Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
File: XnzrnJMcsXleInriyGR1UTrkkVw.mft (raw, json)
Hash identifier: aAX8ANZwXfMhMLjVgXcpUS2SiPhWoYF99vbVZmmMIjQ=
Subject key identifier: 21:4C:BB:95:81:95:9B:8D:42:37:C0:BF:9C:45:37:A6:76:7D:5A:CD
Authority key identifier: 5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
Certificate issuer: /CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Certificate serial: 0194C4D11CFFAE28E3DA8ADE1A7A71FBCF52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
Manifest number: 142F
Signing time: Sun 02 Feb 2025 04:00:26 +0000
Manifest this update: Sun 02 Feb 2025 04:00:26 +0000
Manifest next update: Mon 03 Feb 2025 04:00:26 +0000
Files and hashes: 1: 8HbLvR_ICovY3JkhN3nLEF6TTpU.roa (hash: yBKFoCIX0xdcJSGT3f5HB8GzFB5vs3wuFhH6HKyoacg=)
2: XnzrnJMcsXleInriyGR1UTrkkVw.crl (hash: O34mXLEJxPG7E6sJTPcQF9KKIbcbzlwmv3Cv5mb2WZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:1c:ff:ae:28:e3:da:8a:de:1a:7a:71:fb:cf:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Validity
Not Before: Feb 2 04:00:26 2025 GMT
Not After : Feb 3 04:00:26 2025 GMT
Subject: CN=214cbb9581959b8d4237c0bf9c4537a6767d5acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f0:30:8c:37:b3:28:df:67:ab:5b:36:5e:a1:
ed:0d:5d:3d:3e:3c:aa:5c:84:e7:4e:5e:d8:98:6f:
9b:17:79:ff:12:37:c1:d2:2c:d7:cd:b7:13:89:56:
5f:bd:d9:c1:bc:07:2a:c9:07:16:0e:44:0e:18:40:
79:b0:91:a8:d4:e7:46:12:0a:9b:04:3c:66:7c:8e:
84:0a:28:60:62:87:bd:53:3f:48:f2:70:53:b6:36:
69:25:72:d4:64:91:bb:38:e4:0a:02:89:4d:44:29:
58:cc:1e:e7:78:6a:1a:10:ea:1b:d1:f0:0d:37:49:
54:9b:19:4c:03:4f:cf:a3:cd:51:8f:93:88:a6:0f:
fb:59:59:1a:1f:5e:4d:c1:4b:a9:69:23:00:d8:1b:
65:98:34:08:20:75:64:6d:bd:1a:32:4b:e7:7b:63:
cf:44:9d:21:aa:84:c7:ba:b2:76:e7:d2:a9:aa:8e:
87:86:0a:a9:05:17:13:5a:d0:51:04:99:54:7f:e0:
0b:b0:84:86:c8:1e:9a:f2:46:dd:91:97:e2:82:11:
5b:cc:b0:ac:a8:65:c1:0b:af:c8:1b:ad:aa:66:28:
83:83:04:e7:0c:29:b4:6a:e8:5e:b1:fb:9f:8e:92:
82:a7:c5:89:d3:30:b5:52:f1:90:a6:94:bc:07:4b:
da:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4C:BB:95:81:95:9B:8D:42:37:C0:BF:9C:45:37:A6:76:7D:5A:CD
X509v3 Authority Key Identifier:
keyid:5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:75:61:0c:d5:6e:ac:7d:31:df:4d:65:54:39:9c:bc:77:9d:
e9:60:11:a6:f5:71:35:3b:c6:de:64:6e:0a:b9:1c:91:b9:af:
48:d2:79:2c:85:55:20:77:aa:5f:63:39:24:73:97:3e:44:71:
9c:95:51:d9:22:98:ca:e6:e5:d6:d3:78:92:f5:fc:58:46:e1:
68:cf:bf:50:97:37:2c:3b:31:5c:7c:eb:f3:92:3f:9f:4e:de:
37:fa:e4:ed:f6:80:f9:fa:30:10:ea:8c:70:28:35:84:ba:d0:
f5:46:3f:a9:53:77:54:9f:ae:cd:ab:47:9b:ab:d8:51:c5:1c:
95:13:09:b8:b6:14:3d:e5:cf:c8:f2:73:dc:11:4e:49:b9:d6:
62:79:2e:b8:53:83:40:36:55:62:67:2f:91:74:6b:2b:52:13:
bf:c8:89:84:32:a8:10:3e:ea:6f:35:91:9b:fe:26:7d:fc:f8:
2d:b7:1b:ff:1a:23:dd:42:cf:f5:ba:d4:ae:cf:25:3f:84:35:
56:cf:b2:78:73:07:c0:f6:e9:8f:84:2c:4d:2c:b2:c9:05:32:
9c:34:f5:7f:5f:50:e4:56:8c:a5:8c:b0:26:fd:c9:4d:97:8d:
bb:46:9f:79:39:6a:1b:16:fb:52:1c:24:67:4a:0b:c6:11:17:
34:51:f1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:33 2025 by rpki-client