Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
File: xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json)
Hash identifier: QydobDB8v3bdpFWqloJ/PrR0ckr2ygf2YJ1WQ8NQXcY=
Subject key identifier: A4:21:07:29:9B:90:B2:16:DE:E1:44:B2:74:70:A9:C6:2A:FD:69:C0
Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Certificate serial: 019510C7C3FED6DF02BDCBE74CAFF1AADBBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
Manifest number: 1458
Signing time: Sun 16 Feb 2025 22:01:22 +0000
Manifest this update: Sun 16 Feb 2025 22:01:22 +0000
Manifest next update: Mon 17 Feb 2025 22:01:22 +0000
Files and hashes: 1: nywPQh9QP-OhqhIRdI1AR086REo.roa (hash: fyTq9cJsDKGICMb+AhPPiPfngZOBuqPjdSV/9OfNj10=)
2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: FDrBy4w5P/yrJC7IsFsRB8IwMRMQvNcRVNDvQZbUn1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:c3:fe:d6:df:02:bd:cb:e7:4c:af:f1:aa:db:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Validity
Not Before: Feb 16 22:01:22 2025 GMT
Not After : Feb 17 22:01:22 2025 GMT
Subject: CN=a42107299b90b216dee144b27470a9c62afd69c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3f:e5:a2:c5:b8:43:0b:67:a7:ea:bd:b2:e7:
fe:6f:5a:b0:fb:3e:0d:a0:7b:08:d7:6e:a0:2a:4f:
1d:76:e8:95:0c:1e:f9:77:47:29:de:de:39:c6:0a:
54:48:3d:15:8f:17:5f:3a:3a:9b:6c:57:f1:60:a0:
cc:61:eb:4a:c8:92:73:49:cd:8c:60:c7:d7:61:39:
7a:a1:67:ef:1f:76:a5:90:cc:73:9b:fd:c1:db:d4:
66:1d:29:c3:22:c7:7f:4f:1c:e0:bf:ed:7b:34:b3:
cf:43:70:90:66:50:de:bc:a0:66:27:40:60:f2:cb:
48:97:92:fb:a8:d6:59:0e:2c:d4:0c:69:d4:fe:09:
b3:5b:48:f9:ec:f8:ac:b9:67:1a:04:b1:c6:be:38:
bd:07:32:88:1d:8a:e0:00:f7:75:5a:42:d4:b7:dc:
86:4b:a2:62:09:4f:a2:da:67:35:d3:90:68:b1:17:
95:62:73:be:42:f9:ce:8a:ea:6f:16:b9:04:47:56:
d0:7f:6a:f1:d8:49:53:eb:58:4f:b9:67:38:3d:a4:
3e:46:d9:06:e8:80:39:ee:7b:37:c9:f1:a7:00:0a:
e1:ab:f7:16:3a:30:00:6e:8e:59:e8:db:76:7d:33:
22:a8:98:ee:2e:5a:48:f5:da:6d:32:ef:c3:50:2e:
21:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:21:07:29:9B:90:B2:16:DE:E1:44:B2:74:70:A9:C6:2A:FD:69:C0
X509v3 Authority Key Identifier:
keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c5:5e:2b:5e:c8:79:10:b8:d5:0c:4a:c8:39:2a:95:a3:c9:
49:67:7f:ca:dc:b9:61:c9:24:27:fe:79:71:03:07:ef:e7:19:
d0:3e:3c:2f:d1:1a:35:5d:d4:96:1d:af:37:66:80:08:e5:06:
86:82:06:ce:71:ab:fd:61:98:6c:75:4f:d0:f7:ae:be:19:34:
83:9e:3a:9c:e7:30:05:9f:6f:9a:46:1f:b2:d1:65:3c:78:a9:
73:95:e8:52:12:74:01:2b:6f:e7:08:a5:d1:b1:cb:de:b0:f4:
dc:40:9a:50:2a:1b:71:6e:b5:6e:80:01:2b:92:5b:66:c4:d4:
40:95:5e:5a:66:ec:c6:57:8b:37:30:17:3d:12:21:e0:49:42:
9f:69:6c:9f:94:5f:b7:d9:1c:44:2a:fb:7c:21:8c:85:36:01:
9a:2d:f8:82:3a:e6:20:84:83:83:cb:27:36:7a:d8:8d:0f:81:
f5:51:72:a2:30:13:5d:45:32:28:d9:03:ff:fc:fb:42:76:7a:
7a:18:44:90:f9:53:3c:f6:6b:3a:95:97:26:9f:b1:92:66:19:
55:1e:e8:de:c7:50:7d:62:c3:3e:86:99:a2:22:e2:ea:4e:a4:
4a:14:0b:4b:22:43:1e:b0:2b:7f:22:49:da:50:0c:91:02:4f:
51:45:d2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:05 2025 by rpki-client