Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
File: Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft (raw, json)
Hash identifier: u1EroFGhBEdzYe3eGXxEXAHrhVhZeWhgIQTvQCYMNZ8=
Subject key identifier: 15:3A:7E:2A:C6:1F:59:91:66:9E:F4:9E:16:21:41:1D:A6:0F:8A:83
Authority key identifier: 5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C
Certificate issuer: /CN=5e79acd4ee40fda43022a2c9642b071da649526c
Certificate serial: 0194BA849213C2CE87657739D767F4DC181D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
Manifest number: 0C5A
Signing time: Fri 31 Jan 2025 04:00:37 +0000
Manifest this update: Fri 31 Jan 2025 04:00:37 +0000
Manifest next update: Sat 01 Feb 2025 04:00:37 +0000
Files and hashes: 1: Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl (hash: wu59lGYVmwhUahsMXzmuWATCRofSbtKPR7R5TKsI49k=)
2: rCcV6Zewu1Z9eZJuSlVmU21XPSI.roa (hash: faeDhvfDA6I7kGgODqOk5x1S+G4V8KqFh6Vs8sDfnGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:92:13:c2:ce:87:65:77:39:d7:67:f4:dc:18:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e79acd4ee40fda43022a2c9642b071da649526c
Validity
Not Before: Jan 31 04:00:37 2025 GMT
Not After : Feb 1 04:00:37 2025 GMT
Subject: CN=153a7e2ac61f5991669ef49e1621411da60f8a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:61:7b:0f:af:a8:ab:b3:80:0a:66:b9:22:
3c:dc:b1:a9:3c:9a:b4:2a:03:2a:55:a9:29:96:8b:
a6:16:fd:7d:fc:34:13:00:24:df:ae:78:a5:bd:74:
cb:8a:ed:ba:40:95:9c:bf:e1:43:26:03:c5:f1:26:
6d:23:6f:9c:32:2b:8c:89:4e:77:d3:11:e4:f8:b0:
f5:64:3d:0f:0e:e5:2f:e1:d3:07:0d:a5:5f:db:b2:
ae:c9:a7:78:d1:78:35:f4:19:8f:be:f1:98:76:c1:
47:7e:44:e2:7d:71:9f:30:78:5b:17:a9:93:6a:58:
c2:6d:0e:09:6f:5b:a4:8f:a5:4a:88:e0:f4:69:b3:
9f:e4:27:6c:0a:8b:a3:6e:a9:0e:37:74:fa:d8:aa:
34:ba:65:4f:b3:13:5e:a4:dd:30:2b:e0:d1:96:5b:
7b:7e:0a:f6:02:cf:f0:60:31:a5:46:e0:c2:7b:29:
c9:2f:5f:b1:a3:0c:cc:4c:7b:0a:09:88:02:f3:f4:
5b:98:a6:96:57:6f:d6:a2:71:ec:23:38:37:f6:2b:
fc:a1:35:6b:90:cc:38:eb:35:49:b3:ec:65:ca:32:
02:de:27:e5:c1:07:5a:a9:e0:cc:c6:b3:e4:06:f7:
79:90:6a:a2:cc:d1:79:a3:96:7d:0c:b6:9e:47:f7:
c8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3A:7E:2A:C6:1F:59:91:66:9E:F4:9E:16:21:41:1D:A6:0F:8A:83
X509v3 Authority Key Identifier:
keyid:5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d3:00:78:89:cb:c9:86:00:77:9e:bc:3f:ef:0b:ab:17:73:
e6:57:40:9f:44:2c:83:33:64:32:81:b9:44:28:e7:f8:bc:52:
7b:74:01:71:73:41:b5:5c:1b:67:be:b2:cc:77:0b:d7:27:3f:
11:36:8f:54:9f:bd:20:6f:09:55:ad:5a:e6:ee:65:88:bd:2f:
cc:d2:f7:06:ba:85:85:5e:db:15:ea:b4:9d:ca:07:7f:d9:18:
9d:01:2e:c5:1f:82:ab:2b:e1:b6:d4:4a:cc:2d:dd:55:43:15:
bb:f1:f6:0a:92:61:c5:f6:a6:73:d9:87:04:c3:33:4d:84:15:
7f:33:82:91:fc:87:61:67:da:1e:2c:12:09:f6:dc:c2:8c:de:
0f:ea:7d:02:23:9c:e8:d3:d6:47:1d:2d:f7:9b:e6:79:1b:d4:
65:ee:37:06:c1:94:74:3d:c0:3b:6a:c0:2a:4b:73:4d:be:b4:
b0:90:a8:d4:c1:28:de:82:08:e8:8b:cc:7f:c8:36:7d:ba:8c:
da:41:ed:1a:32:32:fc:b2:fb:b4:bc:2d:57:d9:0c:0e:6e:30:
40:b9:62:27:2c:48:33:a2:35:97:99:bb:05:e3:69:8a:f0:a4:
ca:52:66:70:09:a7:f2:e2:b1:6d:33:fe:b0:a0:da:50:cf:0a:
5a:c9:00:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:47 2025 by rpki-client on console-fra.rpki-client.org