Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
File: XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft (raw, json)
Hash identifier: cwXu+dhvvsOhFyQolg2YiZ1DUo76aJiNVW0UhfE6k/E=
Subject key identifier: 80:BA:79:A4:64:8A:50:9D:F4:E9:E4:82:6E:7A:9F:12:0D:01:F2:A2
Authority key identifier: 5E:40:98:F2:06:85:04:88:B7:2C:DD:E8:38:7C:31:81:C6:3F:8C:DF
Certificate issuer: /CN=5e4098f206850488b72cdde8387c3181c63f8cdf
Certificate serial: 0194BB972EFAA021499820057AB1096EE63C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
Manifest number: 01DA
Signing time: Fri 31 Jan 2025 09:00:34 +0000
Manifest this update: Fri 31 Jan 2025 09:00:34 +0000
Manifest next update: Sat 01 Feb 2025 09:00:34 +0000
Files and hashes: 1: XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl (hash: eY7IriCy4mj0KEpfCPV7QFLeIbM0eKXzO8N+1d+zkUE=)
2: Zalmb79lgnJ8ZqrgJMNHmIB0_a8.roa (hash: qT5QBRK21+1uxjdCx9gW03qYws/IDIrgYu8jrzg9fD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:2e:fa:a0:21:49:98:20:05:7a:b1:09:6e:e6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e4098f206850488b72cdde8387c3181c63f8cdf
Validity
Not Before: Jan 31 09:00:34 2025 GMT
Not After : Feb 1 09:00:34 2025 GMT
Subject: CN=80ba79a4648a509df4e9e4826e7a9f120d01f2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:8a:d1:69:b1:6d:d3:c6:b3:23:9a:04:84:
5a:42:b0:32:d8:14:b8:de:28:1c:81:d4:06:d5:89:
e1:77:48:62:a9:00:68:9b:fb:4f:bc:db:01:3a:7c:
f7:bb:58:7e:77:0e:ab:56:73:24:43:9c:34:11:54:
3e:1e:86:a6:5c:8d:ad:e9:29:82:d5:ae:4a:c0:6a:
94:2d:1f:34:db:b1:14:b3:3f:97:88:01:f8:2b:1b:
9c:5c:20:67:01:44:f9:13:3b:88:69:c1:64:a4:cc:
b7:70:ed:5c:c3:0d:92:ec:c0:cd:95:69:fb:63:74:
b1:5b:14:99:e6:95:2a:29:ab:69:c9:f4:0c:cc:15:
51:bc:68:7c:eb:87:7a:62:bc:41:e3:11:da:df:11:
0b:ba:b4:7a:ce:f8:f5:57:50:67:5a:a6:76:5d:c6:
ab:58:96:7f:05:56:13:98:fe:1b:85:21:c7:70:68:
00:ac:c4:37:ca:aa:81:dc:3d:1b:f1:f7:b3:31:d1:
c7:66:c5:a1:f8:57:18:4a:75:4b:34:a4:29:c1:67:
98:e3:02:75:73:7b:b1:d4:e4:b8:a9:cd:31:31:fd:
2b:6a:55:6d:5e:61:99:6a:08:d2:32:5e:f3:64:61:
a7:c3:00:56:c0:6f:fa:8e:94:59:6b:8a:f6:56:1f:
e7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BA:79:A4:64:8A:50:9D:F4:E9:E4:82:6E:7A:9F:12:0D:01:F2:A2
X509v3 Authority Key Identifier:
keyid:5E:40:98:F2:06:85:04:88:B7:2C:DD:E8:38:7C:31:81:C6:3F:8C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b7:46:47:d5:38:26:09:a3:65:52:c5:fa:63:1b:63:5b:8a:
b2:88:93:e3:ab:69:39:9d:6f:fe:d1:b9:af:45:49:5b:f1:ec:
ef:bb:e5:f8:72:c8:c4:7c:b8:7c:68:4d:98:f7:d5:ee:0a:31:
73:3a:8f:b3:6f:ab:07:8a:e5:94:71:93:b8:08:8f:3c:77:01:
61:af:fb:9d:7c:f0:c5:4c:4e:64:f7:80:f1:f8:78:5c:a9:36:
47:45:2d:3e:c8:a1:b4:e1:01:5b:b5:e0:c5:03:9c:10:ee:23:
12:3d:bb:4f:71:34:3e:e0:95:a2:02:0a:f4:05:e2:b4:ea:3c:
11:36:fc:4c:2e:f2:a8:32:14:b5:64:85:97:18:99:a1:ba:62:
a8:4d:66:96:75:e2:51:17:81:47:e0:8f:ce:1c:e5:2f:74:a2:
0f:42:da:53:c0:88:61:9f:28:2b:ee:87:a3:b9:d9:77:64:b4:
53:3b:e2:5c:bd:b3:e4:06:c1:ce:79:1f:dd:e2:e1:8e:d7:9a:
63:b3:c4:d1:85:0f:32:8c:a6:02:8c:50:83:58:8e:3a:18:59:
f3:5b:75:7f:95:fb:7f:2e:54:3b:3c:b6:5f:48:8b:bf:c7:c8:
39:14:57:89:79:e5:de:08:e4:14:61:fc:a0:8b:e0:8f:66:e5:
97:7c:59:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:59 2025 by rpki-client on console-fra.rpki-client.org