Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft
File: XchzCYds7EBPAHv22gQ0wL3GLYs.mft (raw, json)
Hash identifier: r0ynGPxxtIP137TgL6kdE1EbJtVYuECmE5iL8O+eFPs=
Subject key identifier: FD:D9:D2:3E:0F:E0:70:AD:9E:DA:F7:52:33:30:EF:8A:C2:2E:3A:B9
Authority key identifier: 5D:C8:73:09:87:6C:EC:40:4F:00:7B:F6:DA:04:34:C0:BD:C6:2D:8B
Certificate issuer: /CN=5dc87309876cec404f007bf6da0434c0bdc62d8b
Certificate serial: 0194BB96F07A863CC7501613B3D436B5B2E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XchzCYds7EBPAHv22gQ0wL3GLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 09:00:18 +0000
Manifest this update: Fri 31 Jan 2025 09:00:18 +0000
Manifest next update: Sat 01 Feb 2025 09:00:18 +0000
Files and hashes: 1: XchzCYds7EBPAHv22gQ0wL3GLYs.crl (hash: SXgVIVzRxJr2y/xWZV8acAmj77Wh3US081kiDV/nWag=)
2: jcQt-MOzJfjybIamiUioFB-oBn4.roa (hash: vxzopxc1UXJfcspNz3GsRCac77+K0gwBOQSeqjgarpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XchzCYds7EBPAHv22gQ0wL3GLYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:f0:7a:86:3c:c7:50:16:13:b3:d4:36:b5:b2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc87309876cec404f007bf6da0434c0bdc62d8b
Validity
Not Before: Jan 31 09:00:18 2025 GMT
Not After : Feb 1 09:00:18 2025 GMT
Subject: CN=fdd9d23e0fe070ad9edaf7523330ef8ac22e3ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:88:e5:d8:b7:2f:15:b6:e0:3d:c6:31:16:
95:7d:78:cc:5a:e2:b7:ac:86:90:7b:10:c2:95:b2:
1d:d8:40:43:05:53:7d:1f:20:92:eb:46:5f:7f:c2:
86:cc:5b:da:fe:cd:47:6d:ae:b6:0e:7c:42:52:97:
c2:11:70:87:8b:be:09:54:69:c5:b9:5b:be:ec:98:
ad:57:f6:28:7a:3b:0d:12:ab:12:ef:03:91:f3:6f:
eb:11:52:0c:45:b2:c3:df:f8:6f:5d:5b:25:8c:ef:
2d:b3:9d:08:df:17:80:48:9b:49:50:16:22:42:63:
45:8c:72:cf:3c:85:d2:5b:3c:73:3a:0d:67:43:b7:
ae:b9:48:0b:e9:71:b4:48:17:70:c7:50:c5:d9:d7:
83:b5:5f:80:ed:d3:d2:e0:27:9d:6f:4b:11:8c:13:
6f:37:d1:14:dd:74:08:7b:7f:c0:fe:31:94:ae:db:
39:18:13:a7:bc:05:35:49:5b:5a:0b:50:ff:05:56:
c4:de:1f:01:06:0b:a4:69:a4:67:c5:52:1b:8d:a1:
9e:2c:e1:09:50:fd:40:df:32:46:f4:27:30:9d:a6:
89:d6:06:c4:69:b1:83:e2:92:40:21:8e:6d:9b:c9:
42:b0:1b:88:2c:59:be:90:1a:4e:7c:55:1f:17:28:
2d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D9:D2:3E:0F:E0:70:AD:9E:DA:F7:52:33:30:EF:8A:C2:2E:3A:B9
X509v3 Authority Key Identifier:
keyid:5D:C8:73:09:87:6C:EC:40:4F:00:7B:F6:DA:04:34:C0:BD:C6:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XchzCYds7EBPAHv22gQ0wL3GLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:33:06:4b:e1:8c:ff:a5:4e:0e:ec:b8:b0:3f:44:40:e3:75:
73:df:d8:3a:26:fe:a1:3b:f5:12:f4:29:7b:13:dd:65:f4:7f:
2f:62:ad:15:23:ff:77:c7:35:5a:14:01:3f:2d:80:69:ee:ae:
88:af:a3:b2:ae:2b:9c:77:6b:7e:f6:f3:69:98:cc:c6:24:6d:
ba:2d:48:b0:9f:6c:26:24:e2:b6:42:1e:19:82:b6:82:e4:ed:
d2:e1:bf:fd:9c:1e:64:69:ed:bd:90:c9:8b:e4:17:f4:bc:5b:
ad:41:43:49:10:5e:8d:9a:e2:06:81:36:84:08:2b:4a:a6:bf:
29:23:91:c8:66:46:b2:0b:97:69:a3:9b:e7:51:c2:57:16:79:
27:d7:52:81:47:dc:f4:08:5c:4e:b5:d2:7c:45:ae:88:c6:0c:
de:cf:ac:64:6f:dc:a1:d5:92:c1:09:6a:07:18:26:29:dc:06:
1d:21:4c:44:cb:b0:6e:3d:9c:7b:16:f2:d1:1a:9f:16:5c:b7:
73:4a:bb:91:2d:94:56:ef:cd:e7:0c:b4:c5:af:b8:22:04:06:
64:3b:1e:04:41:0d:f0:ac:10:4d:b2:f1:96:7b:75:29:67:d0:
f6:b5:9b:c1:cc:5f:a3:18:ac:a4:42:e0:46:d0:72:c2:1f:78:
56:de:4a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:59 2025 by rpki-client on console-fra.rpki-client.org