Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
File: xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft (raw, json)
Hash identifier: 1oqMs3kGUJsqsw8BlZSvGr5m0Wt9jx7cquAFTkxBXkc=
Subject key identifier: 7D:85:A3:D2:AD:AB:A1:CD:F4:D3:14:3B:72:10:2F:F8:A9:52:B0:53
Authority key identifier: C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52
Certificate issuer: /CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
Certificate serial: 0194BB602DED3F67955498938BBE2539BA33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 08:00:30 +0000
Manifest this update: Fri 31 Jan 2025 08:00:30 +0000
Manifest next update: Sat 01 Feb 2025 08:00:30 +0000
Files and hashes: 1: DFGrBpxL5h3_HtZEYfNq8WA0iY4.roa (hash: NDj3b147WLZti/8ZN7y09t2HIoBPYHUrUpvzWm06KUM=)
2: xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl (hash: CCBo1tvt4EBumbRE+9cfz46Zgb9NxGN2NxIt8jG+TYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:2d:ed:3f:67:95:54:98:93:8b:be:25:39:ba:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
Validity
Not Before: Jan 31 08:00:30 2025 GMT
Not After : Feb 1 08:00:30 2025 GMT
Subject: CN=7d85a3d2adaba1cdf4d3143b72102ff8a952b053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:04:ad:77:6a:bb:a5:df:64:9d:ac:2c:a6:f0:
6c:df:35:29:70:51:56:df:ff:63:df:8f:21:e0:32:
99:19:e5:a1:7e:10:61:70:17:4a:62:3a:42:0b:08:
2c:c3:ba:15:ac:7c:32:e2:41:a8:ce:3f:08:b5:c2:
07:a9:59:47:87:e9:37:4f:bb:8b:ca:3a:d3:77:5a:
91:37:9d:2a:90:9d:77:ee:70:c8:73:05:ba:e0:f0:
d8:59:cf:0a:35:a6:4d:59:39:6b:1f:34:86:30:7e:
02:9f:69:fc:b8:ea:03:f5:81:27:10:c0:c6:cc:7a:
d5:09:d3:10:86:8b:ac:7f:c5:ca:9d:50:cd:cc:dd:
06:38:33:3b:b1:ae:35:42:c5:e9:92:b3:09:eb:d8:
fc:bf:5b:31:a5:16:cc:78:65:30:fa:68:00:80:32:
b3:ee:31:1a:66:33:cd:10:33:7b:71:1b:7b:70:15:
69:05:a9:b5:73:b4:29:c9:c6:40:4d:88:92:80:b9:
f5:1c:12:ce:f3:50:1d:0b:cf:89:06:e7:ca:2c:2b:
56:3f:0a:38:ce:25:71:be:b2:11:41:ac:8e:29:09:
a3:db:a7:ba:db:1b:16:60:a4:9d:fa:ce:e9:19:1b:
63:19:3f:e4:ce:39:4b:86:4b:72:41:ce:34:a6:56:
12:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:85:A3:D2:AD:AB:A1:CD:F4:D3:14:3B:72:10:2F:F8:A9:52:B0:53
X509v3 Authority Key Identifier:
keyid:C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6f:cf:0a:40:8e:b2:6c:28:95:a3:6d:48:82:53:1a:dd:81:
af:36:cf:81:c1:ad:28:fd:60:b4:c8:39:28:65:e2:a5:83:92:
ca:71:b3:f5:15:f2:ef:e5:98:c7:3b:fc:ea:0d:3c:0f:27:51:
92:38:c1:49:ef:af:f8:b8:69:3b:10:ef:e3:98:d8:3a:ea:20:
2f:58:93:63:e5:d1:23:a8:c9:fc:f4:20:c8:d9:b2:29:6b:2b:
a4:26:1d:63:7a:da:8d:28:a2:71:c6:b7:1c:68:d8:bb:df:94:
9d:b3:5a:8d:14:57:92:70:60:8a:32:3b:42:49:1c:0e:43:8b:
2a:0d:b8:81:1d:65:9c:37:d9:07:fc:01:ff:93:b6:71:d8:8f:
d5:c2:a8:41:59:ac:05:9e:ea:d2:39:28:1e:ef:cf:89:f7:d1:
55:25:e9:ed:b7:40:8b:ac:f5:d5:4a:60:68:ee:73:37:31:90:
43:5f:7c:62:ba:7e:e7:37:34:01:db:70:cd:bf:77:60:eb:67:
33:c5:bf:b4:90:36:71:4f:a5:a9:04:6f:52:d4:64:dc:70:63:
a2:ff:2f:b7:f3:85:f7:75:31:e4:22:9e:ea:b8:4d:9b:01:15:
ce:ba:61:ca:eb:90:ed:62:1d:26:fa:34:8a:3c:89:3f:ac:33:
52:29:9b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:49 2025 by rpki-client on console-fra.rpki-client.org