Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
File: XvExXDySOejh9KoMWwdDw9pdd-M.mft (raw, json)
Hash identifier: RhFAzFjPOmN6eXGtSr1KvXzs+Pt7bTOvWdaU+6nrJeE=
Subject key identifier: C3:9C:C0:7F:F9:24:18:9A:1D:2F:FA:B3:1F:F1:F8:BD:87:ED:33:70
Authority key identifier: 5E:F1:31:5C:3C:92:39:E8:E1:F4:AA:0C:5B:07:43:C3:DA:5D:77:E3
Certificate issuer: /CN=5ef1315c3c9239e8e1f4aa0c5b0743c3da5d77e3
Certificate serial: 0194BABB5FB0C8C9EB0B1DCD1AB2FFD20AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
Manifest number: 02A8
Signing time: Fri 31 Jan 2025 05:00:29 +0000
Manifest this update: Fri 31 Jan 2025 05:00:29 +0000
Manifest next update: Sat 01 Feb 2025 05:00:29 +0000
Files and hashes: 1: XvExXDySOejh9KoMWwdDw9pdd-M.crl (hash: RPP3JWNILuwzTJqbhCY1OO57dJW2UN9V7mrN7WgIFjc=)
2: gGyzNC_bO6Lle8RV5kXmkWpg5Y4.roa (hash: WigIW2pDhkOgLUWTO5MtPBxTx3psT/+PtJTxxfI1/hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:5f:b0:c8:c9:eb:0b:1d:cd:1a:b2:ff:d2:0a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ef1315c3c9239e8e1f4aa0c5b0743c3da5d77e3
Validity
Not Before: Jan 31 05:00:29 2025 GMT
Not After : Feb 1 05:00:29 2025 GMT
Subject: CN=c39cc07ff924189a1d2ffab31ff1f8bd87ed3370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:76:88:87:f3:1e:04:b6:d5:71:0a:ea:79:
ac:85:63:0b:d0:66:fb:3e:4f:0b:dd:c2:34:fd:e0:
4b:c9:d4:b0:cc:43:27:52:f4:a9:df:b1:4a:15:41:
36:30:e8:b1:7c:8a:a2:df:53:37:29:21:e7:ab:f3:
0e:0c:a0:98:3d:b7:74:07:c1:1b:36:25:64:f0:de:
a5:42:55:f2:20:91:4d:16:84:d9:31:95:9a:60:12:
c5:62:cd:9f:46:c8:d1:a3:d5:5f:81:ef:c5:12:a8:
c6:7c:28:ee:9d:25:9f:08:8c:d2:78:de:8e:79:cb:
d4:02:f8:05:12:46:02:be:09:e7:6e:20:7d:c9:04:
ee:62:80:39:be:ee:45:42:d6:e1:dd:e9:3a:62:34:
c4:b4:8b:d2:7c:8c:ff:3c:54:71:19:24:81:a4:1f:
ec:e4:f4:06:8d:dc:9f:87:a9:68:24:a9:73:96:36:
bd:6f:aa:7f:2d:71:44:38:08:3a:b1:bf:d0:7a:3d:
52:93:24:09:d4:66:82:88:5a:c6:da:8b:e4:4e:93:
f0:eb:b6:f8:7c:00:5f:d8:13:f8:a7:d9:29:a9:03:
d6:94:2a:04:14:df:0f:93:77:f8:12:cb:99:46:27:
64:49:ed:7a:2e:e4:e0:71:7d:7c:83:97:ae:44:c8:
d7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9C:C0:7F:F9:24:18:9A:1D:2F:FA:B3:1F:F1:F8:BD:87:ED:33:70
X509v3 Authority Key Identifier:
keyid:5E:F1:31:5C:3C:92:39:E8:E1:F4:AA:0C:5B:07:43:C3:DA:5D:77:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1b:12:e9:c3:7b:7e:30:31:d8:36:30:0c:27:55:72:d2:c6:
c0:d0:09:f8:b9:7f:f1:bc:35:ed:70:e3:58:0d:8e:d1:17:91:
ed:4f:64:aa:c5:fa:92:10:4a:26:60:b7:b8:c8:4a:e4:3c:ae:
23:f3:a0:69:ab:f6:04:8f:21:55:ea:e0:b8:89:1d:df:5e:26:
86:46:e0:62:91:7a:77:ff:01:fe:a5:5e:40:6e:f8:93:91:32:
f5:fa:3e:24:7d:92:13:9d:cd:73:c2:f8:25:e1:9c:ff:1f:f6:
16:ad:f9:7e:95:af:18:a7:4b:14:4b:94:16:71:da:68:5a:f2:
62:31:b2:19:54:e1:94:64:c6:e1:f1:fd:a7:bc:19:54:8e:0c:
11:ff:22:80:9c:90:e5:29:97:99:6a:a9:49:ec:e9:f5:d9:0b:
f5:a3:14:a3:a0:90:aa:b4:f4:3a:86:71:44:8b:6c:81:2e:0c:
49:7e:58:19:49:ab:32:3d:3c:8e:9a:4b:59:44:6f:10:2a:03:
c8:4c:44:7d:8d:36:05:8e:d5:95:c4:2e:bb:bd:8f:9d:71:a3:
93:ed:95:a1:97:71:23:3e:56:8f:6b:9e:79:f7:b8:45:d6:91:
81:d0:b3:58:39:d2:d6:28:6a:81:25:6f:0c:ca:a6:c8:86:5b:
1a:c1:f5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:07 2025 by rpki-client on console-fra.rpki-client.org