Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
File: Xjy32YLH-e28k9TLQrlPoCnDgt8.mft (raw, json)
Hash identifier: vEXamZiZ5UChKmr9Bqsyw526SikodWDL+W3FSUqAX6c=
Subject key identifier: 2C:1C:D5:A3:F0:FC:E5:22:F2:8E:83:BA:78:1D:5E:36:5F:82:85:99
Authority key identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
Certificate issuer: /CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Certificate serial: 019511A2F2A850BA51E150133E212343D571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
Manifest number: 0BB6
Signing time: Mon 17 Feb 2025 02:00:46 +0000
Manifest this update: Mon 17 Feb 2025 02:00:46 +0000
Manifest next update: Tue 18 Feb 2025 02:00:46 +0000
Files and hashes: 1: Q4-WTo5cCXeD-w1sheBv_gjD51g.roa (hash: YXa3b/p8YeGWH77UlVMEIh9uzLUPpaYfJzmKNDjEbns=)
2: Xjy32YLH-e28k9TLQrlPoCnDgt8.crl (hash: X+QER3CnvQ7OklLatA8ZywkLOt2zgoWqpy5ZOZ9k7oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:f2:a8:50:ba:51:e1:50:13:3e:21:23:43:d5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Validity
Not Before: Feb 17 02:00:46 2025 GMT
Not After : Feb 18 02:00:46 2025 GMT
Subject: CN=2c1cd5a3f0fce522f28e83ba781d5e365f828599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:59:0c:c4:e9:ab:63:51:46:1a:50:c1:13:
5d:57:84:ca:4f:37:9d:2d:4c:87:6c:d4:4b:01:54:
c7:ce:ba:cf:57:65:4a:fd:99:22:23:e1:8b:98:ad:
2d:13:41:a1:48:5e:63:0d:b0:52:6d:0f:19:a4:3a:
3b:79:5f:d0:90:92:ed:e5:4d:74:ad:26:a5:0b:a0:
87:0a:3b:88:f5:96:1d:5f:5e:3f:c0:53:55:3c:32:
4f:4e:31:cd:57:9b:a1:3e:8b:5c:b4:5d:18:fc:6f:
04:bf:92:d9:46:ab:7b:2d:37:8a:bd:7a:f2:43:ab:
4c:aa:ed:cc:cb:fc:10:49:9d:2d:5e:7e:0e:d2:a3:
e7:27:35:0a:56:4e:7e:ad:41:bb:a1:53:46:52:d2:
cb:76:86:12:4a:72:28:b7:20:46:d1:dc:39:4e:1f:
26:d2:ca:f2:c3:07:83:5b:97:42:63:5f:ea:31:a7:
58:f8:bc:d1:08:b6:88:d7:29:8b:07:07:63:e6:38:
10:c4:b4:66:bd:43:25:e6:74:11:03:f7:70:a5:13:
1a:e0:b1:34:e6:35:12:b0:2f:e3:80:97:c7:30:d5:
7e:e0:b3:69:a1:e1:03:40:74:d2:fb:0e:c4:a9:8c:
fc:37:42:dd:0b:22:dd:ef:2b:1d:01:34:e3:43:bf:
4f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1C:D5:A3:F0:FC:E5:22:F2:8E:83:BA:78:1D:5E:36:5F:82:85:99
X509v3 Authority Key Identifier:
keyid:5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f6:48:8d:bc:b7:76:df:fe:1f:e7:a6:2b:33:58:ed:29:82:eb:
a0:dc:cd:54:8e:70:d0:94:ee:3f:7e:9f:ae:9c:02:24:b1:9d:
5b:fd:fa:50:6a:0b:df:08:fd:de:0b:4f:92:f4:f7:d0:fd:c5:
27:11:94:39:c2:43:a8:ce:11:2b:1d:14:c2:bf:92:4a:2f:47:
63:3e:52:0e:c9:6e:6f:00:72:3c:05:fd:92:87:fa:b3:9e:86:
cf:cc:a9:ca:15:2c:11:2e:0f:95:b3:ea:11:f3:ab:fb:d3:a0:
d3:1a:33:3f:20:60:e6:d8:15:7e:60:1c:8c:78:7d:b8:9a:48:
6f:57:2a:94:10:89:a3:77:12:df:99:aa:cd:fe:74:7d:8a:e3:
06:b6:9c:aa:fd:23:a1:24:f5:91:7e:7e:fa:c4:57:81:a7:62:
aa:07:56:4e:c7:89:00:75:31:26:35:2b:c0:ab:b1:39:09:b6:
36:16:96:37:0a:76:d1:d3:2d:8b:7d:38:07:14:37:ac:04:17:
02:a2:c9:1d:eb:9d:0c:f9:79:7e:88:7c:1b:a6:f9:7e:8c:9c:
73:e4:de:69:3b:ba:65:2c:b4:60:1f:50:6a:78:6b:68:8d:ad:
3f:28:05:1e:95:31:f8:30:63:7e:39:9c:b0:e6:c9:d5:8a:66:
45:f5:23:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:36 2025 by rpki-client