Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
File: xC-2EFO6LavFFxWw9TzXtrlFTQw.mft (raw, json)
Hash identifier: rK5tg/C7KCqYjFNRKsc3wLgcvoW86kuVJPzLCsV6uTg=
Subject key identifier: 76:D1:46:08:A9:27:C0:35:35:C4:27:68:CD:A4:76:D7:03:EE:86:F7
Authority key identifier: C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C
Certificate issuer: /CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
Certificate serial: 0194BABB280ADA9116815987828A3ABFDA04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
Manifest number: 0F2A
Signing time: Fri 31 Jan 2025 05:00:15 +0000
Manifest this update: Fri 31 Jan 2025 05:00:15 +0000
Manifest next update: Sat 01 Feb 2025 05:00:15 +0000
Files and hashes: 1: xC-2EFO6LavFFxWw9TzXtrlFTQw.crl (hash: BvcSavPkyHlEa7i8ITSfLtyl29SKZjtwDuGKK4WaXpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:28:0a:da:91:16:81:59:87:82:8a:3a:bf:da:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
Validity
Not Before: Jan 31 05:00:15 2025 GMT
Not After : Feb 1 05:00:15 2025 GMT
Subject: CN=76d14608a927c03535c42768cda476d703ee86f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7d:d2:10:c7:82:8f:4d:14:a7:ee:b0:2d:c7:
28:2f:a8:44:0f:fe:85:57:50:de:3f:7d:bd:3e:b2:
8d:13:2d:0d:aa:0e:47:92:68:7a:c5:45:02:a3:48:
f9:98:d8:7a:b2:0b:01:ef:52:31:10:4f:c1:2e:62:
73:c4:9f:4e:2c:ec:ca:ae:f5:d6:5f:f8:21:b0:d6:
8a:51:f1:9a:a0:34:f7:39:43:bf:e4:d7:2e:55:cd:
c4:0a:2e:67:34:8c:de:40:a8:84:c9:f4:a1:63:7b:
b2:75:15:da:e2:e1:8c:47:8a:75:af:4f:da:ef:1c:
80:9e:ac:b2:a6:df:b8:b7:99:f4:99:de:de:f5:a9:
b9:a8:cd:e6:0f:e5:d6:a9:f2:93:73:72:db:db:db:
9f:46:06:48:2d:5c:85:2f:86:f5:26:d7:64:15:54:
b2:98:05:fb:05:f1:ba:b0:04:99:ac:ba:88:11:6d:
a7:f8:c0:2d:7b:21:ab:da:62:65:ab:12:70:d3:43:
d1:dc:e1:9d:5a:68:79:75:15:f8:2a:21:6e:ed:f1:
ad:75:fc:bd:69:15:de:d9:4f:da:f7:be:62:d0:b3:
5d:25:1c:75:11:e1:f9:58:8d:b3:34:51:42:71:12:
ff:fa:eb:30:c9:41:f6:f1:84:90:25:66:d8:ea:b3:
6b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D1:46:08:A9:27:C0:35:35:C4:27:68:CD:A4:76:D7:03:EE:86:F7
X509v3 Authority Key Identifier:
keyid:C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b3:19:35:b3:d6:e1:51:81:e8:0a:89:2e:8e:bf:57:be:cc:
59:70:8d:00:04:63:ee:57:df:c4:19:11:42:21:8e:94:2f:c8:
65:18:4a:15:41:cf:16:4f:0b:77:57:a8:11:5e:78:61:92:2d:
77:2b:ea:9a:8a:96:0f:be:fb:de:06:7a:d2:17:3c:07:f7:85:
6a:16:3d:f0:4d:e1:60:ec:34:a4:95:64:99:78:7c:3f:36:1e:
f6:41:de:bc:15:96:5c:95:da:7d:1f:51:72:90:2d:02:7c:bd:
78:9c:1e:63:0d:99:c7:6a:b1:08:1c:6f:ce:90:b1:6a:22:81:
ef:fc:fd:55:2a:52:31:0f:cb:61:23:11:fe:35:15:e8:ad:a0:
66:1e:f1:a8:b6:7c:8c:64:1b:43:c3:7a:d9:43:19:1b:aa:c9:
29:b8:d5:7c:e6:65:8e:da:98:ea:d9:65:49:f0:dc:f5:b1:e8:
5a:07:50:dc:7f:6f:5c:6c:11:dc:ff:ba:09:58:78:79:6e:5b:
9e:55:7c:90:3b:9c:8c:3d:19:27:be:d0:77:e9:b8:41:d7:72:
bd:ca:c5:ec:76:62:c8:a4:ed:f4:3e:b9:3c:47:da:18:44:28:
fc:1b:ff:2b:54:d4:a9:45:35:0c:a2:1d:f1:8a:d8:1e:0c:cf:
73:ce:bc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:12 2025 by rpki-client on console-fra.rpki-client.org