Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
File: XWMX9pNua1eLOMPfsZgCVJj8rqE.mft (raw, json)
Hash identifier: nK0b3JH2d+jUdmOcmv7wuIsMS+ZM4nLrembEEyuEuBk=
Subject key identifier: 7B:95:7E:94:29:36:78:58:98:ED:8B:BC:4F:ED:DF:EC:4B:C9:73:EC
Authority key identifier: 5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1
Certificate issuer: /CN=5d6317f6936e6b578b38c3dfb198025498fcaea1
Certificate serial: 0194BBCE979E63A0A7A03EEB1E023C78F482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
Manifest number: 037A
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: NfD0bu6CTOHFOwKX83vXlWW-BFM.roa (hash: E6orvDZyM/U63REesg6yOGTM6Hs+Hh2EKGVP0jWzDOg=)
2: XWMX9pNua1eLOMPfsZgCVJj8rqE.crl (hash: dkjenFBdZ9lm0Y85/b0PRooc+hg3mgxbkkzuoxkh8ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:97:9e:63:a0:a7:a0:3e:eb:1e:02:3c:78:f4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6317f6936e6b578b38c3dfb198025498fcaea1
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=7b957e942936785898ed8bbc4feddfec4bc973ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:e8:5d:82:ed:20:34:93:c3:7f:b1:6a:6e:
2c:f8:03:83:7d:e6:5b:98:92:89:bc:cb:aa:38:b6:
86:7c:b7:12:15:7b:30:7c:ea:9e:a3:3d:13:2c:e7:
23:23:df:7e:f1:f9:a7:98:93:fc:3f:2d:ae:dd:23:
bb:b8:cb:68:41:99:fb:19:04:b3:aa:0b:22:6a:e0:
36:bf:3a:ad:cd:ee:19:9f:80:10:21:7d:f5:97:e2:
e3:46:15:0d:91:52:41:1b:46:22:83:fa:71:60:8d:
91:26:d9:76:80:d6:bf:f0:25:2c:1f:3f:62:ac:19:
a7:24:62:54:a4:66:21:88:f7:3e:e3:16:7c:7b:01:
e0:9d:c8:09:27:39:6f:32:f4:5d:c4:d6:d8:36:ff:
3f:b9:a0:05:06:b2:65:8c:f3:13:af:fb:09:ce:77:
ca:2a:ba:6a:6e:0f:b5:41:cb:a7:7c:f7:54:76:43:
23:e3:b1:09:1e:bd:38:df:1a:16:25:54:2d:ca:80:
ac:9e:47:d2:47:85:e9:71:f3:0a:dc:01:57:4f:59:
d5:5b:5b:f2:7e:c4:29:d7:14:e1:7e:96:6c:31:7a:
43:8a:ca:c7:11:82:a5:03:36:3b:93:95:97:76:c9:
41:1f:4a:a8:73:3d:f1:c5:9b:12:fd:c7:f7:27:11:
c8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:95:7E:94:29:36:78:58:98:ED:8B:BC:4F:ED:DF:EC:4B:C9:73:EC
X509v3 Authority Key Identifier:
keyid:5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5a:38:3c:a0:fb:7e:db:65:f1:58:97:c7:63:68:6b:27:4f:
83:71:da:8d:e1:ec:19:7c:b6:c9:9c:fa:c4:9e:7c:af:09:85:
13:62:c8:c5:8a:91:6b:e5:de:63:4b:fe:e1:ec:45:a8:94:4f:
d7:d0:6f:81:45:72:46:7a:f3:e0:d5:21:5d:96:57:7b:3b:38:
11:80:0d:e0:35:cd:16:6a:e3:f4:8e:a8:f4:4a:ff:b0:ab:20:
a9:0f:06:de:ed:92:6d:08:27:9d:27:11:7f:0d:48:bf:40:bc:
46:a0:0e:67:05:cf:37:21:81:fb:41:9f:d8:a5:b7:2b:e5:6a:
51:a8:a8:83:52:74:04:5c:4b:2b:59:b5:81:bf:aa:ec:2a:6d:
e9:1f:f0:4d:c7:49:39:7c:8e:35:5b:3f:82:71:c4:5b:00:27:
3d:b9:d2:6f:70:43:8f:af:35:35:bd:03:ba:7b:b2:3b:68:18:
12:a3:cc:2f:c5:86:c2:27:57:51:97:aa:28:57:4c:01:1e:15:
aa:61:27:64:d5:a9:7c:a2:3b:94:57:1d:d3:98:86:29:d0:93:
f7:dd:f8:74:18:eb:dd:91:41:15:38:07:c8:bd:69:e2:67:f4:
dc:1d:af:7d:c2:10:33:f4:7e:10:ce:6f:f0:43:fe:6a:c4:80:
84:17:6b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:26 2025 by rpki-client on console-fra.rpki-client.org