Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
File: SXioZBznhb40aFAwUncj5f3OVio.mft (raw, json)
Hash identifier: MLzCz93eN/AfrSHeaa9EpJU2dOIC2nE8/GVz8zmIrFc=
Subject key identifier: 80:EE:E2:7E:18:73:5D:78:A1:DF:B0:5E:DD:3C:0B:0A:BB:5D:5C:E2
Authority key identifier: 49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
Certificate issuer: /CN=4978a8641ce785be34685030527723e5fdce562a
Certificate serial: 0194C3BE842BF8EDB0E3B3DFDC6A32D6C551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
Manifest number: 046A
Signing time: Sat 01 Feb 2025 23:00:30 +0000
Manifest this update: Sat 01 Feb 2025 23:00:30 +0000
Manifest next update: Sun 02 Feb 2025 23:00:30 +0000
Files and hashes: 1: BCD_tpHD4CbGfbV_PdrLa7vTpXk.roa (hash: 3ZjEUHk0H2GaQYj5jwvFZHg7bwJy5JXMVYVGmhkBhZA=)
2: SXioZBznhb40aFAwUncj5f3OVio.crl (hash: syxqM4S7e+bKuOvYdZzOmPCoQ64hQgMY0REF5nRfwNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:84:2b:f8:ed:b0:e3:b3:df:dc:6a:32:d6:c5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4978a8641ce785be34685030527723e5fdce562a
Validity
Not Before: Feb 1 23:00:30 2025 GMT
Not After : Feb 2 23:00:30 2025 GMT
Subject: CN=80eee27e18735d78a1dfb05edd3c0b0abb5d5ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ff:ed:55:e8:4e:66:46:7e:1a:65:63:80:fd:
dc:99:51:5d:00:19:87:a1:26:78:00:fd:fa:38:e7:
62:d5:13:34:5e:e8:ea:94:66:6f:58:26:69:8f:4c:
3e:a6:9c:10:2f:29:ae:89:f8:82:8f:c4:ca:d5:ff:
52:65:5c:b5:17:f6:a3:74:76:2b:3f:e5:37:7d:73:
d9:b9:71:b9:14:81:fb:dd:ec:c1:3b:8f:0f:72:39:
fd:b3:0d:cb:d9:41:66:a2:ef:e2:ba:ec:c5:d5:e0:
f6:ed:e8:13:c3:4d:f3:cc:21:8d:7f:be:9f:6f:8a:
39:ca:cb:b3:ee:27:be:18:7c:db:76:04:83:ed:9c:
4d:38:9a:e4:4d:4d:c6:4d:e7:85:3a:d6:f7:aa:e6:
1e:40:34:ca:c4:03:a6:d3:22:35:99:5e:54:a0:5f:
2d:a6:49:31:ab:8b:be:9d:9e:39:2c:cf:79:d5:c7:
e1:17:75:95:77:ea:94:ed:65:ba:a7:8c:b5:c2:fc:
5d:44:b1:42:84:95:c6:fc:f0:13:e1:13:39:5a:ee:
ec:6b:f2:af:b0:54:5d:74:e8:d8:71:cd:26:9d:dc:
e3:e3:aa:0a:23:07:b6:bf:be:31:5b:2a:25:fe:76:
7d:e4:fb:bb:b0:99:59:15:28:ec:38:53:6e:e0:df:
d7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EE:E2:7E:18:73:5D:78:A1:DF:B0:5E:DD:3C:0B:0A:BB:5D:5C:E2
X509v3 Authority Key Identifier:
keyid:49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:76:cf:22:6c:16:85:26:67:e5:2f:c6:56:b1:54:df:38:d0:
cd:c1:18:6f:a6:d7:f4:4e:e9:21:b1:28:dc:cc:54:35:7f:e3:
8e:37:65:0c:10:4c:50:21:db:2e:59:0b:f3:a1:f8:1b:77:8d:
97:ca:23:d2:a3:62:f8:af:f8:14:f9:ab:de:bd:d9:b1:f8:77:
e2:26:36:3f:b0:55:21:06:74:d4:7d:fc:79:c2:00:40:4a:68:
66:06:13:84:96:4d:e2:75:95:06:9e:6c:55:a0:52:fd:06:c8:
e9:f2:4e:d7:51:03:43:49:6c:9e:76:fc:cb:73:a9:7b:b3:95:
45:2e:a9:ea:81:2b:04:7f:44:80:38:9c:ff:cf:9a:1e:c7:d2:
ec:0a:7b:78:3b:ff:f6:ae:ab:74:97:7e:e3:26:95:c6:9e:dc:
1f:84:94:ed:f4:bb:9f:2e:dc:8a:47:76:f4:92:49:64:bb:55:
38:da:42:0e:e8:19:f4:ba:2d:d1:df:8d:95:13:f9:2e:56:7b:
79:46:ae:48:39:c3:08:29:f3:d9:82:73:04:a9:15:35:c7:22:
92:56:e3:30:36:25:5a:3c:23:fd:83:01:8d:ac:b1:de:6d:29:
fc:8e:00:71:cb:c3:dc:9e:aa:7b:be:8a:96:40:0b:20:2c:38:
1b:31:30:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:47 2025 by rpki-client