Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f32f37-443c-4065-8f05-cfb51916490d/1/XmRDFeVulrFTtP_eTXDay6oVzpI.mft
File: XmRDFeVulrFTtP_eTXDay6oVzpI.mft (raw, json)
Hash identifier: wRAd+q007J/BlVUj8xcNIxGQanyo4gZsoAw7hptTHc8=
Subject key identifier: 43:02:73:73:13:3C:C0:00:A5:E7:75:4F:A8:A8:F6:56:47:C2:3D:46
Authority key identifier: 5E:64:43:15:E5:6E:96:B1:53:B4:FF:DE:4D:70:DA:CB:AA:15:CE:92
Certificate issuer: /CN=5e644315e56e96b153b4ffde4d70dacbaa15ce92
Certificate serial: 0194BB5FD5F465D13EF8A2C858F0F4E87DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmRDFeVulrFTtP_eTXDay6oVzpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f32f37-443c-4065-8f05-cfb51916490d/1/XmRDFeVulrFTtP_eTXDay6oVzpI.mft
Manifest number: 039A
Signing time: Fri 31 Jan 2025 08:00:07 +0000
Manifest this update: Fri 31 Jan 2025 08:00:07 +0000
Manifest next update: Sat 01 Feb 2025 08:00:07 +0000
Files and hashes: 1: XmRDFeVulrFTtP_eTXDay6oVzpI.crl (hash: OoloPueADrixcARojF0Z5F+xkNyyyFeJQthnRZ0BCsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f32f37-443c-4065-8f05-cfb51916490d/1/XmRDFeVulrFTtP_eTXDay6oVzpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f32f37-443c-4065-8f05-cfb51916490d/1/XmRDFeVulrFTtP_eTXDay6oVzpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmRDFeVulrFTtP_eTXDay6oVzpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:d5:f4:65:d1:3e:f8:a2:c8:58:f0:f4:e8:7d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e644315e56e96b153b4ffde4d70dacbaa15ce92
Validity
Not Before: Jan 31 08:00:07 2025 GMT
Not After : Feb 1 08:00:07 2025 GMT
Subject: CN=43027373133cc000a5e7754fa8a8f65647c23d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:d5:53:99:ac:b1:b2:36:2b:be:fd:c2:09:
24:5f:73:52:88:e0:f4:dc:bf:f8:9d:ca:31:ce:17:
bd:9d:f2:3b:27:99:c8:1d:83:64:70:42:e7:70:5e:
f8:21:e4:bb:e3:d5:ea:00:14:2d:fd:d7:7f:2d:84:
90:96:44:9e:f5:02:dc:85:0e:c1:44:50:c4:ef:09:
d6:4c:3a:35:7e:c9:59:55:a7:b0:80:5f:1d:e2:a9:
80:26:55:79:b8:4e:db:b5:c7:5a:40:a0:51:73:56:
77:ee:04:3f:03:df:2a:16:c4:c4:9e:e0:6f:31:66:
09:82:c8:14:28:18:07:cf:b9:f6:11:73:ef:2f:d7:
2e:5d:d7:b6:23:cd:d7:ae:ec:ed:78:73:34:2d:ab:
19:62:53:95:7f:f1:b0:1d:23:bd:5b:b2:ed:c1:24:
0a:12:df:0d:53:3b:e4:f3:e3:c7:e7:7d:09:1c:98:
14:64:f1:e2:4e:84:9c:78:4f:63:b4:b4:dd:78:e9:
cd:49:61:02:11:95:29:97:06:36:2d:af:19:41:d0:
fd:1c:40:de:4b:f3:bc:dd:c7:33:ed:e9:50:3f:d4:
28:5a:94:fb:b2:38:2c:d5:c9:fb:00:be:2c:97:b8:
d9:5c:b3:a8:f0:f4:9e:67:37:e0:1e:66:04:79:29:
b5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:02:73:73:13:3C:C0:00:A5:E7:75:4F:A8:A8:F6:56:47:C2:3D:46
X509v3 Authority Key Identifier:
keyid:5E:64:43:15:E5:6E:96:B1:53:B4:FF:DE:4D:70:DA:CB:AA:15:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmRDFeVulrFTtP_eTXDay6oVzpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f32f37-443c-4065-8f05-cfb51916490d/1/XmRDFeVulrFTtP_eTXDay6oVzpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f32f37-443c-4065-8f05-cfb51916490d/1/XmRDFeVulrFTtP_eTXDay6oVzpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:00:57:9f:71:6e:d0:65:d0:77:56:88:bb:81:d8:ce:3c:f9:
8d:56:5b:52:61:57:a4:63:b5:b0:55:90:0b:99:0a:13:9f:33:
c5:35:9d:49:7e:c5:b9:db:4c:95:f1:50:86:3f:ff:1e:0e:22:
8f:18:0f:e6:f4:9a:c4:32:ff:9d:73:23:6a:84:84:87:c2:d3:
cf:4e:2b:fa:00:68:2c:98:9b:c0:fc:83:ab:e8:e4:70:35:cd:
b8:b3:0c:a7:f4:c5:86:23:f3:fa:58:40:b5:6c:13:4b:75:24:
c4:18:a3:fc:cc:db:97:b1:3b:ab:4e:71:e4:7b:9d:10:49:b3:
0d:28:1f:2e:c8:93:f9:2b:08:cb:5c:19:26:f3:db:55:79:da:
c6:6c:6f:cb:d8:d5:be:a2:f8:0b:97:39:b9:03:45:d2:ce:6e:
e2:97:65:b8:32:76:17:2a:57:19:75:d1:b0:f8:be:07:14:16:
80:70:53:73:0b:94:32:2b:a7:ed:fe:8d:f6:57:30:dc:95:f8:
d4:88:d0:34:06:08:a1:56:3e:00:14:af:ab:50:fe:e4:bf:23:
9a:1a:e6:90:24:6a:91:bd:a0:ba:71:f2:4f:11:0a:28:1c:a3:
1b:ea:3f:cb:9d:a8:b0:75:c7:29:cb:5e:ed:d0:da:43:bc:67:
9e:71:0a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:33 2025 by rpki-client on console-fra.rpki-client.org