Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
File: xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft (raw, json)
Hash identifier: NwryVyJ2uM8oOqzjy2Fmj4ZAmhLuNtE+3BIDxRBOejo=
Subject key identifier: C7:CA:C5:7A:C1:70:FD:1F:56:CC:05:03:A0:0C:87:65:80:15:9B:8B
Authority key identifier: C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33
Certificate issuer: /CN=c715cd3acf3b6b2d57bc348567582753c9cc0933
Certificate serial: 0194BA842E4B7F375860FCC2D525E51A45BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 04:00:12 +0000
Manifest this update: Fri 31 Jan 2025 04:00:12 +0000
Manifest next update: Sat 01 Feb 2025 04:00:12 +0000
Files and hashes: 1: xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl (hash: T0WhKohqFldX4WRP5IP8SWTfX8k/DwZ+LJSldrxK/3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:2e:4b:7f:37:58:60:fc:c2:d5:25:e5:1a:45:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c715cd3acf3b6b2d57bc348567582753c9cc0933
Validity
Not Before: Jan 31 04:00:12 2025 GMT
Not After : Feb 1 04:00:12 2025 GMT
Subject: CN=c7cac57ac170fd1f56cc0503a00c876580159b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4d:d4:44:1d:61:9e:96:1f:7f:fe:69:ab:68:
3d:2c:32:2e:09:68:2d:69:29:94:47:44:27:91:40:
a5:d1:4c:93:76:da:cd:22:ca:93:b7:a7:70:57:73:
13:29:8c:ed:8a:4c:c4:01:66:6f:9e:2e:b8:04:9e:
15:33:b0:c6:25:f4:7c:54:24:97:59:40:fb:1b:be:
79:f0:39:28:f9:f9:cd:39:e2:a8:48:54:e4:6a:31:
af:09:52:26:2b:b3:51:3b:19:aa:57:a0:ee:79:6f:
be:29:fc:6f:f1:50:5c:94:3a:44:3d:66:fa:5e:8d:
10:96:35:e8:a3:b7:0b:96:bd:1f:2d:2d:89:2f:ac:
9e:78:7d:d5:f0:d4:7c:ce:b9:56:19:05:fc:34:4f:
95:f5:81:04:75:87:80:a3:b0:3c:08:e0:61:48:9d:
2a:c8:02:bd:58:59:62:71:84:ee:55:a1:de:e4:41:
b0:da:b5:1f:46:33:9a:72:03:cc:a5:e5:ee:40:b1:
a0:40:be:86:86:63:b7:13:a0:9f:1a:46:1a:7a:cd:
e5:19:12:9f:c7:ff:b5:b8:ff:26:57:11:3b:f2:f3:
04:17:bc:cc:22:55:5d:52:36:15:7e:3f:6e:e6:f9:
6b:ca:7f:2f:d6:61:45:1a:94:c0:ba:d5:0d:67:ca:
53:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CA:C5:7A:C1:70:FD:1F:56:CC:05:03:A0:0C:87:65:80:15:9B:8B
X509v3 Authority Key Identifier:
keyid:C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:69:73:8b:4a:e3:86:44:3c:84:2e:01:98:4e:fc:66:b7:79:
2f:25:4d:17:b9:16:83:e4:d7:71:c9:d3:58:16:a2:f5:a0:7b:
e7:53:9f:0f:81:cf:06:fc:ab:a2:f4:c4:a6:ad:5d:bd:87:91:
69:b9:84:ff:f2:c2:17:c9:13:47:fd:f0:8a:f2:ac:a3:49:42:
c6:90:13:ba:8b:4d:63:23:bd:b7:bc:e4:e1:31:d8:a5:67:6d:
ac:ef:35:8d:b7:0b:86:4b:fa:f4:46:30:ac:e3:b3:b7:26:50:
c9:72:49:09:89:7a:08:10:38:0c:ea:91:e3:f7:8e:73:bd:3b:
78:c1:e8:d0:59:04:56:b7:17:77:30:4a:2c:fe:68:9a:f4:94:
18:86:1c:6f:f1:64:94:f9:ff:d4:85:84:03:f9:ad:a4:14:b7:
79:c9:23:04:da:d8:69:75:8c:95:f7:c3:c5:4b:ba:09:2f:20:
af:23:3e:dc:da:fa:a6:07:c4:bf:b5:c7:60:b6:30:e3:71:57:
cb:a1:e2:5c:f4:a4:bd:03:20:81:a7:ad:08:a3:90:d2:7b:64:
9e:27:f7:39:9f:47:71:86:37:ed:a6:62:b6:41:ed:39:8b:fd:
1c:bf:6f:68:6b:df:0d:40:9a:97:ea:29:fc:bc:a4:11:4a:e0:
cb:27:c1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:24 2025 by rpki-client on console-fra.rpki-client.org