Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
File: xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft (raw, json)
Hash identifier: xrbxDc/5Djq5n3RtGVzAyedbR7IQT4JsI1W6hzwWfaI=
Subject key identifier: A0:57:E4:AD:71:6A:18:55:14:02:08:87:C4:34:40:6F:E9:34:20:2D
Authority key identifier: C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
Certificate issuer: /CN=c5ba51c07148843d400805b40335e72d324265f1
Certificate serial: 0194BAF22A17F654B124DD33CC58013D1CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
Manifest number: 04CC
Signing time: Fri 31 Jan 2025 06:00:20 +0000
Manifest this update: Fri 31 Jan 2025 06:00:20 +0000
Manifest next update: Sat 01 Feb 2025 06:00:20 +0000
Files and hashes: 1: Cj_iWDZ0D1TK46uScrNJsyJfZ60.roa (hash: 2EItGET7KN5xYUnaftxX5tZU9l5ZOP9oj5BYiCLbSjk=)
2: TX8cnXXbIgaO3aE68x88MMtMTTI.roa (hash: FeZgp0BLqJdm0jiS+/GIZyqTIXPtIBPoCgnCgn78SEQ=)
3: xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl (hash: uP8IlJnYfXkpY0DctjYM+xzq1IqRNDSh9QHSjXXml/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:2a:17:f6:54:b1:24:dd:33:cc:58:01:3d:1c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba51c07148843d400805b40335e72d324265f1
Validity
Not Before: Jan 31 06:00:20 2025 GMT
Not After : Feb 1 06:00:20 2025 GMT
Subject: CN=a057e4ad716a185514020887c434406fe934202d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:eb:e8:90:3f:bb:a4:ec:12:d8:25:95:de:63:
dc:72:2c:13:56:da:67:b5:6f:72:a8:59:a3:e3:b8:
cb:64:06:11:52:c2:76:27:98:a4:1a:4c:b8:08:18:
7f:1b:8d:dd:fb:1e:3a:b8:99:dd:c0:ac:be:56:d6:
d5:51:db:3c:4a:0b:e3:53:7b:96:7b:3a:c7:bb:79:
aa:89:04:73:db:b3:c1:47:a0:d7:62:f1:39:bd:f6:
bd:9f:49:07:33:28:0e:53:8a:a6:0b:c4:0d:c5:85:
9d:58:7f:ad:55:60:e0:0f:f5:87:9d:e0:b1:de:a3:
66:87:c4:0f:4f:6e:f3:c5:e9:ed:c2:7b:29:ea:80:
43:8b:59:56:0b:c1:35:5d:64:a2:02:e1:83:41:6c:
d2:fa:39:92:96:c3:0e:94:a8:be:13:2a:8a:6d:69:
a3:55:52:ad:5b:e0:76:62:fc:67:25:19:ca:6f:8b:
96:4b:d0:0a:b2:38:4a:77:0d:12:7b:43:17:96:41:
90:e8:3c:0a:53:4d:9b:0f:f0:f3:0f:1b:8b:84:82:
26:06:e1:cc:9b:f7:ff:a3:e3:ec:13:a9:63:b2:cc:
1e:c7:be:ae:3a:03:cc:a6:e4:68:ba:33:4d:9c:50:
eb:e7:92:33:07:a1:26:7b:50:77:ac:e9:71:27:bd:
24:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:57:E4:AD:71:6A:18:55:14:02:08:87:C4:34:40:6F:E9:34:20:2D
X509v3 Authority Key Identifier:
keyid:C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:60:32:67:c0:df:b0:7e:71:97:fe:44:cb:aa:8e:de:ee:c3:
c0:a6:eb:c5:72:62:3d:d9:21:df:0f:1c:a7:94:e1:81:9c:82:
88:62:6a:de:a9:f8:e1:64:03:b6:4b:61:b6:46:3f:61:8c:46:
38:65:b5:48:f2:2e:46:82:90:fb:07:9f:92:9f:62:2c:c7:7c:
5b:80:a3:0a:99:c9:5f:5d:2d:8a:cc:4a:73:0b:8a:a7:15:66:
34:33:2b:14:4a:a8:22:1e:53:5f:e6:39:ff:14:94:df:b3:94:
ff:c6:d4:f7:b2:40:65:6c:2d:a6:11:93:a2:67:d3:b5:69:5c:
1c:f0:c3:27:71:1c:ce:98:6d:f6:82:cf:64:fa:c9:f7:02:d7:
fc:00:bd:e7:18:4f:5e:3b:91:21:5b:1f:9a:62:02:9c:24:40:
d6:81:af:67:06:2b:78:61:48:9d:eb:9a:65:ab:a1:b6:10:d4:
e8:1b:d5:37:84:a6:d8:95:a3:20:84:d3:c6:1d:e9:54:e9:9d:
2c:3e:aa:1b:fd:c4:f1:9b:58:ea:2a:0c:9b:40:bf:d9:c9:3c:
ed:e4:b8:91:ea:eb:c7:8d:8c:a3:01:d1:1e:a3:92:fc:60:cd:
f2:d1:1c:a9:d9:10:a3:b3:55:14:63:47:f1:e7:58:00:bc:0e:
9e:58:3b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:52 2025 by rpki-client on console-fra.rpki-client.org