Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
File: _XF_OrY5RaG-c5wrOiWJvqVd224.mft (raw, json)
Hash identifier: bI6A12fTh1tI7ehnH5I2DtuYV7jQv8/WuJ4DBpIsljU=
Subject key identifier: 4C:49:7C:03:16:97:D3:4A:ED:14:10:D2:0A:C1:B5:11:DE:49:04:CD
Authority key identifier: FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
Certificate issuer: /CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Certificate serial: 0194BAF22FF820A082D3FFAD3A6AC51720CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
Manifest number: 09DB
Signing time: Fri 31 Jan 2025 06:00:21 +0000
Manifest this update: Fri 31 Jan 2025 06:00:21 +0000
Manifest next update: Sat 01 Feb 2025 06:00:21 +0000
Files and hashes: 1: _XF_OrY5RaG-c5wrOiWJvqVd224.crl (hash: dyQE/E6OEcZoT1kT6O1jjL7MrW3TNuYZozJ6MZZKgoQ=)
2: gzdyy5qInnSa0M6b956pVUzgC-k.roa (hash: 2Ow3V4pucXvBImXLn02gpmIFTSdf3VU+/V7SnyCKOjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:2f:f8:20:a0:82:d3:ff:ad:3a:6a:c5:17:20:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Validity
Not Before: Jan 31 06:00:21 2025 GMT
Not After : Feb 1 06:00:21 2025 GMT
Subject: CN=4c497c031697d34aed1410d20ac1b511de4904cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:59:93:88:a0:74:b9:4d:cf:08:cc:62:ee:c1:
df:cc:92:6f:a6:f0:5d:c5:96:68:b5:c4:bb:bb:9f:
0c:7d:cc:16:04:d6:92:61:e5:12:64:2f:b1:d2:5e:
df:06:cf:3f:d6:23:2c:4c:8e:a7:f0:15:82:f7:90:
9e:87:34:39:c3:bd:4a:9d:de:cb:ee:86:65:6f:39:
94:69:59:c8:b5:55:e9:80:7a:a7:5b:9b:ef:a8:6d:
9c:fb:82:4c:4e:78:4d:a7:b7:76:cf:74:26:46:fc:
5c:61:ec:86:9e:89:d2:96:da:1c:fa:a7:55:f7:56:
66:3f:8e:48:ea:96:69:e4:f2:9d:4c:3e:15:6d:d6:
f2:8a:c6:9e:62:db:51:1a:01:ed:44:d2:c1:2c:a1:
eb:61:85:5a:21:fc:18:4a:c2:d6:78:ac:55:34:7c:
61:60:62:04:a8:14:be:dc:82:e1:58:03:26:92:b8:
64:d5:2b:d8:6d:27:d3:13:ba:42:c1:f0:df:55:d4:
a6:fe:98:af:83:3b:dc:95:ec:b3:08:f4:60:38:48:
64:69:09:fc:98:6f:c3:e2:97:95:f6:2f:4e:d4:24:
8d:97:bb:72:d1:e3:56:69:49:1e:ae:e9:46:0a:84:
85:ff:8d:62:40:79:1d:4a:af:32:1c:33:45:af:1b:
f6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:49:7C:03:16:97:D3:4A:ED:14:10:D2:0A:C1:B5:11:DE:49:04:CD
X509v3 Authority Key Identifier:
keyid:FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:71:e4:11:e2:9f:86:7a:01:14:ca:fd:d1:3c:f9:14:ee:e5:
0f:4c:3e:ab:a0:3e:f1:e8:8d:b5:c7:45:ae:7a:74:36:02:bb:
b7:ee:73:51:9a:c0:86:19:19:24:a2:53:94:90:30:69:54:e3:
aa:41:f6:e1:c4:78:fc:16:80:af:c4:8f:6b:3e:24:54:22:9a:
42:f6:0d:3e:1f:36:6e:00:35:29:2b:f8:51:70:40:af:6c:aa:
00:18:50:44:81:1a:05:d4:d4:ae:52:e5:53:1a:c8:79:47:37:
e5:4f:f2:0a:cb:6b:66:b3:79:9b:ad:4a:9b:a7:5c:0e:c6:f3:
76:55:f3:12:2d:b8:d2:76:0b:45:a6:d1:89:f5:97:32:df:a5:
67:01:37:d4:3f:76:9f:1e:66:f0:9d:ce:7b:73:27:8b:eb:9a:
79:39:5e:25:ed:22:ee:c4:7c:8c:26:49:fa:03:d7:e4:65:d6:
51:b7:17:f0:2b:f9:51:a4:74:50:3c:38:f2:ea:91:2d:80:7b:
a0:af:ae:84:d8:0c:f1:da:c6:9d:43:b8:14:f1:c8:cc:56:1e:
01:14:77:e0:56:f3:ad:ca:d8:d4:13:e2:6f:2e:9b:73:df:db:
88:79:81:ae:ee:a9:2f:23:6c:34:b7:15:a3:80:d9:95:14:33:
9a:6c:9c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:42 2025 by rpki-client on console-fra.rpki-client.org