Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
File: 5z_jNRpeYmSh-BKcECUdnolugGI.mft (raw, json)
Hash identifier: BUYOOiSdlgsIy4wYBzazPFtymDxoQULrtC/duLyY4i8=
Subject key identifier: B4:98:1F:C8:41:64:EA:8D:68:A1:B2:50:8C:73:54:86:92:EB:CC:39
Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
Certificate issuer: /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Certificate serial: 0195116BC901B849CB2BBDDA9BCD3416D78E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
Manifest number: 1452
Signing time: Mon 17 Feb 2025 01:00:31 +0000
Manifest this update: Mon 17 Feb 2025 01:00:31 +0000
Manifest next update: Tue 18 Feb 2025 01:00:31 +0000
Files and hashes: 1: 5z_jNRpeYmSh-BKcECUdnolugGI.crl (hash: DIRMJrPmq/qrNogLRZ5AP3+PxHm9FB1eq53M4gdzNP8=)
2: mjZQqpBxq3tzElUxwYWj6w8CYqw.roa (hash: xWY5CwFTzA7VILUdMDaL5WQ8VyRltqo8AcwsKQ6Bk2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:c9:01:b8:49:cb:2b:bd:da:9b:cd:34:16:d7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Validity
Not Before: Feb 17 01:00:31 2025 GMT
Not After : Feb 18 01:00:31 2025 GMT
Subject: CN=b4981fc84164ea8d68a1b2508c73548692ebcc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:55:11:36:94:8b:39:34:ca:3f:a5:53:a6:b6:
dd:6e:df:61:7e:60:e1:ce:eb:d0:0a:3e:b2:d2:ad:
7f:6b:3d:72:68:97:61:1c:af:bb:39:56:c1:be:49:
09:70:91:12:25:f4:be:89:1e:93:80:88:28:9a:76:
e1:03:cf:4b:70:ca:88:70:ac:c1:3a:08:d8:da:09:
47:78:a8:a7:07:de:40:a0:5e:e8:74:11:dd:08:e4:
5a:87:92:6e:d1:33:cb:74:45:b4:06:13:e5:a7:77:
0d:0f:6c:ce:f5:9d:27:86:10:f0:bc:58:8a:80:2c:
53:f8:b0:f2:42:fc:65:b1:14:93:80:6a:40:ea:da:
c6:3f:57:07:ce:f1:98:7d:f5:a6:f8:4b:23:e3:03:
8e:d2:12:b3:a9:75:09:94:69:22:ce:bb:a7:f8:11:
9c:d1:65:d4:23:d5:49:e0:cb:71:0b:0a:e0:00:3f:
ee:be:a3:44:12:a1:2a:a6:7d:57:f2:73:97:93:b8:
b5:74:3b:79:bb:44:16:85:54:7d:ce:02:45:10:a9:
cc:2a:79:b8:26:e9:1d:77:50:b2:2f:14:99:2f:29:
64:c1:58:45:35:da:5d:10:57:eb:53:9b:15:2c:f9:
02:86:97:4f:75:ec:cf:fb:f7:66:58:89:99:93:12:
2b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:98:1F:C8:41:64:EA:8D:68:A1:B2:50:8C:73:54:86:92:EB:CC:39
X509v3 Authority Key Identifier:
keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:66:70:41:9e:ca:e5:8d:97:ec:4f:d2:25:49:91:63:eb:8b:
d1:fb:7a:c3:68:49:95:b3:bf:dc:ac:d2:73:45:cf:83:43:db:
16:46:67:da:5c:d1:02:dc:da:2d:d5:cd:06:8a:a4:b7:1f:a3:
df:e2:d9:38:a5:e8:20:4b:3f:22:b5:00:36:b7:ea:78:6e:8f:
3c:03:2d:25:0f:d1:83:be:0f:ed:d2:e1:56:a9:12:cb:33:7f:
f8:6c:97:43:4f:1f:7b:70:c6:2b:3c:5a:23:7c:63:66:51:39:
bc:f5:18:c5:b7:7e:f1:25:ab:80:d3:79:50:d2:3f:08:bc:b3:
2f:30:24:f7:67:26:01:99:ff:12:cb:85:01:0d:90:c5:6e:c0:
36:f9:91:3c:e0:a2:cc:5e:e8:f2:21:ad:0d:98:0a:ce:04:bb:
22:6b:53:0d:e5:d7:cf:bf:ba:bc:9f:d7:fe:a9:72:f7:96:4d:
fc:47:e5:7d:cf:ed:5d:d8:ca:02:00:e8:83:c8:dd:68:d6:fa:
e2:1b:a5:ad:c2:2b:34:81:be:e9:dd:d4:e0:27:f0:31:0c:14:
ac:4c:ad:f9:95:2c:3e:ca:dc:bd:d7:39:1b:1c:e5:9c:3c:00:
7d:dc:c4:aa:a3:81:e9:29:cf:1a:9b:75:c5:55:8a:67:24:94:
8a:a1:5a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:22 2025 by rpki-client