Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
File: XZno1XE6XmOCwNE4nWJCgW-db7k.mft (raw, json)
Hash identifier: kEfgJma1HNYBBMgjKhN9GzrCBVWuIde6r8xUA0FpZXk=
Subject key identifier: 32:89:95:4E:FB:97:1E:25:3F:25:EE:57:D5:50:E9:53:58:17:C5:41
Authority key identifier: 5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
Certificate issuer: /CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Certificate serial: 0194BB605A8C3058A55640466A5B149370F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 08:00:41 +0000
Manifest this update: Fri 31 Jan 2025 08:00:41 +0000
Manifest next update: Sat 01 Feb 2025 08:00:41 +0000
Files and hashes: 1: 1-NGjnQxo4c6IDfqjk5paae-wSfM.roa (hash: 4pr97OcGZEpEysIvYdOK32obqFh3ATs7kdH95HWDctQ=)
2: UUanwV5xGuK3SINsq8WiMNy7Rsw.roa (hash: JbzAaEUNAUROpdNsWj7B0ylMXqQOejnEiOY//pgAVzs=)
3: XZno1XE6XmOCwNE4nWJCgW-db7k.crl (hash: TlcHXp1yMvub8TipQE3C644bCrlAZdjP+ztPEla8g40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:5a:8c:30:58:a5:56:40:46:6a:5b:14:93:70:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Validity
Not Before: Jan 31 08:00:41 2025 GMT
Not After : Feb 1 08:00:41 2025 GMT
Subject: CN=3289954efb971e253f25ee57d550e9535817c541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:73:29:97:d8:f6:ea:ca:d0:67:fc:e2:05:8d:
2d:0f:1f:43:99:65:af:76:df:66:87:06:f3:86:81:
6c:f5:0d:43:a8:a4:f6:d5:55:4d:c0:79:18:87:ed:
4d:1a:a2:6d:58:bb:da:b9:5a:99:05:20:e3:ff:8a:
ea:c4:fd:d5:0d:73:0d:7a:a7:1f:97:1b:8e:3d:55:
41:c5:95:43:4e:21:64:c8:a5:a5:78:d3:92:5d:2e:
a0:57:98:ff:b2:ba:c6:23:70:00:33:6e:7a:bb:77:
1e:1e:6b:45:81:d7:d6:e1:29:2a:4c:14:d5:d5:0c:
d6:9f:39:bc:76:40:0b:ee:2e:cc:41:63:be:b6:e6:
8f:3d:c6:08:90:2c:49:d4:ef:71:e0:82:11:64:9f:
c2:0a:ba:9a:a2:52:bb:fe:53:71:27:ba:b1:ff:8a:
a7:c6:b0:31:44:f9:c6:36:98:8f:d0:10:dd:18:ce:
19:8d:82:62:85:4a:a1:1d:d7:b8:58:28:03:9b:ea:
79:ae:3c:d1:be:66:db:12:8f:3f:d2:a5:d6:f2:92:
ec:8a:55:c3:4a:5f:83:78:06:ce:3f:b3:4a:2f:e4:
ef:5d:9c:14:ca:08:b1:2e:b5:ee:69:bb:d2:55:e8:
c6:95:d0:66:56:ee:8e:0d:fc:f0:e2:b5:59:04:6a:
f2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:89:95:4E:FB:97:1E:25:3F:25:EE:57:D5:50:E9:53:58:17:C5:41
X509v3 Authority Key Identifier:
keyid:5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b0:10:0e:28:75:35:bb:83:b5:41:ac:80:fd:a9:f4:d0:c9:
cb:59:0d:9c:d0:8e:4d:a0:97:0a:71:e1:8b:25:1e:00:ef:44:
7d:76:53:88:3b:c5:57:82:db:6a:23:92:95:1f:7a:cb:ac:07:
00:d2:36:b2:f9:09:77:05:4e:f3:cd:32:0a:84:aa:25:8e:c7:
91:69:7f:27:21:00:31:08:04:9c:53:a3:c6:42:be:f0:27:5c:
93:2c:2a:40:a6:57:85:ed:3c:20:7b:f1:cf:94:14:63:c1:dd:
bd:27:06:6e:54:c0:6d:50:99:95:0f:6f:7e:e8:b4:79:d3:a1:
ea:e6:40:e4:30:30:a0:3c:40:ef:32:a7:67:37:da:f3:97:5b:
f6:76:ff:f9:2d:0e:dd:b6:1c:43:6c:b4:6d:32:8e:5a:e9:e5:
b9:aa:3a:49:a8:65:5f:dd:cc:c6:ec:91:4f:e4:51:a2:da:43:
37:ed:e3:ed:01:ca:d0:d6:f4:19:8f:11:fd:a0:31:5b:9f:c1:
80:3a:89:71:f7:6d:cc:cc:df:73:5c:c6:6a:9e:5e:24:3d:9b:
f4:c5:0a:8b:3d:82:65:df:fb:63:c6:1a:e5:8c:58:96:b4:af:
7e:75:7f:27:d8:17:0b:b4:1c:83:2d:f3:79:e0:69:cd:3a:09:
05:f7:66:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:12 2025 by rpki-client on console-fra.rpki-client.org