Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4a89cb-12e9-4ddd-a02f-9166657c7d9f/1/XTbQLD5qwUds6mipqNgzJw0svz4.mft
File: XTbQLD5qwUds6mipqNgzJw0svz4.mft (raw, json)
Hash identifier: PJKmU3V/WcgHOyYjDcvUbnNnKpi2W3E3vtUnrcMJl/s=
Subject key identifier: BE:79:D1:5F:34:0A:C0:FE:03:00:3B:41:C3:9E:FD:34:BB:2A:C2:49
Authority key identifier: 5D:36:D0:2C:3E:6A:C1:47:6C:EA:68:A9:A8:D8:33:27:0D:2C:BF:3E
Certificate issuer: /CN=5d36d02c3e6ac1476cea68a9a8d833270d2cbf3e
Certificate serial: 0194C4D13C326576B6A75C0591FE66DC0BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTbQLD5qwUds6mipqNgzJw0svz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4a89cb-12e9-4ddd-a02f-9166657c7d9f/1/XTbQLD5qwUds6mipqNgzJw0svz4.mft
Manifest number: 0ED6
Signing time: Sun 02 Feb 2025 04:00:34 +0000
Manifest this update: Sun 02 Feb 2025 04:00:34 +0000
Manifest next update: Mon 03 Feb 2025 04:00:34 +0000
Files and hashes: 1: XTbQLD5qwUds6mipqNgzJw0svz4.crl (hash: r4Vbe/BnGkXo+8CH8Vhzq6QVFUBnE5PHm4rBSNkcGg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4a89cb-12e9-4ddd-a02f-9166657c7d9f/1/XTbQLD5qwUds6mipqNgzJw0svz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/4a89cb-12e9-4ddd-a02f-9166657c7d9f/1/XTbQLD5qwUds6mipqNgzJw0svz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTbQLD5qwUds6mipqNgzJw0svz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:3c:32:65:76:b6:a7:5c:05:91:fe:66:dc:0b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d36d02c3e6ac1476cea68a9a8d833270d2cbf3e
Validity
Not Before: Feb 2 04:00:34 2025 GMT
Not After : Feb 3 04:00:34 2025 GMT
Subject: CN=be79d15f340ac0fe03003b41c39efd34bb2ac249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9e:b0:b1:b5:13:bc:7a:6d:b5:61:db:f9:f6:
5c:2c:2b:7f:89:01:74:53:ca:4c:b0:53:fc:41:d2:
c3:e0:3f:4c:d3:b6:f4:69:c7:6a:82:5b:d4:b9:24:
8a:16:31:8e:7c:f0:96:8b:23:de:c7:1c:c0:f4:98:
ff:83:99:af:24:4d:9a:5a:8a:6e:04:31:d4:43:25:
f5:51:f0:25:b6:d5:27:8b:36:39:9d:34:6f:8e:af:
21:53:25:4e:78:24:03:db:bd:57:55:8a:f0:40:85:
be:62:ad:7d:a0:4f:e1:43:20:95:a5:63:bd:e0:00:
e6:16:1c:2d:4b:68:86:52:e8:c0:15:b1:3c:52:a0:
64:9f:65:17:b0:f6:73:36:a1:ac:0c:4a:cb:0c:82:
7b:ef:5a:0b:80:7b:36:44:ff:40:fc:66:24:2f:c3:
a1:ff:01:f0:26:75:d8:fa:b2:5b:94:3b:95:9b:90:
87:b0:1f:97:ac:06:64:c4:02:09:46:b7:07:9f:d8:
76:03:af:d7:7b:b3:cf:77:74:b3:fe:07:4b:20:d9:
98:12:e4:0a:69:02:a8:cb:cb:14:e2:49:f7:ee:74:
41:ec:d1:a5:f0:7c:17:fb:17:32:4f:d2:19:05:01:
68:72:dd:e4:9b:ac:cd:d8:b9:61:e9:79:83:0b:52:
63:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:79:D1:5F:34:0A:C0:FE:03:00:3B:41:C3:9E:FD:34:BB:2A:C2:49
X509v3 Authority Key Identifier:
keyid:5D:36:D0:2C:3E:6A:C1:47:6C:EA:68:A9:A8:D8:33:27:0D:2C:BF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTbQLD5qwUds6mipqNgzJw0svz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4a89cb-12e9-4ddd-a02f-9166657c7d9f/1/XTbQLD5qwUds6mipqNgzJw0svz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4a89cb-12e9-4ddd-a02f-9166657c7d9f/1/XTbQLD5qwUds6mipqNgzJw0svz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f0:ba:78:73:61:8d:86:9f:59:41:00:a6:0f:31:5d:7a:e1:
5b:a4:78:ff:4a:70:56:c2:92:45:e1:88:fb:2d:25:40:35:21:
e8:77:d3:e9:d4:80:bc:5f:bd:18:38:f3:c3:c2:1a:69:ff:20:
d4:21:13:f0:6e:70:f2:74:41:30:cf:83:d6:df:93:57:a4:ba:
37:d0:e5:0d:dc:86:67:8c:e5:91:cb:42:8d:b2:25:c6:fc:e2:
89:e7:8a:0e:ab:e7:29:0a:52:8e:ba:57:fb:55:e1:08:a1:93:
d7:1b:68:73:fc:2e:ce:cc:5b:af:23:34:87:07:c9:b4:08:7b:
1b:4a:8d:5f:60:3d:bb:64:c3:d1:13:64:92:1e:9b:72:97:32:
26:3b:d6:53:97:c5:d5:92:3d:10:d5:51:b6:af:e6:d3:56:82:
1c:61:a4:3a:c7:1a:60:b0:88:b3:38:0e:60:41:5c:51:69:0a:
30:9b:92:30:78:47:ba:47:fa:bd:29:eb:ff:cd:9c:d4:5d:89:
a4:94:ef:15:3b:58:e1:00:8e:2f:7a:a7:de:fa:b3:07:9a:93:
c4:88:a0:d6:26:01:f3:da:f2:ab:59:55:6f:c6:98:ee:d9:c1:
e1:f5:4d:d3:26:08:6a:49:f1:6c:ba:cf:9a:ed:62:e2:28:36:
2e:83:64:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:31 2025 by rpki-client