Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
File: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft (raw, json)
Hash identifier: XzpXaBP1Tdj03nr4KosjRxU89+q8Nkzlotkp+n8/Lek=
Subject key identifier: CE:D8:FF:A4:30:10:EF:A3:A5:01:99:ED:F0:B9:99:32:C0:25:88:10
Authority key identifier: C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
Certificate issuer: /CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Certificate serial: 0195113538B4876174B986FB6E132C6A6328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
Manifest number: 04A6
Signing time: Mon 17 Feb 2025 00:00:55 +0000
Manifest this update: Mon 17 Feb 2025 00:00:55 +0000
Manifest next update: Tue 18 Feb 2025 00:00:55 +0000
Files and hashes: 1: gO1QQzQ8EJSK1sz9QVMIVflw4Is.roa (hash: XHDVuSMRNZ8ZK68EQ/rZiQRsF4JaubC5jLA4NaC8LBM=)
2: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl (hash: 3VqgS69mtibE31dUSZLKhgV2yauSWmXdWzdzNI4bJXQ=)
3: z5AaUIsCUfsHWnAtqAIr_d8n8do.roa (hash: rmzyF9COLH0iNSyMo0DleMzCkcEN6+9Om4xVkdPkL6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:38:b4:87:61:74:b9:86:fb:6e:13:2c:6a:63:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Validity
Not Before: Feb 17 00:00:55 2025 GMT
Not After : Feb 18 00:00:55 2025 GMT
Subject: CN=ced8ffa43010efa3a50199edf0b99932c0258810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:b1:69:b3:30:51:de:4a:4b:06:e4:50:86:
9e:c0:52:f5:9d:79:5c:7b:79:f8:2e:e5:05:66:5f:
33:8f:ed:f9:56:25:fe:7a:d0:f7:41:e0:da:d1:02:
57:b5:99:f0:07:fa:5b:33:ab:99:1a:6b:97:13:0a:
07:01:d1:c4:fc:e5:70:06:21:60:71:f1:08:eb:13:
04:48:e4:db:9f:36:90:23:da:b5:b0:19:92:4a:f9:
af:26:32:ce:3a:7c:43:89:12:14:cb:d1:5f:63:40:
9d:e5:09:85:8c:b4:40:ae:58:71:9f:f2:a9:bb:ca:
ac:7c:31:d0:d1:69:27:0c:6c:79:da:0b:7b:f4:94:
c7:de:4f:94:d4:0b:e5:fa:f7:58:1e:76:3f:aa:9a:
a0:2e:ba:4d:24:c4:07:9a:ef:f3:70:1a:28:f6:5a:
5a:3b:71:0e:38:cd:10:c5:e3:87:c4:6b:35:80:2e:
e0:18:bc:14:93:6f:d8:16:2b:78:45:a2:4e:24:80:
80:e8:8e:4b:79:59:2d:5b:e4:54:33:d5:8f:3f:dd:
0a:b7:bc:31:87:27:d4:da:c2:ee:9d:c6:b0:9c:c6:
80:fe:68:81:b9:76:0c:de:bb:ac:2f:20:03:d9:8c:
c5:f0:6e:1c:c8:16:f0:f8:00:bb:c3:af:d7:60:ea:
57:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D8:FF:A4:30:10:EF:A3:A5:01:99:ED:F0:B9:99:32:C0:25:88:10
X509v3 Authority Key Identifier:
keyid:C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:45:71:99:5a:7f:90:32:75:7b:c2:fd:df:69:9b:de:f0:0b:
15:ce:d8:52:d2:36:ba:d5:f8:d4:8c:ae:65:44:00:9f:ea:85:
9e:17:45:fc:ec:8f:aa:e0:7a:ca:53:2e:c1:66:e6:b1:fa:61:
cc:c4:9d:c5:a9:9c:70:bf:41:83:6e:c4:0e:ee:f8:7c:53:0f:
d6:85:60:74:57:38:f1:05:ed:5a:f0:71:2f:95:41:e3:71:13:
c0:59:58:5d:2b:37:55:27:f3:fa:b7:7f:d5:6c:e5:d4:2d:ee:
1d:d6:e6:d7:bb:7a:ff:dd:0e:65:2d:79:da:4d:f3:cb:f9:29:
0a:91:5d:98:df:32:13:2c:5b:60:67:d1:ad:d6:59:a8:5c:fa:
e0:91:8d:76:97:3e:c8:ec:35:c2:fd:68:8d:d4:b6:bd:da:f1:
28:1d:67:46:69:14:42:07:7f:c4:45:91:b5:a9:9a:9c:59:6f:
17:5e:07:36:c9:9b:d1:0b:dc:56:c4:1a:53:ae:86:30:0f:57:
b7:25:14:18:e7:b1:99:b2:14:82:f8:da:c7:74:0b:61:8a:8c:
d3:18:e3:cd:92:94:27:a7:aa:ab:b9:71:1e:44:6b:42:1d:54:
d3:0c:69:ea:fd:23:68:12:50:6f:55:32:68:e6:eb:8d:22:5b:
2d:33:f5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:23 2025 by rpki-client