Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.mft
File: xhZe8TcHz1p8O8qd5tpfE_8BXxo.mft (raw, json)
Hash identifier: 3vfpTX140ItWhU+oRDfeAYEUOar63CmpMrjB+6ewntY=
Subject key identifier: 93:74:F5:B5:5B:AD:19:4E:BC:21:10:9E:99:CB:D8:9A:6E:38:D6:EE
Authority key identifier: C6:16:5E:F1:37:07:CF:5A:7C:3B:CA:9D:E6:DA:5F:13:FF:01:5F:1A
Certificate issuer: /CN=c6165ef13707cf5a7c3bca9de6da5f13ff015f1a
Certificate serial: 0194BAF20865A1593E89CB5E43747FE028C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhZe8TcHz1p8O8qd5tpfE_8BXxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.mft
Manifest number: 0484
Signing time: Fri 31 Jan 2025 06:00:11 +0000
Manifest this update: Fri 31 Jan 2025 06:00:11 +0000
Manifest next update: Sat 01 Feb 2025 06:00:11 +0000
Files and hashes: 1: NugaULO-gk2PkOZCdWGeX6P0AEo.roa (hash: 8kssSSwOaL7T7gF8FWk5eaVlo82DD3FktYjwSUShJPs=)
2: xhZe8TcHz1p8O8qd5tpfE_8BXxo.crl (hash: h/99v0rBBw7pgQIlNM/Z8DCr7seFJAvQmOPqoRyg024=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhZe8TcHz1p8O8qd5tpfE_8BXxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:08:65:a1:59:3e:89:cb:5e:43:74:7f:e0:28:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6165ef13707cf5a7c3bca9de6da5f13ff015f1a
Validity
Not Before: Jan 31 06:00:11 2025 GMT
Not After : Feb 1 06:00:11 2025 GMT
Subject: CN=9374f5b55bad194ebc21109e99cbd89a6e38d6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1c:61:ac:ff:76:17:80:86:cc:90:d4:da:3a:
e1:38:2e:3b:7a:46:0d:ea:aa:4e:07:5a:2c:3b:bc:
d2:e1:e5:f9:40:11:5a:30:b7:41:1a:5c:c6:af:68:
f9:49:83:d0:20:7c:d5:ef:b1:85:9e:89:c2:6a:ac:
3a:32:b3:ef:62:d2:13:16:4e:a9:2c:c7:72:ff:18:
f0:b2:31:b9:ba:1d:58:68:5d:ca:88:d6:38:db:c0:
20:c7:58:f0:20:54:83:b1:f5:4c:3f:a5:99:79:d1:
77:52:f5:2f:bb:5c:2e:a6:02:39:d1:03:46:ee:ae:
55:55:eb:69:d9:e6:18:1d:a1:08:04:59:98:73:28:
c2:b1:1f:c4:56:25:18:57:b1:87:dd:8a:75:f5:a5:
c4:11:d4:03:55:0b:09:ea:54:6e:ab:e2:6a:77:c1:
e6:75:b6:b8:26:1c:c2:c1:d5:b3:31:1e:7a:c6:db:
6d:df:93:5d:3d:0e:bb:c0:49:e4:39:64:b2:e2:21:
33:11:c7:82:fa:f6:d1:2d:56:c5:90:c1:77:9c:99:
2b:b4:b4:87:9e:93:c2:a8:0c:f1:7a:9e:7e:0a:7b:
94:37:4f:f4:47:2e:dc:90:62:87:98:6a:ff:75:87:
89:e7:6d:ec:6b:e0:5e:29:4e:8e:86:55:bb:3c:bf:
28:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:74:F5:B5:5B:AD:19:4E:BC:21:10:9E:99:CB:D8:9A:6E:38:D6:EE
X509v3 Authority Key Identifier:
keyid:C6:16:5E:F1:37:07:CF:5A:7C:3B:CA:9D:E6:DA:5F:13:FF:01:5F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhZe8TcHz1p8O8qd5tpfE_8BXxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ac:3c:98:41:b9:75:bd:2e:5f:52:a2:67:05:0d:ae:15:80:
61:e2:27:8b:fd:35:fc:4c:1a:1e:bc:9f:a1:39:9e:82:5c:83:
59:64:01:95:06:a8:09:97:50:b7:ab:92:a7:80:c0:ca:38:4e:
20:14:5d:af:48:05:fa:2b:76:9e:10:b3:48:1e:66:f4:d4:96:
48:c6:82:f0:8d:af:60:b0:c3:c8:ad:63:eb:4b:09:9f:17:c5:
6f:8e:93:35:ca:cb:5f:11:d2:f6:53:a5:a7:eb:f1:10:ff:48:
22:92:24:59:d8:02:69:00:fe:5d:66:f8:69:ec:ee:f6:5a:af:
02:4a:95:ec:8f:58:3f:19:49:19:9c:c0:4c:2e:c8:c9:3b:c6:
65:93:3c:91:3f:0f:4a:71:9c:82:9d:24:48:d6:24:38:89:56:
db:e0:12:0a:fb:c2:20:a9:c5:91:32:3b:70:fa:e2:91:5f:29:
da:2c:8e:87:a0:d7:80:3b:19:07:1f:67:56:d8:f4:a0:80:04:
45:ab:48:85:3d:09:c2:92:ff:92:5f:2a:30:ea:c2:bf:56:ca:
2c:41:9f:94:50:bd:c8:65:9f:d7:b6:92:c4:b3:e7:c9:f4:28:
e1:17:42:bc:0b:8a:67:30:df:2e:fb:9b:72:37:7d:ab:c0:57:
67:61:53:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:17 2025 by rpki-client on console-fra.rpki-client.org