Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
File: XYHR_0WxVHwAqEtG75nsot-9Rbw.mft (raw, json)
Hash identifier: YWEvb4UfJQtPdTE+6JOQQ2AevE0/Qe20fOY3DNs+gA0=
Subject key identifier: 2A:12:C4:B1:39:90:04:2A:58:43:1A:7C:92:80:C8:4B:38:95:83:A3
Authority key identifier: 5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC
Certificate issuer: /CN=5d81d1ff45b1547c00a84b46ef99eca2dfbd45bc
Certificate serial: 0194BABB80873A43E5A7A1FE271DB37BBD3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 05:00:37 +0000
Manifest this update: Fri 31 Jan 2025 05:00:37 +0000
Manifest next update: Sat 01 Feb 2025 05:00:37 +0000
Files and hashes: 1: C-JYvDSVCc5Zd_4Sd7FiFR4ridU.roa (hash: Fud1edK7T1C6PqdOPqDnlVWq4JxXY+eiVXIDYHC1t50=)
2: XYHR_0WxVHwAqEtG75nsot-9Rbw.crl (hash: osGPktVU3jOXc7Z3ScCQVUDVneWaLUniyRiYr2u8eh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:80:87:3a:43:e5:a7:a1:fe:27:1d:b3:7b:bd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d81d1ff45b1547c00a84b46ef99eca2dfbd45bc
Validity
Not Before: Jan 31 05:00:37 2025 GMT
Not After : Feb 1 05:00:37 2025 GMT
Subject: CN=2a12c4b13990042a58431a7c9280c84b389583a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:2d:d9:51:ef:1f:ad:3c:cb:35:3c:3e:3d:
7b:e2:d5:7c:08:71:ff:f6:da:80:26:c0:cf:4b:19:
e6:df:de:a1:c2:0c:5c:45:86:3d:bb:33:d2:be:7d:
fc:d3:d5:2e:2c:25:5a:81:5a:45:c1:1e:45:b9:8a:
0f:af:2d:4c:81:08:4a:93:c9:62:64:f7:4d:cb:30:
7c:0f:a6:8e:8d:55:1a:e3:79:a1:f0:82:33:0a:a6:
21:98:47:6a:7f:1b:76:f5:c5:70:17:c9:94:22:32:
38:24:81:15:66:a4:11:72:bc:5c:e1:cd:bc:99:14:
e0:19:e4:f6:1f:00:47:f3:3a:5d:72:15:99:cd:2f:
85:05:73:83:05:97:95:ea:af:e0:54:57:d0:c1:94:
29:d2:7b:5e:c9:d6:89:bf:31:cd:b8:a3:30:52:ee:
a4:20:5f:ef:23:c2:e5:90:b5:c4:5e:02:98:60:95:
d9:53:2e:60:e1:d3:96:0c:9b:dd:83:f4:bd:63:31:
5b:12:57:0d:51:4a:4a:f5:69:19:99:0e:c1:ba:4c:
6c:4a:f6:33:63:cd:74:89:84:31:97:b9:a4:84:0b:
f4:cb:c9:b3:84:80:2c:7f:11:6b:f7:7a:10:f5:c4:
cd:47:69:7b:95:e2:f5:de:62:eb:90:0d:39:b4:d4:
e2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:12:C4:B1:39:90:04:2A:58:43:1A:7C:92:80:C8:4B:38:95:83:A3
X509v3 Authority Key Identifier:
keyid:5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:75:58:9d:29:76:f5:b1:4f:18:45:eb:81:e8:c6:b6:d8:66:
35:90:df:c2:ff:da:dc:cd:00:6a:32:84:77:d4:25:25:87:91:
d8:cd:52:10:31:5e:5a:a5:1f:f0:dc:ec:ed:7a:90:64:c3:81:
d7:7c:11:7b:ea:e0:25:35:6b:b7:09:07:9a:9a:b2:ed:7c:15:
5e:91:13:bb:f3:02:d0:e0:e6:18:db:5c:64:66:ec:96:d4:06:
bd:dd:37:30:b4:32:51:48:29:8c:25:a5:d1:53:cc:33:7b:15:
f9:dc:40:c7:19:1c:5a:50:19:fa:58:9b:57:e4:ed:d7:c2:4a:
d0:1e:d5:27:2b:8b:6e:83:12:85:21:5a:7a:f3:36:af:83:36:
b7:71:08:2d:1f:88:fd:5b:49:96:5a:0c:c5:a9:77:fa:4e:2e:
7e:de:7d:cb:cf:67:3e:e4:2f:af:0b:02:b9:b9:96:ea:0e:f4:
27:99:9e:65:06:25:f9:5c:88:1c:8b:2a:98:a4:59:0a:05:97:
1e:4e:91:51:11:aa:c2:db:81:37:e7:bb:df:ed:4b:6d:c0:b6:
52:70:66:5c:33:10:5d:cf:12:21:5e:69:c3:27:d0:9c:35:fd:
b8:e9:a7:4b:e9:bf:95:58:39:92:6c:1d:05:0c:7a:2a:62:db:
51:52:f5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:36 2025 by rpki-client on console-fra.rpki-client.org