Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.mft
File: XxqmqSkxv8fhQAfEfJSc1e4-mA8.mft (raw, json)
Hash identifier: jbU8SxTzON6A4mvfJSWyr6vgFR5e+l5ec0U6qQSTwL4=
Subject key identifier: 43:58:D7:8D:45:84:C6:37:49:37:EC:9D:28:E4:9F:31:EC:FC:05:83
Authority key identifier: 5F:1A:A6:A9:29:31:BF:C7:E1:40:07:C4:7C:94:9C:D5:EE:3E:98:0F
Certificate issuer: /CN=5f1aa6a92931bfc7e14007c47c949cd5ee3e980f
Certificate serial: 0194BB294310FCD4BC574C99AF6ADF8CEB13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxqmqSkxv8fhQAfEfJSc1e4-mA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.mft
Manifest number: 116A
Signing time: Fri 31 Jan 2025 07:00:31 +0000
Manifest this update: Fri 31 Jan 2025 07:00:31 +0000
Manifest next update: Sat 01 Feb 2025 07:00:31 +0000
Files and hashes: 1: 0vSFPoYxfJgGVZze9FXoh2RkpVA.roa (hash: ZmZ0S6349yqHsdfm9IChX49SmL/P7lxaKuGOii7tvuA=)
2: 9JM6FQ3JNcJAsurX_9l52alhS78.roa (hash: a7KiUg0rkGYES5Jq40C4im6HS+LxQ3+rKB9CYqBxCgY=)
3: XxqmqSkxv8fhQAfEfJSc1e4-mA8.crl (hash: UPFhnvBL209wyq2NQ1c7L5ZufZcjyFuU1Xn11dDF7RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxqmqSkxv8fhQAfEfJSc1e4-mA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:43:10:fc:d4:bc:57:4c:99:af:6a:df:8c:eb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1aa6a92931bfc7e14007c47c949cd5ee3e980f
Validity
Not Before: Jan 31 07:00:31 2025 GMT
Not After : Feb 1 07:00:31 2025 GMT
Subject: CN=4358d78d4584c6374937ec9d28e49f31ecfc0583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cf:33:be:79:25:3a:2f:bd:d4:a1:61:e2:f1:
9c:b3:5a:50:c8:00:4c:c5:3f:62:51:9f:1b:1c:e9:
ec:90:98:e1:65:1f:93:e3:86:f0:dc:8b:7b:b9:e7:
62:3a:bf:00:b5:dd:ed:8a:65:df:ca:a6:f2:90:a5:
cd:20:91:37:1c:2c:9b:55:76:a2:be:4a:36:7f:5b:
a6:a5:98:0f:8a:0a:4c:06:3f:75:cc:55:a9:cf:87:
43:df:aa:7f:39:f5:ff:31:63:f1:62:79:07:9b:a5:
10:01:a1:b7:f9:3b:5c:76:38:b1:69:01:e9:8b:2c:
7b:6a:80:d5:5c:a2:a6:a0:0d:d5:2e:62:76:20:d8:
d4:ef:6d:5d:8e:ff:fe:3b:aa:7d:36:d3:83:1c:cf:
a7:66:b2:6a:69:65:0a:48:7b:d5:df:78:1b:96:da:
2f:5f:af:85:d3:94:fa:bd:d9:33:12:5b:23:d1:a0:
92:a5:4f:3c:e2:66:d6:7b:1e:ec:35:d5:0e:8a:a1:
36:ea:b3:9b:3a:6a:44:78:6d:e1:a2:c2:cd:e3:b9:
aa:48:16:b8:2b:af:ac:c7:15:3c:96:23:10:32:bb:
f7:1f:a3:4b:e9:42:49:05:1c:8c:69:fb:2c:3f:39:
30:d9:2f:7e:08:6f:96:c2:e8:1d:4c:05:fd:18:ed:
50:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:58:D7:8D:45:84:C6:37:49:37:EC:9D:28:E4:9F:31:EC:FC:05:83
X509v3 Authority Key Identifier:
keyid:5F:1A:A6:A9:29:31:BF:C7:E1:40:07:C4:7C:94:9C:D5:EE:3E:98:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxqmqSkxv8fhQAfEfJSc1e4-mA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:3d:a9:c4:d3:e2:85:1c:29:08:9c:0c:0c:64:03:a6:2b:2f:
e3:01:1e:9a:36:50:e8:14:76:c2:a2:3e:b9:83:69:8e:5e:73:
6c:68:99:d0:79:ae:cd:a9:4e:83:3a:13:a3:78:dd:a9:ad:aa:
c5:83:16:3d:84:28:c7:76:92:4f:86:08:9b:73:0e:72:11:4b:
1e:13:cb:a1:f0:97:b4:95:d6:59:28:9d:40:af:b5:11:0e:d9:
05:d6:88:1d:6a:e1:a3:78:6f:e2:04:d7:c1:81:3e:96:4c:93:
4f:dc:6b:c2:55:a2:b6:04:8b:30:cb:fe:7b:b8:94:20:4d:6b:
b8:da:ea:17:bb:b7:b9:73:dd:8b:dd:ee:17:d1:19:04:92:98:
af:8a:f7:47:9f:fb:de:72:62:cf:f1:dc:8a:c1:13:9a:1d:33:
5c:99:96:b7:38:7e:68:ae:28:90:58:b2:91:be:19:ae:35:99:
e6:22:da:15:8e:66:dd:8a:48:2d:89:ac:dc:70:67:1a:7b:7a:
73:53:16:e1:c9:1a:2f:d6:9a:c6:20:6f:74:a3:eb:62:a4:f2:
91:b2:fe:39:72:0e:d2:9b:e7:8f:0b:0b:ea:92:dc:c1:2e:dc:
3f:7b:bd:37:fb:70:39:c7:66:18:f4:98:1e:bf:04:49:4d:0d:
cc:0e:ff:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:25 2025 by rpki-client on console-fra.rpki-client.org