Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
File: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft (raw, json)
Hash identifier: wKJsS16gbWYmK4WY6UvhUoVWvmvAK0rI6aS9kHgu1Dk=
Subject key identifier: CA:90:63:87:AE:6D:E0:97:A9:B8:3E:66:7C:2D:98:79:B6:02:38:2C
Authority key identifier: 5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
Certificate issuer: /CN=5f2be62be753ba9929355b4ce988bae12af7272a
Certificate serial: 0194C3510653780A4DC27053819285B62776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
Manifest number: 0386
Signing time: Sat 01 Feb 2025 21:00:54 +0000
Manifest this update: Sat 01 Feb 2025 21:00:54 +0000
Manifest next update: Sun 02 Feb 2025 21:00:54 +0000
Files and hashes: 1: ESLl-bZ97LqqEu-5c2cw2-HWsjE.roa (hash: Jxh/Q8xcc0uLDf1/zXrtw9NWQZKR5wMyKpRis33JWsQ=)
2: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl (hash: M3q7zF63s542jcbE6Wk7Jzwi4k1GMvd5gKBcg3kDZ1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:51:06:53:78:0a:4d:c2:70:53:81:92:85:b6:27:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2be62be753ba9929355b4ce988bae12af7272a
Validity
Not Before: Feb 1 21:00:54 2025 GMT
Not After : Feb 2 21:00:54 2025 GMT
Subject: CN=ca906387ae6de097a9b83e667c2d9879b602382c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:fa:73:44:a8:ed:e5:2a:ba:12:99:af:85:
04:a2:55:ba:98:32:83:59:ec:7c:aa:0c:3e:31:b8:
49:f8:1b:17:50:c0:e6:6f:0b:34:3e:19:a0:5a:ca:
04:ac:b3:e2:ed:12:4b:5c:f2:87:cf:4a:9c:4b:0d:
19:f4:bc:ea:a8:c9:c6:67:92:6d:a5:c8:7b:03:bf:
2e:c1:52:ef:7f:79:5c:13:2d:c3:c3:37:85:a2:f4:
4a:c2:34:c2:20:cc:bd:39:7d:df:ac:eb:9a:1a:b7:
46:4f:a9:cd:02:be:b3:01:94:b0:c8:a0:0f:2b:81:
cf:7d:36:9e:81:1f:30:a0:12:ff:fa:23:47:7e:56:
11:fd:f2:65:fd:c1:e8:d3:67:ca:28:c8:2a:0b:c0:
ae:e4:06:ea:51:ea:5b:bd:f2:fc:40:b8:bd:6b:1a:
03:89:f6:6b:ba:3f:02:f9:df:ba:1e:8f:d7:b3:1e:
0c:e4:54:61:df:9a:a5:4b:49:b7:86:77:0e:a6:14:
ab:fb:35:63:04:6f:09:9f:90:df:50:d0:c6:92:08:
a4:45:9b:0e:7e:3d:97:0f:b0:24:b3:11:65:16:c6:
3e:2e:40:5d:ba:58:71:76:eb:67:d7:d3:c1:03:29:
69:ba:52:fe:4e:42:20:92:53:87:71:91:a7:69:ae:
4c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:90:63:87:AE:6D:E0:97:A9:B8:3E:66:7C:2D:98:79:B6:02:38:2C
X509v3 Authority Key Identifier:
keyid:5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:53:33:28:da:fc:04:ef:71:af:57:fe:43:c9:cb:40:69:f5:
60:c6:31:03:8b:85:98:09:47:e1:11:6f:cf:1b:ff:a8:50:9d:
e5:f9:c3:fa:05:ea:54:e6:15:b0:17:d6:0c:cd:5d:1e:82:69:
8f:8f:59:59:fc:a1:b3:73:b8:c5:5f:dd:06:84:e0:0b:14:5a:
9c:f1:17:49:75:b2:54:7c:6f:fa:d5:1e:39:cd:9b:03:cb:5f:
58:c8:66:f1:28:5b:14:ec:c2:d7:ce:b2:8b:56:d7:22:1e:6b:
4c:77:34:e4:a7:db:cb:94:b1:d3:7a:a3:87:16:a0:b3:57:18:
6e:a5:a9:3e:e9:c5:ed:65:0c:5f:fa:a0:c8:16:7c:a0:8a:54:
80:12:18:5e:4b:31:c1:d7:b8:da:3d:54:48:b1:1c:49:cc:47:
6b:41:db:c8:22:7a:0e:1b:2b:c9:23:31:5c:11:00:b8:f6:04:
54:f8:fd:7c:55:a6:c8:04:d6:92:02:24:4b:93:84:d1:61:4a:
1f:75:d4:1a:ee:15:70:4d:55:b9:52:63:e7:6a:06:b1:22:84:
1d:3b:29:69:eb:a1:4c:81:7c:28:5e:fa:50:3a:3e:98:dc:6a:
37:f5:3f:ff:dc:d3:2d:56:94:be:25:05:e3:3a:24:3c:ac:52:
71:b5:b5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:42:09 2025 by rpki-client