Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
File: xjfMzVzaAYlbGJzKlfKWtcswx8g.mft (raw, json)
Hash identifier: RPSx3cZjtx+Zbyg4MrQaiwsjPbdHzXrJc4iSHn0h6i4=
Subject key identifier: 3C:07:58:AA:B1:66:03:88:7D:9B:A8:BF:F5:8F:02:6F:37:22:D8:5E
Authority key identifier: C6:37:CC:CD:5C:DA:01:89:5B:18:9C:CA:95:F2:96:B5:CB:30:C7:C8
Certificate issuer: /CN=c637cccd5cda01895b189cca95f296b5cb30c7c8
Certificate serial: 0194BBCEC319E4A032F6C669DA8D293E4E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
Manifest number: 0E47
Signing time: Fri 31 Jan 2025 10:01:17 +0000
Manifest this update: Fri 31 Jan 2025 10:01:17 +0000
Manifest next update: Sat 01 Feb 2025 10:01:17 +0000
Files and hashes: 1: setwbHKxCPa52Elr9rNK2rsq568.roa (hash: 02SvDqNnAJ5dRMEAMQRIAHSYXYUFEMZjO5nV2nUJjV0=)
2: xjfMzVzaAYlbGJzKlfKWtcswx8g.crl (hash: WP8XItUy2myuEhFF6EZGhX6t3fq+BGrfqIRvJxdG0XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c3:19:e4:a0:32:f6:c6:69:da:8d:29:3e:4e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c637cccd5cda01895b189cca95f296b5cb30c7c8
Validity
Not Before: Jan 31 10:01:17 2025 GMT
Not After : Feb 1 10:01:17 2025 GMT
Subject: CN=3c0758aab16603887d9ba8bff58f026f3722d85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:ea:d3:12:1b:73:75:5f:0f:69:cd:ef:21:
c1:49:52:1f:7b:8b:f5:69:94:ba:75:35:d6:7a:47:
f8:70:14:d9:72:99:45:c6:0f:15:2c:35:03:a9:2e:
57:c4:aa:ce:08:51:ed:23:90:5f:48:91:3b:fb:5e:
02:62:a0:ba:c4:d7:a8:e5:7e:4b:89:19:98:c5:02:
57:5c:6f:f0:5d:76:69:8e:17:a1:dc:08:d4:37:24:
62:f4:54:f3:98:6f:78:e9:6d:1b:17:96:b0:fd:4a:
41:10:64:21:76:7f:51:d3:3f:0d:01:46:db:e3:7d:
97:6a:a2:57:fb:7b:6d:82:b1:20:5e:c3:d9:dc:13:
f2:82:65:38:2e:fe:be:ee:e7:f1:b8:ca:dd:0d:f1:
21:e1:7a:2a:70:9c:c6:a1:ed:bc:43:7c:14:0f:00:
38:20:59:5d:31:83:f5:86:91:7d:f8:c6:a9:44:43:
22:f7:04:a6:36:57:d2:26:34:1d:ee:22:ec:67:93:
d7:6c:f5:b0:c3:33:23:86:84:af:e3:ef:dd:b2:ab:
19:7f:c9:fb:fd:6e:f6:17:e9:1d:22:9a:03:8e:0a:
37:74:55:b7:58:ec:85:d9:85:84:1a:b2:51:d0:81:
f3:07:25:17:77:6b:9c:40:e1:00:77:2d:1b:4e:63:
3f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:07:58:AA:B1:66:03:88:7D:9B:A8:BF:F5:8F:02:6F:37:22:D8:5E
X509v3 Authority Key Identifier:
keyid:C6:37:CC:CD:5C:DA:01:89:5B:18:9C:CA:95:F2:96:B5:CB:30:C7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:13:d7:5e:b6:32:cf:c8:c7:a3:fa:3b:3f:9d:bc:76:0a:23:
9e:17:50:c2:f7:db:c8:a3:8a:ae:16:b8:a0:47:6c:f0:e6:32:
47:5e:2f:85:ce:03:28:41:54:88:8e:45:85:97:62:e4:76:bb:
22:17:66:3a:ec:d1:94:43:59:d0:0a:10:d8:6d:93:4d:0c:b8:
be:9c:e2:20:2a:1f:60:12:52:54:81:d0:4c:47:9e:87:34:f3:
3f:37:c4:0f:ab:80:cd:1a:16:77:af:92:71:73:c2:0d:4c:72:
24:a5:cd:8a:c5:51:ab:91:15:f2:e1:51:88:58:02:12:8a:05:
9d:ec:76:f0:d0:55:c2:8a:ef:da:b6:a0:25:c5:bd:57:5f:72:
e5:d4:4b:3f:53:62:c8:07:e9:81:41:c8:fc:d8:ab:f3:45:3d:
57:85:1d:52:9d:a7:11:8d:cb:49:b3:84:02:55:5d:1e:f8:54:
34:13:8c:63:82:4e:56:4b:63:e8:14:08:de:d1:bd:a6:0f:fb:
3f:f1:50:61:95:75:5b:9a:32:72:4b:78:22:f5:7f:3c:4c:9c:
4d:20:ad:c3:4f:c0:3a:dd:e8:48:23:a8:14:46:4a:a5:80:79:
e4:8e:b5:3b:7b:23:87:97:23:c7:28:2c:2b:72:60:69:1c:07:
d3:62:c0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:31 2025 by rpki-client on console-fra.rpki-client.org