Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
File: XgJGv_4E4tbx4ZOf5jhqJN_N964.mft (raw, json)
Hash identifier: xtv7f29dN7uHLFdoQ7EONTvrHCaTW1HssJujHkba+dY=
Subject key identifier: 3B:16:F1:88:6C:2D:6A:34:72:2E:57:D1:67:E8:73:2C:9E:86:23:70
Authority key identifier: 5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE
Certificate issuer: /CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
Certificate serial: 0194C3884681B8F2D40D2E9F4A46AAC0432B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
Manifest number: 13BD
Signing time: Sat 01 Feb 2025 22:01:15 +0000
Manifest this update: Sat 01 Feb 2025 22:01:15 +0000
Manifest next update: Sun 02 Feb 2025 22:01:15 +0000
Files and hashes: 1: XgJGv_4E4tbx4ZOf5jhqJN_N964.crl (hash: DqzKTHpEQgUCnhk55TEUWQeH+3vriH2XOgqflCx1Oh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:46:81:b8:f2:d4:0d:2e:9f:4a:46:aa:c0:43:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
Validity
Not Before: Feb 1 22:01:15 2025 GMT
Not After : Feb 2 22:01:15 2025 GMT
Subject: CN=3b16f1886c2d6a34722e57d167e8732c9e862370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:61:51:cf:b7:fc:47:b4:09:66:4d:05:37:ce:
78:8a:88:11:2b:51:4e:3b:6c:71:bb:4f:2e:f5:da:
26:12:75:dc:07:42:f7:56:09:ce:ad:0f:bb:36:07:
19:ac:55:72:8c:2b:80:f6:d7:64:de:6f:a3:b9:89:
70:ea:8c:b4:39:cb:82:01:fc:39:30:db:94:8f:4d:
ef:22:3a:c2:64:0a:09:67:87:97:d0:8f:63:90:e8:
f0:27:91:35:07:17:6a:b5:7d:5a:f9:8d:b6:61:08:
54:b6:0b:da:23:a7:39:79:fd:1e:a3:82:f6:e0:a4:
d4:e3:b2:4b:fd:76:02:40:0c:77:c1:91:74:d8:f7:
5a:c7:3e:03:1f:5f:46:2f:6a:54:b1:d4:d5:90:3c:
ec:34:ac:ea:23:d9:fd:fd:78:19:a4:02:13:fc:75:
ae:30:94:50:77:0a:74:10:c0:f5:4c:d8:0c:07:24:
90:8f:c7:73:a0:33:b3:90:23:16:93:07:00:ea:19:
04:ba:61:0f:ca:42:f5:eb:21:68:71:9a:3d:74:3b:
d3:7d:34:27:92:00:5e:02:9d:ff:f6:cf:0b:4d:3e:
a2:06:60:63:85:b9:25:f6:82:b9:5d:3c:be:49:7c:
d3:54:9d:3c:23:00:91:7a:b5:55:7a:3e:48:c6:91:
3a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:16:F1:88:6C:2D:6A:34:72:2E:57:D1:67:E8:73:2C:9E:86:23:70
X509v3 Authority Key Identifier:
keyid:5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e4:49:20:06:05:ba:d5:78:24:4a:c2:58:17:16:99:f5:34:
6b:15:6b:d9:c3:50:2e:f0:16:c5:b6:9e:74:c1:c9:54:72:c7:
b4:c9:0f:d7:11:f8:95:7f:33:73:59:3c:46:6e:67:19:1c:dd:
f0:d7:67:92:b2:56:63:71:b1:a6:ed:e8:f0:0b:fa:4c:3e:65:
dd:e8:4d:9e:5d:2d:00:18:a6:4e:2e:69:dd:1d:0b:b2:2a:12:
31:1b:64:c5:9a:e8:7c:84:9f:15:11:fe:04:0d:18:83:0c:3c:
f5:dc:07:20:05:ff:fe:3a:03:94:2e:33:c1:62:d8:62:ac:5f:
e9:6e:c2:a8:7d:e8:76:fb:ca:17:21:6d:94:4c:23:3c:1a:6b:
f1:f0:4f:e6:e3:c3:ac:fa:df:ca:8b:87:e6:0e:84:23:19:d7:
e6:20:01:d5:4a:1b:44:80:f2:5a:c7:8d:f8:d3:ef:85:37:15:
a6:ff:2d:45:75:62:5b:c2:83:43:ca:3e:79:c3:3b:43:fc:87:
e5:dd:fe:a0:e5:3a:73:63:f5:e5:71:8e:97:b9:87:7b:3d:f5:
9b:34:b0:4b:53:b3:15:42:9e:99:2d:67:be:20:68:ce:70:1a:
e7:7d:b9:63:f1:d2:9d:48:05:3e:3d:94:1f:a5:d3:7a:93:32:
b1:6f:96:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:45:58 2025 by rpki-client