Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
File: xNinONTBPEpnevUSdbqEyLNtyc4.mft (raw, json)
Hash identifier: fOdAeSeG4jcCNdMZJyoOESxCKxJa//FYCePRLFPsjqs=
Subject key identifier: F1:F7:86:57:D2:C2:92:5C:31:88:D4:1E:E8:84:BC:04:D5:7B:7A:F1
Authority key identifier: C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
Certificate issuer: /CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Certificate serial: 0194C4D0F3BA1210CE9D03F9E5D3E1E85A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
Manifest number: 13BF
Signing time: Sun 02 Feb 2025 04:00:15 +0000
Manifest this update: Sun 02 Feb 2025 04:00:15 +0000
Manifest next update: Mon 03 Feb 2025 04:00:15 +0000
Files and hashes: 1: AOrWMlaoWwr9BiH2KC52e33LvU8.roa (hash: C5KmnNcC1frqJFB0GlvW18JGpvtpy3xiJI4dTDmXhFM=)
2: xNinONTBPEpnevUSdbqEyLNtyc4.crl (hash: Ila70A5OVWO5sDqU/1iRVnG+pU0Al9zyyKOlRj62K2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:f3:ba:12:10:ce:9d:03:f9:e5:d3:e1:e8:5a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Validity
Not Before: Feb 2 04:00:15 2025 GMT
Not After : Feb 3 04:00:15 2025 GMT
Subject: CN=f1f78657d2c2925c3188d41ee884bc04d57b7af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:78:d0:3b:ea:74:5f:78:ab:1d:f0:66:85:29:
d1:38:4c:bf:f1:bf:55:f2:31:5d:81:9b:f5:99:55:
76:45:5e:3d:f1:2e:1a:d0:83:0e:f2:ca:49:4b:5d:
1a:fc:cb:9f:89:9b:ed:88:61:45:48:b8:8a:a7:a5:
c5:84:ad:c3:ab:69:12:4a:ae:51:a7:b4:28:fb:f5:
30:22:30:4d:c6:18:4e:a0:7b:5d:a3:a5:06:1f:ce:
bb:74:6c:2f:62:40:f4:ee:2c:78:e9:00:cc:4c:83:
f1:31:07:c7:8c:0e:29:4a:ba:bb:59:2a:0a:8b:e3:
a4:41:87:82:94:80:4f:59:95:9b:44:9a:69:ac:94:
ce:94:d0:1f:64:dd:6c:93:55:55:99:e5:2e:94:df:
fc:2c:0f:0c:e4:61:40:b3:8d:ec:03:5c:89:a0:83:
e0:76:4a:aa:6d:c9:06:a1:8c:a7:50:85:56:be:af:
48:44:ad:dd:cf:bb:e5:11:b0:5d:3d:5b:a7:29:38:
d9:a9:6c:b9:12:ee:c6:d6:68:4f:03:59:1c:f3:ac:
7f:b8:f4:a8:5b:07:1c:94:eb:ad:15:d0:af:9e:a0:
33:62:7e:ee:76:4d:72:49:14:66:ae:99:2c:df:0c:
ff:dd:15:eb:58:df:a4:7f:f0:97:44:ea:08:85:19:
32:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F7:86:57:D2:C2:92:5C:31:88:D4:1E:E8:84:BC:04:D5:7B:7A:F1
X509v3 Authority Key Identifier:
keyid:C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d0:f0:4f:34:71:c7:a0:54:97:59:90:b4:db:93:22:e1:c3:
1a:28:90:f3:ce:51:17:96:3c:3f:4c:1d:86:08:90:3f:27:1c:
75:9f:70:3f:1a:3b:b1:56:e5:7b:de:78:88:d3:39:47:94:5c:
c6:19:f5:36:c7:8c:4b:04:d2:5a:4a:ee:b5:b8:fa:2d:28:b2:
3c:e5:fa:93:04:2f:43:a5:88:53:df:96:a4:f2:45:a1:a7:c6:
9c:d8:5d:2a:ab:b6:26:46:fd:e7:34:fa:ab:6a:38:60:98:fb:
89:02:62:ba:31:63:ea:eb:ed:ac:46:de:cc:c7:da:2d:df:01:
f1:ee:c2:f4:24:da:39:9f:3b:7d:6a:c7:96:d6:bc:46:83:63:
c6:18:99:a0:9b:f6:f5:02:8c:eb:90:de:9c:96:99:c3:da:96:
55:09:79:a3:31:e8:aa:e4:31:55:0c:99:4b:bc:d4:41:f6:b3:
25:e8:94:e9:fe:a4:25:3a:bf:0e:19:07:73:2a:c5:35:d5:64:
f6:4e:1e:5c:8e:6e:90:6b:4c:1f:70:75:84:0d:19:4d:90:2f:
75:ce:32:a0:07:3d:ed:1d:f9:e9:d4:43:03:9f:43:0b:96:a6:
08:48:08:5c:63:81:a9:f6:14:3c:d1:ff:49:6a:fe:bc:4a:8e:
3e:f9:fe:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:51 2025 by rpki-client