Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
File: xc_pCq_i6Ahev28AU5YLlrd4BJE.mft (raw, json)
Hash identifier: e324kYEztIn2zm3IlpBl+/w6HvXiPUt8uQIqDwinvPM=
Subject key identifier: 1E:C9:80:F0:B7:30:D7:62:34:6A:AF:A9:43:0B:D4:69:CD:3E:38:C0
Authority key identifier: C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91
Certificate issuer: /CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491
Certificate serial: 0194BA848E34F695A39111478196A5EA5EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
Manifest number: 0639
Signing time: Fri 31 Jan 2025 04:00:36 +0000
Manifest this update: Fri 31 Jan 2025 04:00:36 +0000
Manifest next update: Sat 01 Feb 2025 04:00:36 +0000
Files and hashes: 1: xc_pCq_i6Ahev28AU5YLlrd4BJE.crl (hash: IBaLKHEEvvVzI+0/OisKvIU9XDI99AalBs8Xv3HVZws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:8e:34:f6:95:a3:91:11:47:81:96:a5:ea:5e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491
Validity
Not Before: Jan 31 04:00:36 2025 GMT
Not After : Feb 1 04:00:36 2025 GMT
Subject: CN=1ec980f0b730d762346aafa9430bd469cd3e38c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6a:6c:ef:0e:07:a8:de:05:34:13:a2:c4:39:
2c:05:0f:28:76:66:78:3b:01:5f:03:13:81:c3:1b:
1f:c5:a9:ba:81:9e:aa:b0:5b:bd:a9:b4:54:84:ad:
77:1f:6b:54:07:45:fb:57:fd:12:bf:56:a8:e5:b4:
20:38:48:62:3e:31:ab:fe:18:b3:11:2d:42:d6:6b:
73:5b:8e:53:dc:cc:e0:b5:7f:39:d4:72:f8:95:7e:
a3:56:33:51:ac:eb:66:73:b7:3f:79:8c:05:e7:f2:
98:f6:d7:e3:2d:16:d6:3e:a9:86:af:b3:2d:af:8d:
f4:71:8e:7a:e5:dd:63:da:f4:dd:35:ac:73:26:ce:
77:83:c2:3b:05:e7:ad:0e:d2:a4:4d:e6:82:40:3e:
ef:c1:d0:bc:fd:b2:3c:22:ae:a5:73:ef:aa:f5:8d:
39:e3:56:8f:b9:c6:6a:9e:34:d7:04:3c:fc:dc:8c:
c7:9f:70:71:2b:29:d1:8e:1d:f4:7e:9e:d2:56:7b:
31:76:62:f1:d5:56:20:be:d0:a9:b9:46:d7:a9:8e:
2b:5a:4a:a6:e2:47:0a:e8:1b:57:69:46:41:f4:5c:
7b:e0:82:2b:3f:99:ed:89:0c:73:fa:34:af:8d:26:
08:ae:3f:e6:52:10:ed:ae:03:1d:bb:92:a7:97:63:
66:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C9:80:F0:B7:30:D7:62:34:6A:AF:A9:43:0B:D4:69:CD:3E:38:C0
X509v3 Authority Key Identifier:
keyid:C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ef:5a:c1:fb:e1:b9:17:41:ad:d5:48:b8:61:56:be:54:82:
18:e8:0c:2f:62:98:b2:8b:42:ef:69:a9:a6:b7:0e:e7:cb:ec:
77:79:b5:d4:55:74:3e:03:4e:e7:b7:5c:1d:7e:ac:a4:8f:38:
f2:50:d1:d8:45:87:c6:ea:23:d0:ca:23:84:c7:47:84:ae:a2:
42:52:15:67:33:00:22:72:fe:cf:6d:6e:b9:ea:90:cc:0f:94:
ce:9e:12:68:74:e7:56:25:f3:90:01:54:81:76:e4:52:65:e6:
88:fa:25:ae:2d:6e:bf:8c:02:96:c6:4b:f7:46:38:d2:b8:0e:
1a:4c:58:1a:4a:e9:59:bf:79:d9:dc:ea:39:c7:c4:87:ee:66:
d3:e5:cc:f7:d8:f3:af:75:47:5f:81:0d:73:9a:d7:d5:32:ee:
72:b8:0d:4e:45:ae:d0:c7:3e:9e:90:b7:ec:45:80:0c:65:2f:
b3:57:3a:fd:bb:c8:fc:16:d9:e9:77:af:21:b0:b5:f7:94:e1:
18:e5:56:9a:cc:0c:43:20:ea:ee:e2:b6:c8:23:ca:af:2b:6c:
2a:e4:37:00:4b:f4:80:f0:06:80:73:88:ad:1d:cd:da:e0:e2:
52:ad:65:0a:d7:84:19:eb:20:48:97:d7:44:a2:bf:a8:4e:e7:
4b:f6:b4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:58 2025 by rpki-client on console-fra.rpki-client.org