Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
File: xEuito7PJQE5XMZUCOiTWsnYbJc.mft (raw, json)
Hash identifier: 0830sU//Gm66d1KiU2QVXE113KHq8Cc7ZLJeoGRZlF8=
Subject key identifier: 39:1F:0D:14:94:B0:7F:68:96:BB:96:C2:93:82:F4:FB:3A:38:9E:B4
Authority key identifier: C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97
Certificate issuer: /CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
Certificate serial: 0194BABB32237F4FA56BCDBEDA486B61583E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
Manifest number: 0104
Signing time: Fri 31 Jan 2025 05:00:17 +0000
Manifest this update: Fri 31 Jan 2025 05:00:17 +0000
Manifest next update: Sat 01 Feb 2025 05:00:17 +0000
Files and hashes: 1: xEuito7PJQE5XMZUCOiTWsnYbJc.crl (hash: vZrv8ni0WHvSespTF6id71fjalbrkMInrWHLHsPTrKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:32:23:7f:4f:a5:6b:cd:be:da:48:6b:61:58:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
Validity
Not Before: Jan 31 05:00:17 2025 GMT
Not After : Feb 1 05:00:17 2025 GMT
Subject: CN=391f0d1494b07f6896bb96c29382f4fb3a389eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:74:8d:93:19:57:77:44:9f:2a:cc:8a:b3:83:
02:42:0a:6b:7c:03:a6:dc:b4:b9:c1:9d:2a:9d:23:
42:23:e5:c2:eb:63:67:af:1f:57:38:16:86:b0:9f:
ed:1b:b3:c6:34:1e:4e:5e:b5:a4:e8:cd:b1:de:cf:
2e:42:b7:56:63:e4:6d:82:33:d7:16:c6:95:aa:7e:
04:1c:bd:ab:da:bd:62:c7:33:82:9d:9e:e2:e3:36:
29:14:f1:dd:f5:12:d1:1c:7f:b1:cd:0a:8a:2d:4e:
67:12:6a:6c:d1:69:cf:85:e3:ab:11:60:9f:ea:23:
0f:f3:b2:07:1c:59:50:9e:58:a3:53:fa:82:b3:db:
9c:84:0b:b1:4e:57:72:b3:00:cb:be:20:4f:ce:a8:
a8:0e:2c:4f:29:b2:c1:5b:2d:dc:99:79:fe:90:a5:
4c:d4:f6:21:67:59:fb:43:39:05:6c:be:49:09:5e:
67:a5:3e:92:b9:56:8c:53:2e:db:22:c4:55:31:37:
2e:b1:ff:57:9b:3e:c7:8c:21:c0:48:d9:a3:55:35:
a8:3a:63:b7:e2:60:0a:53:7c:d7:21:16:35:22:2b:
5c:08:a0:a5:37:c1:40:91:9a:bd:0d:79:f8:30:8e:
bd:8d:71:86:48:47:96:d9:bf:e0:74:15:67:a7:45:
ad:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1F:0D:14:94:B0:7F:68:96:BB:96:C2:93:82:F4:FB:3A:38:9E:B4
X509v3 Authority Key Identifier:
keyid:C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:de:0b:e6:32:64:5b:d8:32:d7:83:d0:27:6e:45:15:a8:cd:
e7:c1:92:88:af:8a:c8:1d:83:81:11:f6:ef:64:9b:fc:00:1d:
e5:45:2b:4e:35:c8:17:a7:85:05:21:1d:92:e6:70:64:64:b1:
74:e4:5e:57:4e:b2:b3:e3:df:d5:75:59:ea:7d:08:ff:32:ea:
61:b5:ab:bb:ec:4c:de:96:e2:a9:86:50:03:cc:44:9d:3f:00:
0f:a8:36:c9:63:e1:8f:84:21:b3:80:14:17:71:2f:7d:20:b4:
af:ce:5f:e8:9c:57:94:8b:cb:ee:e0:56:78:56:6d:e2:85:1b:
e0:00:eb:ce:41:c3:89:08:0b:73:72:de:ec:f5:d6:7c:d9:16:
99:42:7d:7d:09:49:bc:3b:51:08:2d:2d:96:b0:3e:de:ee:aa:
53:2c:52:6b:55:9d:0e:65:ca:7e:34:a0:cc:f0:c9:36:e4:4b:
6b:69:42:39:ad:de:04:81:4a:f0:26:ca:a8:9e:ba:3c:bb:1b:
9d:89:52:13:fb:27:c6:9b:b3:59:8c:78:b5:14:02:e1:4a:57:
21:be:80:81:09:4c:83:d2:55:7a:e9:df:78:3f:8a:3e:20:42:
df:91:c8:7c:80:25:70:d3:2f:32:55:19:fa:b5:91:f1:f0:14:
32:30:14:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:39 2025 by rpki-client on console-fra.rpki-client.org