Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
File: X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft (raw, json)
Hash identifier: N9Yx6EL5GP0F1BatVM7Epm+W4KBS0w921qIBr5g45AU=
Subject key identifier: FF:0B:33:8E:93:51:A0:E0:CC:91:B0:AE:6F:1A:54:3D:82:79:10:DA
Authority key identifier: 5F:45:B1:34:C0:91:41:0E:31:42:3E:AC:2C:CA:D0:AE:DB:8A:6E:C5
Certificate issuer: /CN=5f45b134c091410e31423eac2ccad0aedb8a6ec5
Certificate serial: 0194BABB863112C68CA28A879E3F3193B3BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
Manifest number: 0B51
Signing time: Fri 31 Jan 2025 05:00:38 +0000
Manifest this update: Fri 31 Jan 2025 05:00:38 +0000
Manifest next update: Sat 01 Feb 2025 05:00:38 +0000
Files and hashes: 1: FjrlAXrbDvDS2HfDrOYX8s6VeoI.roa (hash: rrLNQtMJaYm4qKAUxLrF7WkgOLeuL0rvTXSBW6y9Fvw=)
2: X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl (hash: q5GftqDY8qMI34saezicQncV+WK6Iclj3zyLdVDqm1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:86:31:12:c6:8c:a2:8a:87:9e:3f:31:93:b3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f45b134c091410e31423eac2ccad0aedb8a6ec5
Validity
Not Before: Jan 31 05:00:38 2025 GMT
Not After : Feb 1 05:00:38 2025 GMT
Subject: CN=ff0b338e9351a0e0cc91b0ae6f1a543d827910da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:5b:29:14:7a:33:6d:fa:36:29:67:f7:a9:
01:4e:a5:54:89:83:21:bc:f0:36:fc:74:6b:ca:58:
b3:79:bd:a3:15:8c:de:af:84:cf:39:ce:08:82:fd:
5f:88:41:eb:38:10:e0:4a:46:1d:5d:38:7c:28:28:
fe:1e:ea:0c:e9:82:b2:d6:3f:39:e2:f2:53:52:73:
44:5a:55:0b:0a:97:42:04:64:82:a0:a1:50:13:e0:
1b:4a:21:7c:2b:f2:bc:c3:9a:b8:a2:c1:45:c3:66:
83:5c:96:87:69:13:d1:c5:d7:44:77:57:2e:f6:89:
49:6c:20:f4:74:d7:2c:2f:26:70:07:72:64:be:46:
b2:08:fa:1d:d4:74:0f:b8:8a:87:3e:dc:b7:92:e2:
ef:c8:ac:e5:11:50:36:7f:31:8b:c8:52:d2:77:0c:
61:26:7f:dc:57:14:24:3a:c0:6c:47:ba:7c:e9:64:
3c:a0:38:d1:a4:56:4d:ae:1c:79:92:ad:88:19:f4:
99:b8:7b:cc:6e:92:f4:a9:e9:92:4e:55:9e:86:0f:
f6:5a:d8:a0:41:e0:4d:15:38:ca:17:d9:a7:3b:94:
00:10:01:f1:c6:47:04:52:18:9b:d3:24:9a:4a:da:
11:2a:f9:d5:1f:c7:e5:f8:dc:2c:92:0a:6d:a6:6f:
cb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0B:33:8E:93:51:A0:E0:CC:91:B0:AE:6F:1A:54:3D:82:79:10:DA
X509v3 Authority Key Identifier:
keyid:5F:45:B1:34:C0:91:41:0E:31:42:3E:AC:2C:CA:D0:AE:DB:8A:6E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:7c:13:a9:03:5f:9f:55:44:91:70:bc:4f:e0:e6:a2:13:2f:
a2:bf:7d:0a:14:85:98:e9:06:42:8a:c7:7d:70:da:97:e9:97:
c7:9a:5a:26:d8:7a:da:72:fc:a8:ad:2c:bb:31:eb:63:86:10:
e5:7b:4c:be:c3:69:cb:5d:ce:64:30:21:7d:96:2e:8e:b7:e7:
ee:37:8d:21:dc:e0:6a:9a:ca:d0:f8:3f:d1:0b:e8:64:88:0d:
44:f0:b4:f5:f5:65:54:d5:92:e3:e9:a3:1b:35:41:11:f9:a5:
2e:ed:ad:6e:41:ea:2b:ac:8a:9c:09:3c:0a:8e:28:f7:3c:57:
97:d9:4c:96:b4:de:a9:af:e6:bb:d0:84:6a:8b:ae:ae:65:8f:
27:aa:42:12:38:5e:36:77:a0:ab:97:a7:f7:78:82:64:09:5e:
46:89:20:e5:ab:91:40:06:bd:dc:b0:a6:da:aa:e8:70:d9:50:
06:d0:0b:10:1a:73:6c:44:ec:24:44:7a:37:73:bd:38:ff:49:
9b:9e:8a:2e:2b:95:e3:55:fb:f7:dc:18:c4:14:9f:84:80:0b:
4d:56:c9:a3:49:fd:93:4f:d2:de:ab:04:11:9a:f8:d5:37:8c:
44:c4:bf:aa:d6:25:74:ca:36:30:12:7a:8a:d6:55:64:d8:23:
bb:be:bc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:17 2025 by rpki-client on console-fra.rpki-client.org