Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
File: xVfBn2xy2JAMTYnsers11PqSEUs.mft (raw, json)
Hash identifier: bdv8PXIM3cK2kdgOyNcMfQEn6b++DsJ+B/JudAqGQjY=
Subject key identifier: C2:EF:DE:A0:AC:71:B1:9A:39:3D:66:71:A8:78:09:0E:A7:C0:D4:B4
Authority key identifier: C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B
Certificate issuer: /CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
Certificate serial: 0194BA8463E69851C66A10F15C34885D5F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 04:00:25 +0000
Manifest this update: Fri 31 Jan 2025 04:00:25 +0000
Manifest next update: Sat 01 Feb 2025 04:00:25 +0000
Files and hashes: 1: Edf4BRC_SQM6caxUC9bnztO-Qtw.roa (hash: jrSFQj+uOrtwJVK8tmCsyrdBIOLOL0+D+bgHO+lUMkU=)
2: xVfBn2xy2JAMTYnsers11PqSEUs.crl (hash: pC5SoBxJKVV+GzpKvD/VpRixBgbpqg2iKAsSCjDdX1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:63:e6:98:51:c6:6a:10:f1:5c:34:88:5d:5f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
Validity
Not Before: Jan 31 04:00:25 2025 GMT
Not After : Feb 1 04:00:25 2025 GMT
Subject: CN=c2efdea0ac71b19a393d6671a878090ea7c0d4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bf:8f:86:a9:43:4f:4e:14:6d:f4:46:7c:62:
fd:ef:76:5c:d3:37:17:f3:85:15:1e:e6:68:ba:b2:
69:e7:64:07:81:af:8c:c3:15:2b:90:73:be:98:1c:
2c:cd:be:89:ee:90:e6:a2:2a:47:9f:e6:52:74:7f:
26:dc:65:13:65:fc:66:bd:86:67:c8:15:dc:0c:36:
ac:88:b3:1f:ab:41:24:b0:b5:e4:01:80:8f:a3:3c:
11:42:59:11:78:ae:24:15:49:7a:6a:7b:19:55:77:
4a:5f:a7:7e:8c:41:77:05:e7:31:b2:b9:48:f2:36:
77:3c:38:5a:21:5d:27:3d:db:b3:d5:a7:a0:de:0d:
82:c8:2d:81:50:d9:c7:3d:3b:61:14:a1:4a:ae:40:
da:9f:4f:92:62:30:e0:0f:88:21:71:61:b4:c8:a0:
a2:c3:94:e9:89:7d:dd:dc:8e:21:9c:7d:fd:66:33:
4f:d6:62:39:f9:de:a1:5e:ec:ca:d4:fd:59:0d:3a:
ce:40:51:a5:21:c1:11:27:0f:64:21:a3:46:83:47:
70:be:a8:08:d5:65:58:93:43:23:24:12:c7:8d:70:
8a:aa:3c:63:c7:3c:f9:4b:06:3e:a1:1a:3e:3b:97:
30:55:29:14:e9:f7:b7:92:f9:28:96:68:bd:54:a2:
99:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EF:DE:A0:AC:71:B1:9A:39:3D:66:71:A8:78:09:0E:A7:C0:D4:B4
X509v3 Authority Key Identifier:
keyid:C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1b:69:b9:74:77:7e:a9:56:cd:7e:cc:3b:bf:30:4e:d6:20:
28:07:5d:33:22:d9:31:51:53:2b:ee:79:13:86:06:cd:df:ac:
d1:54:c3:f7:69:dc:62:7f:52:c9:32:e1:63:4f:3a:c3:a2:5f:
f2:e0:91:f6:4e:01:15:35:45:2c:ff:be:b5:7e:7c:7f:21:a0:
1f:39:23:68:5c:76:03:9d:7f:9f:7d:6e:06:a0:2c:34:39:15:
f7:a1:38:09:13:fa:1c:87:0e:77:85:30:62:32:86:8a:e4:e6:
cd:65:9c:95:2b:b0:38:15:28:48:bd:15:f4:ee:27:7d:c0:6d:
41:fd:ee:d9:3a:59:b8:ce:72:46:b9:79:de:d4:d5:65:6f:be:
a5:72:75:9c:9c:81:64:3d:af:20:53:42:42:8c:b3:f5:66:cb:
94:2d:89:47:41:14:61:fc:35:46:05:6a:81:b0:9f:7c:cb:c7:
de:9a:85:19:93:6c:3e:90:3e:54:c0:46:21:b8:52:8f:32:8a:
20:c8:43:c6:c6:89:b7:cb:41:ed:98:d4:44:82:88:3e:dd:37:
6b:24:c9:08:cc:ca:ff:b4:f5:8b:92:3d:b6:f7:1d:a8:21:53:
37:ee:bc:d1:0d:d5:24:d3:80:bc:d5:71:45:0b:75:f6:72:48:
2b:1f:9d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:51 2025 by rpki-client on console-fra.rpki-client.org