Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft
File: XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft (raw, json)
Hash identifier: izZAyOYEKjBxZjl9umAir4yzcLaPrZFVjsEFhK1WLmU=
Subject key identifier: 03:36:19:A9:28:F9:C7:AD:CF:C8:6B:F5:17:F7:97:EC:74:C5:F0:31
Authority key identifier: 5E:EC:D2:03:10:7A:6E:4C:09:62:ED:5A:C4:18:09:E8:C9:2F:D6:B7
Certificate issuer: /CN=5eecd203107a6e4c0962ed5ac41809e8c92fd6b7
Certificate serial: 0194BABBD294751CCF0CAF921FEA77B5A4F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft
Manifest number: 0836
Signing time: Fri 31 Jan 2025 05:00:58 +0000
Manifest this update: Fri 31 Jan 2025 05:00:58 +0000
Manifest next update: Sat 01 Feb 2025 05:00:58 +0000
Files and hashes: 1: XuzSAxB6bkwJYu1axBgJ6Mkv1rc.crl (hash: 8QzQ+PsRwHeeklS5oe83Pg68Co8bTvxTLD96Btw2W9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:d2:94:75:1c:cf:0c:af:92:1f:ea:77:b5:a4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eecd203107a6e4c0962ed5ac41809e8c92fd6b7
Validity
Not Before: Jan 31 05:00:58 2025 GMT
Not After : Feb 1 05:00:58 2025 GMT
Subject: CN=033619a928f9c7adcfc86bf517f797ec74c5f031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:d5:e5:1a:73:6a:37:28:6a:e8:1a:28:ee:
70:85:ea:e4:e5:27:62:aa:5b:5b:e7:e6:e1:0d:c7:
16:f5:51:9c:c4:95:c6:5d:6a:4b:18:2f:07:45:6c:
a4:e4:a9:20:95:c8:68:65:92:74:79:3f:68:bb:19:
0c:02:b2:82:06:a4:6e:e6:e4:83:fd:5b:01:51:84:
f2:93:b3:c5:c1:34:bb:52:40:b2:71:7b:31:79:5b:
7a:7d:9d:4f:f5:f0:86:86:5f:3a:b8:de:f7:9f:0c:
b0:c2:0f:1c:2a:ee:82:86:06:43:be:ae:3a:22:aa:
fe:2b:8f:98:82:99:fd:b9:e4:b9:f2:3e:82:38:f0:
bd:96:6a:4a:73:93:0b:ab:aa:b2:63:e9:27:8b:39:
b6:90:a5:24:39:c8:2c:6c:4d:77:c1:72:e9:04:0d:
8f:37:88:cc:3d:fd:18:ab:8f:37:e8:b3:4f:6f:30:
6a:f2:a9:24:25:ff:35:20:db:48:fe:39:55:8a:7a:
92:32:ca:b1:4d:b9:e8:d7:a6:2f:87:cf:a7:aa:d0:
f6:d7:25:3a:ec:05:94:78:47:f5:b5:2d:c3:97:7b:
c7:7e:f8:30:a8:9d:c9:81:ca:06:0a:51:79:32:fb:
01:20:cf:80:a1:8b:cc:7a:68:4b:20:df:4e:3f:21:
51:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:36:19:A9:28:F9:C7:AD:CF:C8:6B:F5:17:F7:97:EC:74:C5:F0:31
X509v3 Authority Key Identifier:
keyid:5E:EC:D2:03:10:7A:6E:4C:09:62:ED:5A:C4:18:09:E8:C9:2F:D6:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:47:03:a4:b4:8a:68:7b:90:41:77:98:ed:46:a7:57:9f:8b:
3a:3b:cc:c3:67:32:58:ef:46:fb:9c:ea:23:ae:74:0f:be:38:
02:a2:45:dd:df:96:8f:f9:8e:c1:19:9e:0e:87:46:78:66:e9:
29:1c:0f:83:7c:b3:0f:ff:aa:67:cb:c7:7c:c1:5f:13:ab:28:
b6:23:ce:5d:ec:6c:17:15:30:2a:23:e4:f7:bb:9a:cc:75:9b:
79:28:01:08:e9:51:a7:ac:0c:44:82:d6:f4:98:a4:4c:ae:39:
44:8e:d7:5b:d9:a5:b3:9a:af:46:0b:6f:ae:b1:ad:17:ab:e6:
e6:d9:94:cb:bf:0e:3b:69:0b:b0:10:31:5d:f0:0e:a6:35:67:
61:cc:a5:44:57:ae:56:79:5a:ba:0a:a5:22:cf:c2:66:8c:07:
c8:31:89:2c:47:0c:41:35:6e:5c:60:81:2e:26:76:a5:a7:a8:
30:4b:5e:40:f8:10:74:eb:1e:d0:5a:20:35:7c:b7:4b:5e:30:
d0:f1:87:95:9c:ac:59:ef:d3:6b:06:36:13:08:db:d3:1b:51:
07:f0:19:5d:02:58:1e:58:01:a2:97:a6:e6:83:2d:45:98:32:
03:29:ee:37:a5:ef:99:47:39:d1:b3:52:a4:30:12:3e:2a:41:
ac:20:62:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:04 2025 by rpki-client on console-fra.rpki-client.org