Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
File: xseGdZEgDB9fn9DMPemVTcE5hi4.mft (raw, json)
Hash identifier: TjvDjE6kNyhR3/v9x4xa024YBxW8LnRsft3P9vWQjx8=
Subject key identifier: A2:93:E9:FE:7E:3C:51:6F:82:A4:6E:7F:7E:3E:64:2B:7C:44:51:70
Authority key identifier: C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E
Certificate issuer: /CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
Certificate serial: 0194BB972B96374A39D7C6D816336F3EC216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
Manifest number: 037F
Signing time: Fri 31 Jan 2025 09:00:34 +0000
Manifest this update: Fri 31 Jan 2025 09:00:34 +0000
Manifest next update: Sat 01 Feb 2025 09:00:34 +0000
Files and hashes: 1: n5CLi01m2wEwkEwNJimVxySnb68.roa (hash: 5V0GC7bRrvLJkkKN335rdHnMpL5HHN7RxPUN+snnmZM=)
2: xseGdZEgDB9fn9DMPemVTcE5hi4.crl (hash: vzdSd2oTTxBfG08aIO+w6hgBeUrub1tSYeYvIR5aN28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:2b:96:37:4a:39:d7:c6:d8:16:33:6f:3e:c2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
Validity
Not Before: Jan 31 09:00:34 2025 GMT
Not After : Feb 1 09:00:34 2025 GMT
Subject: CN=a293e9fe7e3c516f82a46e7f7e3e642b7c445170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:e9:65:ba:b0:c5:b0:3c:db:fe:32:91:b9:
74:99:72:72:9a:25:cc:7f:5c:f4:1b:ec:63:2f:7c:
74:b7:38:52:94:76:54:f7:40:f7:f3:17:a7:7b:23:
44:7b:1b:c3:5a:07:7b:5e:03:f8:58:cf:1b:09:34:
0d:62:c8:87:49:d9:58:37:e0:bd:4e:5f:d2:6e:cf:
d3:f5:db:ad:99:bb:e9:b1:85:60:72:59:df:eb:f1:
af:8f:66:9a:a7:a3:a1:b0:08:4f:8d:fd:88:a1:83:
0a:3b:4b:e9:28:ca:50:f6:83:b9:ab:91:ba:0d:6a:
e9:2a:89:0b:89:19:4c:cf:60:0b:88:30:92:4c:37:
e7:d8:95:94:0d:1c:9c:f3:82:10:21:b0:80:ca:4f:
33:1e:be:f6:3e:32:db:2c:38:fb:0e:56:f5:f7:b7:
35:1f:1c:a4:99:cb:e9:eb:d8:56:4a:97:59:6b:9d:
58:c7:27:94:f8:84:0f:c9:16:df:0e:02:af:9f:c5:
69:e7:d9:23:4c:d4:46:48:07:70:2c:4d:ee:c3:24:
e5:6e:cd:99:d3:dc:fa:07:4c:16:05:2b:9c:0f:4b:
17:b6:b6:0a:08:a8:32:dc:f0:b4:df:83:73:d0:cc:
20:a0:44:a1:0e:29:44:9e:e6:ae:24:76:19:ee:28:
74:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:93:E9:FE:7E:3C:51:6F:82:A4:6E:7F:7E:3E:64:2B:7C:44:51:70
X509v3 Authority Key Identifier:
keyid:C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ce:ac:87:23:8d:fc:89:57:b5:25:1f:5b:15:68:7e:df:1b:
f8:0c:49:f7:77:df:ca:5e:68:a7:e9:62:e2:92:12:88:5f:df:
85:93:9f:78:6a:68:e0:6c:08:1a:54:c8:61:cf:f0:cd:fb:15:
c0:04:52:ed:5e:33:83:9e:bb:8d:3b:8e:0c:58:4c:b2:a8:02:
3c:12:ef:2c:80:ca:04:05:b0:6b:df:98:84:86:9d:f7:e2:c9:
ba:30:d4:12:be:fd:23:b0:3f:bc:07:c5:56:b8:39:c0:fe:72:
d6:75:f8:d9:84:70:8f:cd:9f:e5:c6:4f:24:43:c0:cb:c5:70:
5b:e3:e1:87:b0:c2:ec:ae:b6:65:8f:3a:15:57:80:49:c7:8d:
2d:d1:25:ff:75:9c:ca:05:02:6b:a5:e1:83:a3:f3:4e:6e:5a:
e5:fa:3b:af:26:b0:60:af:25:49:ac:92:e7:38:8a:02:62:e1:
1c:8a:9f:ae:d9:0f:43:f3:42:4b:f3:42:06:7a:4b:17:ec:81:
e5:d8:87:d8:09:e4:25:a6:2c:c2:15:38:50:ac:28:2b:9d:ad:
01:a8:b5:5f:97:e5:80:3e:80:8d:1a:1f:fe:44:95:42:14:2e:
44:2d:3c:94:51:3d:4d:7c:64:be:2d:50:f2:e3:88:fa:ee:82:
9b:a9:a6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:19 2025 by rpki-client on console-fra.rpki-client.org