Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
File: xalo7bcsFfX5Vn_TQme4dIXvNtE.mft (raw, json)
Hash identifier: 9br3mHA2xahBI3ZUii6b0sTcQW31sEE1u/BRpUfPvuA=
Subject key identifier: D6:E0:C6:9F:53:90:57:89:C5:D9:06:EB:AF:7D:27:2E:EE:2E:54:02
Authority key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
Certificate issuer: /CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Certificate serial: 0194BAF2498D99BD2E0C9E2F463F17CB95DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
Manifest number: 108B
Signing time: Fri 31 Jan 2025 06:00:28 +0000
Manifest this update: Fri 31 Jan 2025 06:00:28 +0000
Manifest next update: Sat 01 Feb 2025 06:00:28 +0000
Files and hashes: 1: L6-VizqbQShaQBu3JV896s_4tGg.roa (hash: 2W7drlEaijHWshfl4DyE1RE1WYGrzJu6Z78yEoBqxmE=)
2: RHZBo8Pr6Q-AwsJ6UMblKavesaU.roa (hash: 0vFm3yhvgBy4kgPfdSeT0wbY5J6zHgZ0B78QJ9Nt4MM=)
3: xalo7bcsFfX5Vn_TQme4dIXvNtE.crl (hash: wPCOWvdoAhJoB7L//DV3wbtmjDQIJt/OM3nDiaiGWmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:49:8d:99:bd:2e:0c:9e:2f:46:3f:17:cb:95:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Validity
Not Before: Jan 31 06:00:28 2025 GMT
Not After : Feb 1 06:00:28 2025 GMT
Subject: CN=d6e0c69f53905789c5d906ebaf7d272eee2e5402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8d:f0:ea:cf:37:5a:b6:01:d0:8b:f1:64:96:
01:3f:04:a9:15:61:ed:a8:f9:b7:4f:da:ad:d7:a2:
54:d6:db:14:99:82:e6:9c:a5:e3:84:98:ed:2e:ca:
6f:02:43:4c:17:8a:4d:7c:fc:41:f3:23:16:90:29:
42:4c:cd:b3:e3:42:37:d8:64:d1:33:b5:42:c1:79:
63:cc:90:e3:ce:e8:3d:f3:b7:1c:e5:09:44:be:28:
75:3a:d4:85:19:f0:6e:56:8b:cc:ec:0e:11:b4:45:
a1:ea:61:b8:cf:a0:7c:99:c3:85:c1:9a:81:af:2f:
fc:3a:67:91:c1:b7:b9:9a:5b:83:04:5e:b3:08:a4:
66:5d:c1:03:13:b2:50:f3:c6:5a:13:d8:8a:dd:2d:
65:73:d1:84:59:14:4c:bb:ab:6b:e8:4e:8a:3d:df:
f4:ae:e5:43:57:b2:e0:4b:72:68:5d:e4:75:1c:bc:
16:84:de:21:4a:de:1c:f0:d9:b4:b0:1f:f3:b1:fb:
1f:64:0b:d4:31:ab:9e:4b:75:b1:6b:61:f0:d3:fa:
64:85:62:c3:2a:94:a5:74:16:58:88:91:61:27:e6:
4c:d4:72:20:eb:55:48:1d:b1:09:1e:09:c1:d8:f7:
4c:87:15:76:c7:ce:8a:9f:f9:4f:be:c8:44:b7:ea:
79:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E0:C6:9F:53:90:57:89:C5:D9:06:EB:AF:7D:27:2E:EE:2E:54:02
X509v3 Authority Key Identifier:
keyid:C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:48:e3:2c:d9:02:36:97:6f:76:59:24:12:60:26:f3:f1:c9:
09:b3:81:08:ac:08:09:10:42:3b:74:c3:82:e1:0c:32:08:ab:
21:ba:8a:a1:2f:84:39:ef:79:68:d1:b5:49:10:03:35:ec:86:
c2:ca:54:7f:0e:9b:6c:06:1b:aa:75:bc:aa:1b:3c:ab:e7:54:
fa:aa:e6:63:69:2c:66:79:fa:4b:dc:c1:ad:6d:15:6b:22:69:
df:1f:79:2d:ca:74:e2:c3:76:3b:c8:85:a1:aa:af:1a:05:c8:
2e:a8:e9:00:34:9e:83:77:5f:f8:52:06:13:7a:07:22:87:05:
34:49:cd:04:4f:7f:aa:26:54:74:ef:57:16:be:42:ea:e0:7e:
3c:b1:f5:7c:9d:5a:31:f2:63:3d:0a:53:3d:38:82:20:43:d6:
fe:65:18:04:90:2a:8a:96:82:b9:dc:44:83:67:4e:f3:63:85:
7d:3e:44:a3:b5:64:9c:4a:0e:71:5d:f0:d9:7d:46:d4:c6:11:
2d:f4:f2:a9:fb:b4:22:dc:bd:91:47:cb:3e:68:2b:e4:4c:f0:
01:2b:49:a0:fc:24:d3:c9:78:0f:2d:54:a4:55:37:95:3e:f8:
0a:68:ec:cd:ad:86:d0:06:ae:55:59:8d:86:2f:65:57:45:f8:
45:42:b1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:04 2025 by rpki-client on console-fra.rpki-client.org