Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
File: xTtM8KdHHwAPilagSbFjlnzDvZk.mft (raw, json)
Hash identifier: EhtiH/OePwbVzvoojrj0YCqujbn4hQJxnA39ENrPqcE=
Subject key identifier: 29:36:05:3F:77:34:4F:BB:26:DC:F6:7F:95:F9:F1:22:E1:9E:E2:41
Authority key identifier: C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
Certificate issuer: /CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Certificate serial: 0194BB6031DAEAE03FADA428B22DD0A77783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
Manifest number: 1348
Signing time: Fri 31 Jan 2025 08:00:30 +0000
Manifest this update: Fri 31 Jan 2025 08:00:30 +0000
Manifest next update: Sat 01 Feb 2025 08:00:30 +0000
Files and hashes: 1: 602Z4NiRUVoUbtoD2a1_hKZKM5w.roa (hash: 3NgwOwVM6/UTanDsySZE3RJFx37z0Ri4EFGUt0jIqTA=)
2: xTtM8KdHHwAPilagSbFjlnzDvZk.crl (hash: 81Db8WZD8EL2u3tCesMDavoNls1mkBr5E3RFcF/yZbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:31:da:ea:e0:3f:ad:a4:28:b2:2d:d0:a7:77:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Validity
Not Before: Jan 31 08:00:30 2025 GMT
Not After : Feb 1 08:00:30 2025 GMT
Subject: CN=2936053f77344fbb26dcf67f95f9f122e19ee241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ea:38:0c:8b:23:a0:3e:7f:1f:74:0c:ec:5a:
b1:c0:de:6d:cd:b1:0d:a5:57:51:aa:0e:e7:53:cc:
40:25:32:22:04:0f:09:51:db:8e:0a:14:72:c9:02:
8c:00:a0:77:c0:e0:60:6a:08:61:82:67:3a:f4:3b:
6d:05:6e:d6:6c:b2:4a:0d:c9:7c:21:13:13:50:c8:
50:74:dc:d5:e6:60:63:9c:f0:5e:26:2e:82:04:4a:
bb:de:c1:88:b8:2b:12:d7:ac:18:b7:b2:6d:18:0a:
ea:ef:bb:63:82:d2:f0:c3:6a:b4:56:b1:69:48:d3:
52:ed:79:2d:68:ba:49:bb:80:23:97:31:94:64:2c:
2a:f8:a4:69:2b:c1:f2:7e:dc:22:4a:3d:6a:f7:69:
43:7d:2b:a5:22:5b:50:ee:65:bf:46:b9:05:a0:39:
70:8a:f1:ca:98:36:f5:4d:f7:df:5d:14:56:00:75:
b1:30:91:ad:8e:93:76:09:0a:f1:9f:c5:87:00:4b:
2b:b7:df:71:57:3a:78:53:5b:1a:a5:30:ee:ab:bd:
23:65:e5:c0:b1:59:80:e6:5f:c4:69:33:12:b7:e6:
14:43:0e:d5:cd:81:c8:95:b2:9d:6b:00:f1:56:26:
0c:60:b3:56:20:fb:84:c2:47:43:43:ef:8c:f2:1f:
38:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:36:05:3F:77:34:4F:BB:26:DC:F6:7F:95:F9:F1:22:E1:9E:E2:41
X509v3 Authority Key Identifier:
keyid:C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:3e:e5:bc:28:d8:51:2e:b2:fd:c6:18:fc:9a:aa:12:ba:64:
46:c0:40:18:d6:30:6f:fe:92:8d:37:c2:c5:1d:7c:4d:00:8c:
ea:f4:bc:f2:77:35:0e:5e:8c:24:84:6d:87:a9:f6:68:b3:c2:
7e:56:92:d3:32:4b:34:7d:75:36:76:df:44:8a:9e:ff:e4:23:
f5:6d:a0:58:71:01:f7:d9:f9:d6:db:bc:aa:79:8a:a2:a6:ec:
ac:6e:70:60:f4:49:14:17:27:f5:2f:2e:8f:73:4e:37:3f:f8:
ad:a4:67:b6:d6:ec:74:6e:28:f7:c0:af:9c:5b:a5:5b:17:79:
64:f0:14:e0:86:2f:0e:a8:aa:8f:ac:d4:e0:ae:e9:fc:db:d1:
77:5d:7c:b3:59:77:dc:aa:30:0a:2d:87:04:55:08:25:0a:c5:
3e:22:6a:bf:e0:9b:6f:ba:42:18:50:3e:88:80:b1:43:d0:22:
84:07:aa:54:3f:76:bc:e4:72:d4:ee:09:65:d6:11:8e:16:25:
fe:f7:91:40:cd:4b:3e:13:2c:f1:5b:3f:95:38:9c:f9:cd:04:
31:f9:ea:78:bd:b3:75:09:ad:42:b4:42:01:53:14:10:b4:f7:
f4:c1:bc:f2:01:ce:40:90:30:01:f8:e9:24:56:87:95:b1:b9:
ed:35:46:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:21 2025 by rpki-client on console-fra.rpki-client.org