Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
File: XWlT20hASwxmoV8Npu-n-sCpNp4.mft (raw, json)
Hash identifier: EQs+gW0SJgBqGJFT0M5VwSPbBCGZ9OkOgXbN/T9Ug8U=
Subject key identifier: 4F:2B:EA:01:38:87:F7:DA:27:6B:3D:31:6F:13:FE:2B:59:74:41:86
Authority key identifier: 5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
Certificate issuer: /CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Certificate serial: 0194C50803EDAB9E6292018FDF615CCDE58A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
Manifest number: 142E
Signing time: Sun 02 Feb 2025 05:00:24 +0000
Manifest this update: Sun 02 Feb 2025 05:00:24 +0000
Manifest next update: Mon 03 Feb 2025 05:00:24 +0000
Files and hashes: 1: XWlT20hASwxmoV8Npu-n-sCpNp4.crl (hash: UUWyEfSfWrPmZrIL+f7wzBhAjBt3e4gOLzown9rTrfA=)
2: hC0t1cqhdoh6iyJ3cpDGc1N-nWg.roa (hash: PxIEeNMR+krZxWibCKKwK2CkVaApOYKXyBnr/5vAmac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:03:ed:ab:9e:62:92:01:8f:df:61:5c:cd:e5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Validity
Not Before: Feb 2 05:00:24 2025 GMT
Not After : Feb 3 05:00:24 2025 GMT
Subject: CN=4f2bea013887f7da276b3d316f13fe2b59744186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:93:34:e8:27:32:bd:5c:a5:67:9d:fe:e7:34:
72:02:dc:b0:08:be:55:44:69:4b:dd:be:f2:c3:f9:
7d:11:a4:f6:e8:c8:d2:6f:f3:37:1d:51:d3:73:8b:
3d:c5:33:41:8f:e6:8c:0e:31:4d:74:0b:29:50:cc:
1f:ab:83:1e:e1:47:ce:1e:a1:e3:57:64:fe:26:46:
59:c7:a4:74:31:51:d7:2b:3d:43:66:1b:00:2c:d9:
5b:99:dc:95:3f:d4:3a:88:e2:86:08:8d:91:27:ca:
90:11:08:c7:fd:e8:96:27:0c:b5:0c:1b:3b:29:3a:
9a:2d:d3:bb:de:fb:11:c1:2e:b7:41:e6:97:8d:ae:
6b:09:d2:f7:ca:4b:68:f2:41:09:29:98:31:a8:2b:
fa:ad:47:0f:55:31:c0:0c:e9:f5:4e:dc:34:13:29:
8a:c0:98:73:a1:7e:5f:42:58:b9:07:6d:b9:0b:f5:
03:6a:e0:a8:77:2a:3a:55:64:57:74:c0:68:ae:5a:
18:70:d2:ec:4f:92:58:cd:a2:6e:2e:52:9c:f2:6d:
6b:9a:e3:63:6d:9e:be:0c:5c:7d:3a:c0:ac:17:8b:
e7:90:3e:fb:e2:b5:03:fd:fe:1b:37:6f:ea:ce:ae:
53:b7:2b:eb:f8:5f:36:1e:04:2d:48:2a:89:2e:20:
f1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2B:EA:01:38:87:F7:DA:27:6B:3D:31:6F:13:FE:2B:59:74:41:86
X509v3 Authority Key Identifier:
keyid:5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a5:1e:1a:26:26:f3:be:ed:1f:cd:24:ba:83:a4:e7:97:91:
d8:0c:d3:5e:d3:83:2e:96:80:b7:5f:df:a6:13:d6:27:f5:28:
5c:64:91:fb:82:68:9f:74:fc:b9:e4:99:30:35:75:f1:f8:a8:
71:71:02:cb:44:85:a3:dd:35:96:a1:60:8e:03:7f:99:bb:a8:
7c:93:af:4b:d2:2e:e9:07:74:de:b4:76:6b:eb:e3:92:17:64:
a5:1a:5f:b1:87:66:40:44:47:46:51:ab:f2:4e:79:ba:24:79:
7d:df:00:ab:db:25:7f:3d:25:3e:64:b3:dc:1f:c3:2b:a7:55:
e6:2a:a9:b2:8a:19:49:b5:76:7f:83:f7:c6:4b:65:1d:a5:bc:
2e:36:cb:15:d6:83:c5:bb:15:1f:eb:4f:42:3a:bc:68:04:08:
3e:82:31:dd:c6:9c:88:c6:99:ee:19:6f:92:5d:de:74:e5:bb:
67:e3:e7:0c:99:93:c5:0c:f8:19:e5:16:dd:77:6b:c4:5d:41:
33:75:9e:40:b7:b6:b8:6c:a8:e7:f7:ab:fe:51:d8:6e:22:5a:
93:1c:a1:42:a3:cc:dd:8f:70:e1:6e:88:16:e5:78:86:c3:91:
68:35:fe:57:56:12:40:ad:a8:38:04:b1:09:ce:a4:06:8b:b2:
cb:b1:32:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:20 2025 by rpki-client