Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
File: l5FbqA0-1wRSRoFIinK-mR-mcNw.mft (raw, json)
Hash identifier: 5hIpP2nBVToQod19py/m/ByazwXweWPfKhrqy9v8Ky0=
Subject key identifier: 9E:FE:69:FA:C9:EC:DA:F8:3B:F2:FF:A7:28:4A:94:D4:A1:0D:D1:0A
Authority key identifier: 97:91:5B:A8:0D:3E:D7:04:52:46:81:48:8A:72:BE:99:1F:A6:70:DC
Certificate issuer: /CN=97915ba80d3ed704524681488a72be991fa670dc
Certificate serial: 0195116BB15D53F74CF1FAD9A80B59959F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5FbqA0-1wRSRoFIinK-mR-mcNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
Manifest number: 034A
Signing time: Mon 17 Feb 2025 01:00:25 +0000
Manifest this update: Mon 17 Feb 2025 01:00:25 +0000
Manifest next update: Tue 18 Feb 2025 01:00:25 +0000
Files and hashes: 1: l5FbqA0-1wRSRoFIinK-mR-mcNw.crl (hash: oKY3ICHEBUu25w/LNZKmkeW9cO0MqjSE0/E8Anrb9vY=)
2: qo2vOLLpvqAX5XPyfjQO2wLnHqA.roa (hash: ngupliw7DsEh4VFD2q0dSrJhCE7Y9aSPjgmNKBH+xq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5FbqA0-1wRSRoFIinK-mR-mcNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:b1:5d:53:f7:4c:f1:fa:d9:a8:0b:59:95:9f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97915ba80d3ed704524681488a72be991fa670dc
Validity
Not Before: Feb 17 01:00:25 2025 GMT
Not After : Feb 18 01:00:25 2025 GMT
Subject: CN=9efe69fac9ecdaf83bf2ffa7284a94d4a10dd10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:43:d1:83:d8:40:e2:86:ff:d2:75:04:2b:55:
c3:e7:7e:56:7f:c3:f4:ed:3c:8e:cd:59:d7:45:52:
e3:fc:b0:e9:1a:0a:f0:e6:a6:60:bf:ab:59:16:f8:
97:a2:db:0e:48:bc:79:d2:ff:1a:1a:cb:a0:e3:1f:
b6:fc:52:9f:a2:d3:34:c7:13:15:0c:f8:56:6b:31:
c5:29:20:6e:46:32:70:14:f5:f2:d4:23:a2:97:f4:
d9:e0:b6:c6:bb:fb:8a:89:d3:33:92:16:07:8e:d3:
b7:39:1c:ba:c3:7c:a2:8e:23:9f:a9:f9:7b:76:82:
15:fd:b8:6a:d1:6a:37:15:26:79:5e:47:de:9c:a6:
36:77:94:4b:d5:94:f5:22:91:57:5b:aa:ba:69:a2:
7c:33:2a:63:62:53:78:33:e2:f9:71:b1:68:30:cb:
39:1b:71:c3:5b:94:2c:58:e4:2a:ed:35:54:70:e5:
85:e3:22:c2:f9:90:c7:42:03:b8:9c:9a:5c:de:72:
b7:6d:57:a9:c8:ad:e7:87:5c:7b:92:6d:47:9e:67:
52:d7:58:37:d5:21:ad:e5:2d:a5:b4:a1:3e:b0:28:
53:df:da:76:18:81:21:5b:04:f7:17:a1:f6:5e:00:
b0:c7:ce:16:1c:ff:43:47:29:62:59:7a:e9:35:5b:
b3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FE:69:FA:C9:EC:DA:F8:3B:F2:FF:A7:28:4A:94:D4:A1:0D:D1:0A
X509v3 Authority Key Identifier:
keyid:97:91:5B:A8:0D:3E:D7:04:52:46:81:48:8A:72:BE:99:1F:A6:70:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5FbqA0-1wRSRoFIinK-mR-mcNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e7:33:71:dd:cc:79:62:f8:15:cb:53:bb:da:f5:b9:cd:d1:
12:94:41:d8:57:39:12:da:ed:ee:9b:30:24:5d:7d:27:61:67:
e4:77:fd:11:a5:99:d9:d4:49:b0:ac:32:02:d2:3e:4c:89:8a:
c8:97:e9:3d:71:fa:1f:ad:ec:b1:e4:32:54:1d:97:73:3b:78:
83:2b:b0:52:86:c8:6b:ec:9f:87:f8:3c:d2:ff:98:5d:5c:8b:
91:90:68:b2:80:52:1e:11:99:c4:2b:eb:36:77:7e:99:81:08:
da:9c:44:df:c1:c8:f0:b2:87:44:3d:bc:8f:e4:dc:ca:3f:d4:
19:cb:0f:49:48:d6:1d:6a:3c:05:70:d2:3b:4e:5f:74:86:91:
68:3a:dc:12:b7:65:f0:01:18:aa:26:78:f4:cd:4b:6b:25:16:
b2:31:b6:57:3e:d3:6a:20:9f:f7:87:f2:91:fc:9c:ce:b9:1e:
83:23:54:68:b8:61:df:bd:02:b6:20:b1:21:2f:c5:45:a9:35:
4b:6f:68:0e:60:e2:00:b9:3a:a0:d6:68:ec:66:52:12:7e:52:
9b:ae:25:70:c2:8f:a8:c8:ae:72:50:c5:c9:2d:fa:65:8e:e4:
26:7e:b4:7c:c4:bd:4a:7e:75:82:9a:6d:06:f4:e9:8f:6e:5f:
5a:5e:aa:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:48 2025 by rpki-client