Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
File: S_xaKUEPH_z03ipacFj1FiCzC3k.mft (raw, json)
Hash identifier: /NTZ8Nbr7o2ia8d4CU8NNLHL037RDGNRQLKkuWiD7Ng=
Subject key identifier: 00:4E:81:D1:D3:18:41:27:A0:A1:0D:82:6D:74:44:FD:D5:95:5C:A5
Authority key identifier: 4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
Certificate issuer: /CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Certificate serial: 0194C49A4C9F1A6CB59B70B04C994E7DB23F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
Manifest number: 0BE1
Signing time: Sun 02 Feb 2025 03:00:33 +0000
Manifest this update: Sun 02 Feb 2025 03:00:33 +0000
Manifest next update: Mon 03 Feb 2025 03:00:33 +0000
Files and hashes: 1: S_xaKUEPH_z03ipacFj1FiCzC3k.crl (hash: D9BBPxdHsnkb+KlJILxUOr7gu8QLwyUg3hZtrXWFW74=)
2: bgx026u65bEUIofoNprJyhzn_S4.roa (hash: mkA02/DFrwmq5MSNIOugSkJaE1Y0Xy5Utto0dixWmsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:4c:9f:1a:6c:b5:9b:70:b0:4c:99:4e:7d:b2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Validity
Not Before: Feb 2 03:00:33 2025 GMT
Not After : Feb 3 03:00:33 2025 GMT
Subject: CN=004e81d1d3184127a0a10d826d7444fdd5955ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:3f:e0:58:49:df:86:2b:0d:d4:e7:4e:6d:
36:09:ea:87:c6:17:6d:06:76:d3:47:29:af:74:dc:
4f:da:6d:42:dd:72:42:29:92:dd:7e:e5:c0:1b:b2:
03:43:94:04:e8:ac:ce:9a:7c:e9:a1:94:82:33:5b:
ac:64:3b:0c:9a:22:f8:96:27:13:fe:50:d4:95:2c:
6b:d8:7f:8c:e0:52:f9:10:4f:22:9b:b5:a6:c7:46:
7a:ca:31:bb:fc:c3:6f:53:06:90:27:16:75:00:0a:
1f:19:83:c3:6f:73:4f:04:97:d6:06:00:7f:ca:19:
96:5f:b4:07:98:5c:a1:45:db:f2:6c:37:0f:5b:df:
fc:b6:fa:ac:8c:26:81:1b:8d:b4:e7:f5:62:9e:6c:
00:ec:5a:6a:e4:93:65:61:d6:cd:0c:5b:fe:fe:a7:
fa:bb:4f:a4:c6:f9:7e:be:0c:22:ed:62:59:44:9e:
b8:da:cb:f8:20:28:a2:3b:9b:2f:15:4d:fe:86:12:
16:f1:c7:d8:4b:51:5c:9c:fe:9d:d3:3a:ba:51:bc:
9c:aa:c3:7e:56:0d:29:73:2d:b1:91:63:b8:05:85:
b4:48:c3:07:01:f6:df:15:be:dc:93:6d:15:e5:63:
e7:ba:7b:2e:cd:c4:60:8b:19:65:92:e0:be:40:65:
40:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4E:81:D1:D3:18:41:27:A0:A1:0D:82:6D:74:44:FD:D5:95:5C:A5
X509v3 Authority Key Identifier:
keyid:4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:eb:14:9c:d9:85:af:ba:48:c4:d4:33:ae:ce:ce:dd:2e:d0:
cf:b1:17:47:74:a3:87:04:94:82:6c:91:b5:82:b8:47:1f:73:
35:7e:d6:5f:16:a2:3a:0f:04:0e:0a:4f:fa:57:96:3a:fd:79:
76:e1:65:8c:73:20:87:48:39:ee:d8:73:22:7d:3e:e1:c7:47:
f7:af:81:e0:91:d0:1c:b1:54:bb:d3:bb:93:43:11:dc:ea:95:
9b:ef:c8:11:a7:c1:e9:25:96:e7:f0:b9:3d:cb:3f:bf:6e:7f:
44:c2:5d:bb:4b:41:cb:10:49:5a:2a:ec:1f:c7:01:e5:66:91:
1e:cb:48:c2:77:7e:02:5f:4f:c9:9f:fa:96:7b:3b:5c:e2:be:
02:4b:8b:7c:55:96:1d:68:ff:cd:15:10:0f:41:57:dc:69:1c:
e1:49:c4:ef:b1:32:ee:6b:85:9c:53:48:7b:7d:43:2b:66:b6:
a5:48:57:50:55:91:e7:55:1c:80:57:9e:96:f2:95:50:73:15:
28:3e:83:b5:5a:b8:71:68:a7:be:5e:5c:32:dc:da:62:11:9a:
4d:56:8f:dd:1f:75:d1:ac:94:8c:e5:24:08:b8:1b:c8:dd:4d:
fe:f7:4f:10:ec:f5:0a:af:65:a6:9a:63:73:ea:f5:71:c2:9e:
d7:e1:63:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:00:00 2025 by rpki-client