Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
File: XPiK3BnqrRPWhbgew5k1vUssaa0.mft (raw, json)
Hash identifier: gZ3mUwjqrqUN8pDoILuaN8N2sXZv1ek/HPtEgqcDpFQ=
Subject key identifier: 87:F1:E2:09:11:41:D1:91:CD:A6:8A:E8:66:2A:12:92:81:F2:58:55
Authority key identifier: 5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD
Certificate issuer: /CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad
Certificate serial: 0194BB5FF04B9303FA22857C97F74477B270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
Manifest number: 132F
Signing time: Fri 31 Jan 2025 08:00:14 +0000
Manifest this update: Fri 31 Jan 2025 08:00:14 +0000
Manifest next update: Sat 01 Feb 2025 08:00:14 +0000
Files and hashes: 1: 2m-5sAN7fZLZtnlN4KyM3kDb8rA.roa (hash: GBh4Fs12dTfnHuJfy5lqzt0sICQWCnX0b8Yq+RaFO/k=)
2: XPiK3BnqrRPWhbgew5k1vUssaa0.crl (hash: dddFkkOGgcVlkrjcH2s+56PJEFqW1JZCRDeWYBU0afM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:f0:4b:93:03:fa:22:85:7c:97:f7:44:77:b2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad
Validity
Not Before: Jan 31 08:00:14 2025 GMT
Not After : Feb 1 08:00:14 2025 GMT
Subject: CN=87f1e2091141d191cda68ae8662a129281f25855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:29:66:d1:db:17:73:f7:0a:9d:90:0a:e3:a5:
d3:5c:8e:d2:41:29:24:dc:e4:2e:59:2b:ad:de:ea:
4e:90:86:05:87:0d:b7:ab:fd:28:3b:19:02:34:27:
b6:4e:d9:24:5a:96:07:3e:c4:61:c7:15:4f:8e:e0:
99:2d:e8:d0:76:73:e4:2b:5a:76:46:c5:2c:14:50:
52:b5:ac:72:5a:13:2d:f6:c0:b6:f1:fb:b7:a2:10:
21:5c:6f:88:e6:e6:52:4c:f9:a3:af:eb:13:12:ec:
49:dd:3f:89:99:9d:29:11:cf:15:5b:61:c0:16:97:
b8:88:76:5d:fb:98:11:1d:c7:eb:69:4b:4a:59:a3:
3d:ca:20:95:54:a3:0f:a3:4a:73:a1:3b:99:3f:47:
91:c8:e6:f7:53:d7:45:53:74:ce:96:4e:a5:9b:f9:
b1:d8:a9:a7:af:c8:83:0f:66:15:75:da:78:87:0f:
00:34:7b:d8:e8:e1:de:80:74:11:f6:fb:8f:e1:e8:
62:6f:c4:a5:2b:78:a0:d0:92:c1:94:10:9a:10:b5:
fa:88:a8:56:5f:33:c8:25:0f:91:e6:34:4d:54:49:
c6:5e:ad:f1:07:e5:08:47:56:59:19:27:f1:0c:8f:
d6:f0:3a:7b:ae:a8:57:cc:bf:fb:da:94:96:55:42:
2c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F1:E2:09:11:41:D1:91:CD:A6:8A:E8:66:2A:12:92:81:F2:58:55
X509v3 Authority Key Identifier:
keyid:5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:35:6a:43:82:91:cd:97:aa:aa:26:a5:4e:55:18:90:24:dc:
5a:50:29:09:6b:28:83:c5:71:1f:3d:5f:d2:49:8b:3b:40:4e:
ee:d4:ab:d6:9d:f8:a7:c4:8f:fd:b1:db:07:bc:b8:2b:e5:43:
8a:9f:5d:d3:60:f3:94:89:1b:40:cd:f3:20:fd:7f:4b:e4:e6:
9c:4d:be:14:5d:6d:31:40:0d:b6:fd:d7:21:8e:4c:a3:a9:05:
5d:cc:b7:47:47:3f:1d:21:17:66:b8:b7:81:55:44:18:fd:f4:
0d:d1:24:b9:ec:b0:b6:38:ee:99:6e:00:68:c7:f2:d3:66:7f:
f3:86:ba:65:9a:b2:8d:d0:af:b1:0b:95:bd:d2:18:a4:dd:5f:
4d:a7:db:a8:44:37:84:38:db:0b:9f:85:9f:81:e7:c5:54:c3:
39:a1:14:76:bb:95:c3:f2:26:27:94:e5:b4:2e:c7:5d:f1:0f:
46:72:7c:4f:69:ee:43:e9:84:f9:3e:c0:cf:f2:b6:9e:25:b3:
fc:f8:e5:81:3e:4c:94:a3:46:e1:4a:c5:7e:86:9e:4a:51:6c:
f4:8f:40:08:9c:df:d8:d1:3b:80:99:4e:dc:a9:a7:bf:fe:01:
84:b0:8f:e7:b3:3f:56:f7:4c:6c:25:cf:13:2b:6c:b5:0a:81:
2b:dc:ad:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:53 2025 by rpki-client on console-fra.rpki-client.org