszEpJ7gUYCpuLayvAZUCLu
SlAgoiaFUYhqCvqUbo9nOyZadZ1WT4dIGnx03NUltqQCaMzrNNQgxvW8M5nGiESE
+PYwVxOvK51hn2dm4pazsVRgypXFIkZZd6ACXa1BpHzPzjSrMZdL7nu13Ocr8HjG
khJtC7Ggxgbta+Ip0uwDZAq+y+BnvS2mDrIY+RoWGA6I90XsGKSApDGWvg+ahX0D
UX2dVepDF2r+Ehdef6mMNNz8TPyJEumcSeQM2LB5wqu2mbhcvvxirrvGowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPrJZeIdPMIUBavANWQnJdzEoSyMB8GA1UdIwQY
MBaAFF4pwC0mH5E+pb+Dwrx8M0FKQrzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGluQUxTWWZrVDZsdjRQQ3ZId3pRVXBDdk1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hYzEyNTMtMDQ1OS00NmNmLWIxYjkt
OWFjMWE3ZTRjNDA2LzEvWGluQUxTWWZrVDZsdjRQQ3ZId3pRVXBDdk1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hYzEyNTMtMDQ1OS00NmNmLWIxYjktOWFjMWE3ZTRjNDA2
LzEvWGluQUxTWWZrVDZsdjRQQ3ZId3pRVXBDdk1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdrDYUDa
gr+650fE1tRVoDCip2cqbgZh4b71yEyNiNEIDUcxXYsMTj25y9qSN6S8+iU/Otx8
S82Aaky96aloBxF9s38BrO3QKF3mG/fInHrVvLNWVAglLxx8aAIjx/D8ox9b96Hh
QQ93YjW5xKDcq4Q8l1jE1cqnzREwhj8R9OSIteSDMgRTsR6D38O97Ci83+CqyTty
M8S0l5NiRgCk8HTgmr6F4t2j9tmENQaiwNXLv+Qv2+b4evLgPLSi1RrtmwswAl+8
C1+kTGJtpXy0h84cWABeNvGuB37bTtm14a1oTefN1UrInIG5QBbCfqtHidn9OLoY
71TxE1KCwaPukQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:20 2025 by rpki-client