Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json)
Hash identifier: AyplNsHMcNtNCqQZ9/WROO/xpsDDQv3V350USQIe/mc=
Subject key identifier: B7:EB:D1:3B:66:9F:95:4D:AA:B5:D0:56:AB:31:63:5F:EE:A6:9D:05
Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084
Certificate serial: 019511D9700C9F9C0A8B7D63AB1AE1EA5FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
Manifest number: 03DD
Signing time: Mon 17 Feb 2025 03:00:17 +0000
Manifest this update: Mon 17 Feb 2025 03:00:17 +0000
Manifest next update: Tue 18 Feb 2025 03:00:17 +0000
Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: EZlDRmx7tf611uBESC+vJDH5VvNNEs4SBmO0epD6Elo=)
2: u-lGXvBrrOtS45APR_Waw4axrTc.roa (hash: W3bOvfQ0kiPnMkAC0M/+bR7qhmdbihjJm/WhE44sz9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:70:0c:9f:9c:0a:8b:7d:63:ab:1a:e1:ea:5f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa386e97656d648ab5381b29666414081b00084
Validity
Not Before: Feb 17 03:00:17 2025 GMT
Not After : Feb 18 03:00:17 2025 GMT
Subject: CN=b7ebd13b669f954daab5d056ab31635feea69d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:04:8d:45:df:c4:c8:93:7d:a1:f2:86:21:
97:cb:40:cd:8f:ef:f3:2c:97:a0:06:d5:88:ce:96:
55:31:45:06:dd:79:35:43:f0:f4:05:53:ac:f7:20:
c8:2b:30:fb:1b:23:96:14:b7:6b:fe:74:26:f7:ab:
bf:8e:ad:88:fc:8a:99:36:14:e8:f7:95:22:90:aa:
4b:7f:02:40:17:4a:6e:93:ed:88:d0:c1:9c:85:86:
32:1e:d5:3b:70:d6:d0:8b:23:ab:40:24:6b:15:fc:
f8:d4:0c:66:2b:d2:30:71:a8:54:60:49:e1:0e:b8:
5d:43:96:46:52:8b:ab:df:53:55:90:86:c7:ac:f1:
e8:93:56:30:b2:ef:31:d2:ae:99:cd:46:21:54:0e:
93:fc:f5:de:7c:db:95:15:06:92:d0:dd:36:38:60:
be:89:5f:cb:06:a1:32:2b:d0:b9:7b:d2:84:e1:f6:
39:90:9c:19:3b:ab:34:b4:98:14:d2:e3:2e:75:ed:
6b:db:dc:2b:b5:d1:3e:f7:2c:7f:66:0e:ce:c6:8d:
7a:0f:46:4c:2f:57:64:b6:b8:6f:61:c9:4e:a5:d3:
93:d3:13:11:a2:fb:df:31:06:72:8f:04:4e:33:ab:
ef:03:a6:db:1f:a8:e0:e1:17:42:7d:df:0e:0b:b0:
5a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EB:D1:3B:66:9F:95:4D:AA:B5:D0:56:AB:31:63:5F:EE:A6:9D:05
X509v3 Authority Key Identifier:
keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:84:eb:0d:4e:4d:3b:61:91:0f:95:53:b4:65:39:5c:0a:e0:
62:74:45:dc:bc:ca:98:6d:99:34:1e:99:51:87:2b:17:65:34:
63:99:7c:68:4d:15:c1:4c:04:34:28:1c:14:8e:0a:2a:b1:0b:
72:b3:33:52:17:a3:b8:b9:bc:4e:1d:e3:c4:2c:33:6a:06:d0:
8a:84:81:4e:51:84:ca:04:d7:31:9a:b5:17:66:52:f6:e8:9c:
a5:bb:9d:8b:82:47:91:0a:eb:81:05:a1:5a:1b:c2:3f:94:50:
88:a5:61:88:fe:62:bc:5e:a9:0f:59:4c:fe:b3:38:ad:0b:ee:
b8:cd:60:41:b8:fc:ad:e9:fc:ec:19:e0:cd:c4:16:46:64:79:
03:7f:32:43:da:47:b2:84:8a:45:34:8e:dd:b0:16:b5:85:dc:
00:e3:61:c8:cb:70:02:cd:35:cb:37:a5:55:74:d6:3e:0a:fd:
6e:5b:28:58:ed:9d:89:b5:13:f8:09:d6:f3:e4:84:ad:90:15:
37:a8:b9:38:9d:05:03:cd:48:60:dc:27:0f:e9:7a:b5:d0:2a:
cf:43:2a:6d:7e:e0:3d:45:f1:d3:15:3b:54:91:6c:b7:4a:32:
dd:1d:81:d1:e6:75:a8:34:1d:58:e3:81:1f:1c:18:27:68:56:
8b:90:77:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:44 2025 by rpki-client