Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
File: XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft (raw, json)
Hash identifier: zoY+np6zyvUg92F/sC2G/kD2Vc3laFui78Hoj3PsGo4=
Subject key identifier: D9:96:FB:0A:47:F5:A8:27:F3:C4:6A:64:16:FC:E2:B6:C1:A6:3F:0A
Authority key identifier: 5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
Certificate issuer: /CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Certificate serial: 01951134DB22AF3F84F9A048CBA8CC8E7FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
Manifest number: 1460
Signing time: Mon 17 Feb 2025 00:00:31 +0000
Manifest this update: Mon 17 Feb 2025 00:00:31 +0000
Manifest next update: Tue 18 Feb 2025 00:00:31 +0000
Files and hashes: 1: B4B8AwhPN8nqkqsJIWnt25RI8P4.roa (hash: tKZvSD+J2/9HuzhNNVSD82woMs4APG13o6f6vUOg094=)
2: XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl (hash: SBAppsgQUQ9+nAHkKekr9Tw+mLn/NLdI+jv/ThueeD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:db:22:af:3f:84:f9:a0:48:cb:a8:cc:8e:7f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Validity
Not Before: Feb 17 00:00:31 2025 GMT
Not After : Feb 18 00:00:31 2025 GMT
Subject: CN=d996fb0a47f5a827f3c46a6416fce2b6c1a63f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:d5:0c:e1:ab:ea:15:3b:7d:2e:22:ee:31:
b5:e8:c1:14:36:17:6d:93:cc:da:84:e4:9c:37:98:
87:b1:87:30:68:37:13:60:26:1a:54:b1:24:74:eb:
ff:22:57:e1:33:6e:46:b6:f4:d2:a1:ed:c6:7c:f6:
98:db:61:65:e6:5d:7c:b4:a6:12:3f:69:25:17:06:
1e:4e:92:ff:cc:26:71:d2:d5:f6:6d:05:8f:b0:29:
11:e9:4d:8f:8a:d7:f0:86:cb:fb:b5:a9:6c:df:00:
3b:aa:e4:6c:06:1b:8f:bf:03:a4:7f:be:c2:c2:37:
44:6d:e8:72:63:b0:84:5d:8d:00:37:38:2c:27:4e:
46:ee:50:2c:d6:ce:c4:79:f4:6a:17:db:20:96:b5:
b9:9f:14:74:50:59:f7:42:37:d3:47:8e:31:83:8a:
fe:7e:d2:a2:9a:7e:3e:e5:ae:67:f4:7d:1e:43:e9:
a0:bc:9c:e5:41:a1:c1:4d:b4:de:75:62:14:9c:cd:
25:2c:cb:9a:12:2e:69:02:48:8e:12:2f:da:23:95:
37:f8:4a:51:e2:1b:fa:14:66:38:85:ae:50:bd:e3:
a2:6a:2e:f0:e5:e7:8d:39:c9:51:c2:0c:2c:95:17:
8a:e3:52:29:79:66:ae:ae:61:7c:ff:49:b1:25:13:
9f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:96:FB:0A:47:F5:A8:27:F3:C4:6A:64:16:FC:E2:B6:C1:A6:3F:0A
X509v3 Authority Key Identifier:
keyid:5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:bb:80:21:2f:b3:00:11:0a:02:a0:ad:06:0e:51:01:02:70:
f7:79:2f:90:cf:72:56:65:1c:33:ce:ec:a4:d8:31:6e:6f:1d:
e4:ec:58:f6:18:be:c2:ac:53:51:9c:fb:47:38:8b:f3:60:cc:
0a:a7:a9:2a:1b:15:05:31:0a:03:9a:06:42:86:55:2a:50:60:
21:87:7c:ab:6b:97:34:bc:de:e0:3b:9d:61:91:4c:d3:a4:c8:
fe:79:91:f2:90:08:0f:6a:ab:56:a6:0a:4f:2d:4c:55:7a:95:
4d:6b:61:a9:69:9a:d5:b0:30:7a:6c:05:66:a7:3b:0e:e0:66:
40:37:c8:55:fe:52:a3:9d:2d:78:b2:44:21:0a:16:b3:41:b5:
14:18:28:81:86:a1:f8:be:5d:b5:12:b9:c1:1e:18:5c:8f:c3:
cb:f1:20:c1:2e:99:22:64:67:3e:41:6f:49:bd:6e:73:1a:a0:
6d:42:8b:cd:f1:73:13:44:d6:10:91:8d:5f:aa:84:20:53:4e:
b0:af:f4:05:4a:3e:9f:66:02:9e:75:44:14:eb:92:62:27:22:
89:fc:99:ae:e2:dd:15:8d:75:44:2d:68:a8:e1:9c:61:29:ce:
01:ba:24:17:f3:7e:36:24:ed:dc:52:73:e0:4d:cb:d5:b9:ff:
0a:ea:02:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:32 2025 by rpki-client