Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
File: cxwTgoWLDclamtvqRyizH54iwNg.mft (raw, json)
Hash identifier: mBeUV7TZeOIiAsMLD0MvPjhu0x4I6f94tJSIvBazXbQ=
Subject key identifier: 00:F0:25:8D:83:F4:CA:40:93:6D:04:13:92:46:6C:43:EF:E9:F9:46
Authority key identifier: 73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
Certificate issuer: /CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Certificate serial: 019510C71183D9B1BD1246A5FA6F2CC96122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
Manifest number: 05B3
Signing time: Sun 16 Feb 2025 22:00:36 +0000
Manifest this update: Sun 16 Feb 2025 22:00:36 +0000
Manifest next update: Mon 17 Feb 2025 22:00:36 +0000
Files and hashes: 1: cxwTgoWLDclamtvqRyizH54iwNg.crl (hash: HVneaTls3vFjQ5O92/sSd7U9zqvckf6OwnF7KZJB2ok=)
2: xsLt5XL-OWIaNdR6BZ8HbsppEGM.roa (hash: fVuO1qpyondG1qElrhxFzaCfBXaBgOTcL+nbs40PcY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:11:83:d9:b1:bd:12:46:a5:fa:6f:2c:c9:61:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Validity
Not Before: Feb 16 22:00:36 2025 GMT
Not After : Feb 17 22:00:36 2025 GMT
Subject: CN=00f0258d83f4ca40936d041392466c43efe9f946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:67:47:cc:0e:8c:e6:8b:b1:1b:79:48:eb:09:
92:3d:c4:1c:b8:f2:34:b2:f8:64:97:5c:4c:b1:4b:
df:dc:e3:94:21:4b:8a:95:37:a0:90:91:72:f0:97:
68:13:50:a5:9f:1b:97:52:c6:aa:ca:ea:e5:a2:14:
93:b4:d5:1b:8a:9c:ef:77:43:be:2f:06:9c:e8:56:
8d:34:7e:01:07:f4:73:a7:5d:44:08:8a:3f:59:aa:
e8:9e:9a:b5:a8:64:3e:71:ea:78:76:bf:32:14:5b:
f6:d6:b8:de:e8:c7:ae:2d:3a:e3:db:6c:40:8a:18:
f1:1f:00:86:43:85:41:84:c0:ef:5d:1e:eb:14:5d:
58:29:84:52:79:0b:58:03:d0:c0:37:6f:ed:30:c9:
38:b0:79:32:41:00:86:9b:52:a8:8e:ab:cf:b0:f7:
fa:cc:4a:d1:72:29:94:c3:9e:e6:a4:70:43:d9:32:
79:7e:9f:3e:d0:74:54:18:7f:4b:47:a0:7f:eb:8f:
0b:96:bd:3d:1b:43:ea:fc:cf:c1:99:0c:1e:38:1f:
05:e0:47:d1:0b:8f:e0:bc:51:a0:af:ad:3b:ec:0d:
a1:bd:9f:e2:73:76:56:3a:e1:e2:d1:a6:f3:3a:9d:
0e:db:29:7d:04:75:eb:f9:6f:04:71:86:04:15:95:
3d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F0:25:8D:83:F4:CA:40:93:6D:04:13:92:46:6C:43:EF:E9:F9:46
X509v3 Authority Key Identifier:
keyid:73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:bd:e5:07:ae:91:8c:37:ce:87:0e:40:15:98:4c:87:cd:89:
4b:85:b4:d8:3f:22:e4:4c:0b:c5:b2:62:a0:8c:58:84:18:1a:
f1:25:8b:ff:3f:74:20:bb:31:34:81:5f:d9:56:43:24:c0:5a:
9b:39:d4:d9:23:00:50:5c:27:c7:23:b5:42:e5:91:f8:c6:5a:
c6:7c:0f:35:01:6d:ef:ea:0e:f6:f2:0a:9a:2e:32:56:7e:79:
6c:13:b9:f9:4b:5a:db:c0:2e:0c:48:d2:60:84:36:8c:fe:3c:
79:d8:08:49:41:b5:3d:2f:70:bf:34:8b:ad:ed:7a:de:64:db:
fe:18:70:00:d6:ff:bf:7d:d0:c2:d4:64:1e:90:98:88:76:6b:
dc:05:9b:68:90:7c:da:01:5a:46:94:ec:0d:64:3a:1a:2c:6f:
ae:34:6a:b3:f1:39:65:b3:a3:60:db:c9:5e:a0:48:94:bd:28:
f3:1d:9f:da:12:46:2c:07:c0:cd:9e:bf:b6:74:f7:d2:40:e7:
40:1f:35:d5:ce:06:0d:83:87:b2:eb:a1:80:50:4a:97:b3:f4:
f2:d9:d8:85:a1:c6:c9:56:e7:5e:47:3d:36:40:a1:98:a7:80:
71:2e:b2:c0:d6:47:16:7b:50:00:17:b8:7d:1a:6a:15:8b:7d:
8e:fe:d4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:46 2025 by rpki-client