Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
File: _xukAAfM3NCTDxor3EsC4plFdno.mft (raw, json)
Hash identifier: IuWjKVxDmiPwY/wH3fQwaQTDb7KxVwR4ROzSW131lIQ=
Subject key identifier: 60:3B:C5:ED:28:39:09:4F:2E:07:B3:C5:B2:FD:75:4C:03:16:43:24
Authority key identifier: FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
Certificate issuer: /CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Certificate serial: 0194BB2924B7866415EF93A660500CE1E4E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 07:00:23 +0000
Manifest this update: Fri 31 Jan 2025 07:00:23 +0000
Manifest next update: Sat 01 Feb 2025 07:00:23 +0000
Files and hashes: 1: _xukAAfM3NCTDxor3EsC4plFdno.crl (hash: Rsp6R/CJyNkuVafm++SsiYCVwWHUyCYtfB39sJK/NpI=)
2: hmvS4nDPTxWW6kYfDbr8j0yfqsA.roa (hash: lNR9K/eeK5h6bqGDhHsX+aTIDMdTknqLa5mK45GIX18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:24:b7:86:64:15:ef:93:a6:60:50:0c:e1:e4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Validity
Not Before: Jan 31 07:00:23 2025 GMT
Not After : Feb 1 07:00:23 2025 GMT
Subject: CN=603bc5ed2839094f2e07b3c5b2fd754c03164324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cc:e1:d5:7c:f3:e1:5b:1c:96:69:ea:1a:a1:
a9:bb:50:a8:3a:08:60:fa:af:a6:0d:1e:8f:0d:e0:
c7:fd:04:f3:75:92:32:a8:15:b9:a7:30:09:eb:ef:
a3:8c:11:9b:8f:81:eb:86:0a:06:ae:70:d1:0d:81:
4c:e2:b0:be:90:8d:2d:4b:72:78:8c:c9:8d:42:79:
20:f5:f9:69:f0:93:86:8a:4e:2d:c4:7b:53:82:6e:
4c:8f:13:73:f9:9c:eb:79:c7:3e:c9:e1:a8:82:09:
a0:46:42:39:ba:16:c4:97:7d:9c:0f:4e:9b:b0:37:
b5:85:48:2f:fb:75:e6:87:bc:10:99:55:ad:15:f5:
5a:b3:60:e6:45:64:f7:e4:04:1d:e9:ac:fc:9c:16:
76:d5:e0:ce:12:81:24:3e:c2:52:0b:a6:95:ab:df:
94:8c:6b:8b:84:ee:e3:5f:70:1e:c5:2f:98:b3:5e:
6e:15:a1:fd:fb:e3:e3:f9:42:14:99:3e:d5:75:1e:
f3:ec:42:a0:2a:b9:03:aa:3e:ec:66:8b:b4:8c:3a:
9e:bf:97:bb:37:3b:e6:fa:ea:49:07:cf:5f:3e:6b:
5e:76:de:12:68:9d:3b:6e:5b:b8:20:86:02:58:55:
2c:e7:26:8c:da:ef:d0:29:ae:2f:10:a8:04:f1:32:
25:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3B:C5:ED:28:39:09:4F:2E:07:B3:C5:B2:FD:75:4C:03:16:43:24
X509v3 Authority Key Identifier:
keyid:FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:6b:9b:83:73:32:b5:88:de:b1:1a:68:3c:4b:3f:7a:9d:04:
2b:ec:1c:3d:ba:e7:d5:eb:2b:45:a0:18:c3:e9:20:1f:8e:dd:
93:fb:f9:76:e7:49:ad:b3:32:7b:45:5f:e2:14:eb:af:a7:9a:
50:67:f9:c9:b9:6e:27:ab:54:8f:19:b1:4b:a2:4f:53:75:11:
3d:7b:c6:2d:06:a7:20:30:a7:87:f2:f7:ab:d9:90:50:d8:17:
e4:8a:d7:c9:e1:26:e4:e3:28:36:4a:54:67:6c:3a:e0:42:1b:
5b:21:20:d0:94:91:50:dc:33:05:fb:72:65:bb:b2:80:a4:e0:
f7:2f:13:3d:e5:0e:ac:b7:81:b3:f1:4b:79:6f:7b:0a:29:87:
a9:6c:e5:f0:0b:fc:d0:be:ce:06:35:64:42:87:2f:e9:b2:24:
91:a1:b6:35:f1:11:65:1e:c6:2e:b0:44:f8:31:52:d0:35:82:
14:ad:7c:15:b5:41:6d:8d:6a:af:fc:98:c6:10:bc:53:20:8a:
28:1d:16:cf:98:87:47:df:33:6b:c7:89:b2:cd:dc:a2:85:0d:
d7:b5:7f:52:5a:fa:76:d2:02:d7:63:87:bc:f1:1c:49:69:8a:
7d:4a:12:ab:e0:cf:f2:c8:e3:7b:2f:f8:c2:75:73:8c:76:c4:
3a:15:98:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:39 2025 by rpki-client on console-fra.rpki-client.org