Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
File: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft (raw, json)
Hash identifier: LH2w6sqFhcUAMMR79FEBKRGeXR9bgHqLIKX3xtdAH5s=
Subject key identifier: 47:67:BD:E4:64:EC:25:7B:67:A0:E4:E3:63:DE:55:75:F1:6D:BE:D0
Authority key identifier: 5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
Certificate issuer: /CN=5e8e581537e7aa66783c3403822a1181a3168d08
Certificate serial: 0194BA847FC3E5670610E291411CB80628A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
Manifest number: 0854
Signing time: Fri 31 Jan 2025 04:00:33 +0000
Manifest this update: Fri 31 Jan 2025 04:00:33 +0000
Manifest next update: Sat 01 Feb 2025 04:00:33 +0000
Files and hashes: 1: K6hASVkmc4dnymD1SafKRAelnpw.roa (hash: jxjidqodK9jTHgfjiFHkYSaOCpzH8SBkKdOL3hMaD2w=)
2: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl (hash: 6IzJCyzKdOozQE0c0Tr5GGdhBHqkM4l0tVsAnjPTsIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:7f:c3:e5:67:06:10:e2:91:41:1c:b8:06:28:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8e581537e7aa66783c3403822a1181a3168d08
Validity
Not Before: Jan 31 04:00:33 2025 GMT
Not After : Feb 1 04:00:33 2025 GMT
Subject: CN=4767bde464ec257b67a0e4e363de5575f16dbed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5d:33:60:aa:18:bf:1d:b8:b8:92:66:96:d0:
cc:0b:48:84:bc:b5:84:65:d9:d0:83:ad:a5:f4:c5:
df:14:81:3e:d4:81:57:5e:d7:6b:02:bf:9f:b6:45:
65:73:b1:62:03:b3:ca:09:0b:da:3f:a4:cf:85:35:
7c:6a:37:3c:43:63:6c:f2:a4:84:04:58:6f:a1:8c:
0b:34:73:91:98:3d:36:7b:ef:01:19:ee:9e:71:ee:
2d:18:4b:5c:e4:2b:43:d9:f4:87:2e:45:5a:fd:df:
8f:41:d8:af:45:f4:ec:ca:1d:17:d5:2d:ea:db:48:
40:4e:aa:09:11:eb:b2:5b:42:dd:d6:37:e6:9b:4d:
b5:5f:2c:7b:de:8e:b8:23:73:0c:d5:ac:fb:2c:53:
fd:d5:1e:fe:4a:4c:d7:b4:77:fd:b6:a0:f2:3c:0c:
07:fc:ad:2d:fd:c1:16:33:77:ab:37:95:0a:0e:a3:
e5:50:de:f8:8b:2b:dc:55:06:a0:54:6a:57:8a:80:
86:22:ce:df:e7:1d:19:17:7f:d1:79:82:4d:ee:85:
bc:c9:45:be:6e:e1:d1:26:31:78:bc:af:be:a8:17:
ae:d3:23:d8:20:63:8d:3e:66:9e:77:42:9b:02:15:
ee:1c:81:78:87:b2:05:b3:ad:99:55:17:33:54:6b:
7a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:67:BD:E4:64:EC:25:7B:67:A0:E4:E3:63:DE:55:75:F1:6D:BE:D0
X509v3 Authority Key Identifier:
keyid:5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3a:75:91:d0:ff:4f:c0:40:c6:f0:bd:a0:60:b2:d6:b0:f7:
9a:2e:68:24:99:c1:37:05:05:9e:c4:8a:12:95:f1:d0:16:82:
e8:b1:d6:db:2a:9f:41:3d:44:f4:05:5e:c2:5d:6b:ab:6d:15:
30:26:5a:05:a3:ad:66:de:38:e2:d5:8a:e4:30:bc:83:a5:f0:
4b:2f:d2:e4:b2:26:02:32:73:f2:26:d0:93:c5:36:45:1a:31:
65:ce:30:0f:82:50:2f:d8:5a:bb:62:aa:72:c9:86:7d:69:51:
c5:9b:4d:df:7e:8e:a1:fb:2e:d3:07:9e:9e:5c:3e:39:3d:1f:
f1:51:f6:1e:dc:8d:5f:5c:0c:dc:7c:9b:2a:8d:fd:89:9f:42:
a2:e0:86:09:56:3f:18:7d:75:ae:90:f3:24:10:d3:0f:19:6a:
bf:51:f4:88:de:fe:f7:85:08:0b:54:5a:fc:d1:d9:06:4d:bf:
52:dc:90:cd:43:02:94:54:ea:09:e8:2c:a8:1d:b9:16:f0:de:
88:c9:34:21:5b:01:5d:8c:8e:72:64:b1:7d:7f:f3:13:5f:6b:
48:68:84:18:c5:d2:29:b0:2c:0b:2c:ef:5a:27:73:f9:4f:e8:
c8:08:5b:2f:58:55:1d:c7:b9:97:ec:e5:d8:d2:12:1f:3e:e8:
61:b8:29:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:22 2025 by rpki-client on console-fra.rpki-client.org