Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
File: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft (raw, json)
Hash identifier: rn117PzL/zAZFhOeGetbFeR1DMrpp5phxcQdRti6/+o=
Subject key identifier: 27:BA:AE:0D:49:18:2E:02:AE:0E:9F:0B:69:97:32:AB:D9:7A:2F:CC
Authority key identifier: 5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
Certificate issuer: /CN=5ece10f13c46806926a67946cc6a1102aa09031a
Certificate serial: 019511355CCC44CDEFA76A90A3C5AC0B7C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 00:01:04 +0000
Manifest this update: Mon 17 Feb 2025 00:01:04 +0000
Manifest next update: Tue 18 Feb 2025 00:01:04 +0000
Files and hashes: 1: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl (hash: 8NKfghHeP6UeVU5ew611Tz0vcGSKPZUUcGZ+/qWI02c=)
2: da7wWDdQpE5i6DJox7FoD-QEnrA.roa (hash: 93ok4fdBSnjw6qTtlazVRgZjQmCRM/yDSLFq6NFZNeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:5c:cc:44:cd:ef:a7:6a:90:a3:c5:ac:0b:7c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ece10f13c46806926a67946cc6a1102aa09031a
Validity
Not Before: Feb 17 00:01:04 2025 GMT
Not After : Feb 18 00:01:04 2025 GMT
Subject: CN=27baae0d49182e02ae0e9f0b699732abd97a2fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:5b:6d:cd:86:23:ae:ab:9e:3c:a2:7c:e0:
b7:a7:df:94:c0:4a:19:d4:23:b6:85:56:70:8d:bd:
17:48:31:19:6c:c6:b7:1f:cb:59:c3:f2:5b:2d:22:
b6:66:5d:c8:dd:91:68:dd:f0:63:be:a1:4e:d0:80:
47:00:56:71:93:12:f7:93:71:0a:99:ee:a7:85:f3:
20:96:73:bb:74:6c:b5:96:71:6b:23:83:79:88:16:
85:ae:5b:5b:6f:84:79:e8:d5:28:2c:d4:85:11:40:
3d:73:81:ed:da:45:91:03:5f:58:37:66:07:2c:5b:
12:92:ba:13:4b:f6:b8:c0:6e:e8:14:e8:e6:69:77:
75:b0:e5:ac:2c:db:8c:56:b9:7c:32:c3:ba:90:cc:
d9:e4:38:d7:05:35:4d:0a:4c:bd:71:9f:53:9f:0a:
77:1e:17:c3:a6:d1:81:9e:b3:7c:73:ed:3e:e6:60:
9b:fd:29:88:94:14:d8:10:a9:01:15:7b:85:ba:a4:
a5:d1:fb:d9:28:fd:42:de:d7:b0:04:74:17:61:f5:
4b:e4:01:48:0b:9c:68:a6:73:e8:90:5f:c6:45:ac:
b3:f5:6c:5c:87:72:6d:3c:41:30:c1:37:78:8b:b0:
d0:76:40:29:27:9b:43:94:36:1f:d9:aa:9b:66:88:
59:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BA:AE:0D:49:18:2E:02:AE:0E:9F:0B:69:97:32:AB:D9:7A:2F:CC
X509v3 Authority Key Identifier:
keyid:5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5d:d4:2d:b9:73:1b:20:fd:e5:46:83:9f:2b:d8:37:eb:95:
fb:ff:76:a3:59:29:d1:98:0a:d1:74:24:69:05:32:ca:d3:e2:
bc:84:07:29:18:b7:bb:1a:44:14:6a:ad:c2:11:50:80:50:33:
91:fc:f0:bf:c8:86:08:cb:74:fa:1e:1a:4b:dd:07:05:e1:9b:
64:d3:5d:9e:e2:b0:6b:03:34:3c:69:87:d9:50:19:09:6d:71:
62:69:15:78:1f:03:5a:03:71:cb:b7:0e:1e:94:df:7e:e4:4d:
4a:b0:69:bc:d5:3b:bf:07:da:11:21:78:dd:ae:c9:52:07:3c:
a7:8f:f9:48:26:f1:57:8e:5f:fe:57:32:d3:7c:53:63:11:7e:
db:5a:5a:f7:c6:24:0b:7c:48:c6:90:06:c8:2f:02:e3:1c:54:
1b:58:71:9b:e9:cb:8d:f1:a2:76:b9:8b:08:28:fa:bc:cc:34:
ca:1c:1b:2c:9d:2c:23:c1:e6:97:e5:71:54:2b:a1:12:6f:8a:
10:1f:bc:b5:01:65:85:73:58:f8:15:a9:7c:3c:b1:af:3b:4e:
a7:36:1a:87:31:1c:9c:bf:be:86:c0:24:d1:e6:ab:6d:e0:18:
0f:90:6d:f2:cd:fd:8a:57:43:52:d1:d7:3c:7b:21:aa:a0:77:
d1:c9:69:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:17 2025 by rpki-client