Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
File: 5dJyqNwEH1rcer0A1k0_MsIE2rI.mft (raw, json)
Hash identifier: ncIS/VDW0/vaLhgYnr99bx+A7UrTjRtpQ8qEnsaLlQw=
Subject key identifier: 08:42:29:CB:25:AB:F4:95:5A:DB:D4:E8:D5:A7:1E:26:3F:99:A4:A8
Authority key identifier: E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
Certificate issuer: /CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Certificate serial: 01950F7D8F08FF0141B3793FF75946856E47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
Manifest number: 0B0F
Signing time: Sun 16 Feb 2025 16:00:41 +0000
Manifest this update: Sun 16 Feb 2025 16:00:41 +0000
Manifest next update: Mon 17 Feb 2025 16:00:41 +0000
Files and hashes: 1: 5dJyqNwEH1rcer0A1k0_MsIE2rI.crl (hash: +6Qy7GVkQjP40LljHVhtHHfyTm9Hv/goVmMmJ8BkqHs=)
2: BSxB6YJq2jQPtYNgk4RjDz0LLwo.roa (hash: 0H0jQmEDdYcS0G88hDG7z0fv29sDbdsIXn2r0lKdjdI=)
3: DOxLN4SU2YKVe0VPHjqcaGZlpe0.roa (hash: SrolEIibncQUXL/HWDj/0Ei9nEoCbSOrTFYN2mtGMDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0f:7d:8f:08:ff:01:41:b3:79:3f:f7:59:46:85:6e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Validity
Not Before: Feb 16 16:00:41 2025 GMT
Not After : Feb 17 16:00:41 2025 GMT
Subject: CN=084229cb25abf4955adbd4e8d5a71e263f99a4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ac:3c:89:85:0a:c7:72:00:1a:25:69:86:fe:
5a:cf:82:54:00:84:ae:84:3c:a2:1e:16:53:99:e2:
38:76:ad:00:ed:36:aa:95:e6:9f:b8:06:cb:df:f8:
3c:2c:93:35:ce:45:e9:3b:3a:67:bb:e1:74:f3:dd:
a4:6e:47:64:11:a4:c0:df:aa:3e:97:e4:44:3f:0b:
bf:7c:62:8c:a9:d4:c8:dc:e3:f1:d1:07:3c:61:8a:
08:49:5f:0d:7a:13:a1:e9:d4:0e:ce:f9:e4:3f:47:
d8:26:a6:f5:8c:38:54:13:39:69:16:83:97:ee:48:
8e:8e:61:a7:47:43:d7:b1:a2:f2:fe:18:33:f5:13:
9b:78:ad:ba:38:10:4b:e8:0f:51:85:64:77:bd:18:
48:4c:d1:93:98:6c:ee:b0:56:52:8b:35:89:98:61:
11:03:2d:72:35:d2:8b:bf:ba:f5:cb:50:9b:46:c1:
ee:c5:3f:15:69:e8:bc:c1:9d:d9:cc:22:24:1e:b2:
df:f5:c3:d2:08:3d:6f:87:8b:ae:fa:bc:c9:25:d5:
bf:b0:88:8e:d3:39:3f:11:e6:16:7a:41:0e:41:9c:
dc:12:21:2c:43:86:d5:61:70:89:5c:00:13:eb:f7:
07:7a:a8:29:9c:79:a6:f6:7d:98:01:86:d5:ed:45:
4c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:42:29:CB:25:AB:F4:95:5A:DB:D4:E8:D5:A7:1E:26:3F:99:A4:A8
X509v3 Authority Key Identifier:
keyid:E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:70:79:cf:94:6d:0b:7b:d1:79:35:cb:b6:b8:38:da:0c:57:
a8:0b:f3:27:0a:cd:fe:5d:0e:40:e2:ce:03:20:9d:5a:b5:4f:
28:29:3b:c6:16:73:69:8c:2c:e0:26:0f:11:b4:c8:d8:e3:85:
61:c0:06:a3:b9:1b:90:4f:b4:c3:18:e4:24:13:e9:57:e9:e2:
b7:8e:8b:38:cb:31:88:5e:7d:ca:11:d9:9e:2b:2e:6e:e0:63:
ee:be:62:68:41:58:f6:07:08:57:e1:84:ba:55:d1:5e:bc:65:
92:db:0c:aa:fe:e9:05:a8:b5:1a:ac:00:b3:e1:d9:26:20:59:
aa:56:81:3a:77:39:55:9c:18:40:d2:34:ae:5b:5f:56:8e:7f:
7f:e3:f0:c9:bb:98:db:7d:cc:b9:ae:ae:f6:4a:13:42:2e:ab:
5b:d7:f7:7f:f8:0f:c2:2c:42:8c:45:99:98:0d:d3:38:fc:6c:
23:8c:48:91:03:6a:2a:d2:0c:d5:2a:63:f6:0d:68:4e:2a:85:
b2:5b:a9:9c:6f:19:ed:c0:82:1d:c3:eb:aa:95:43:ab:b5:3c:
11:f5:52:47:39:2e:3c:ab:e3:c2:82:24:f8:c5:d9:e5:03:e1:
86:ef:7e:be:2e:7a:0f:d2:d2:83:58:c8:a3:cc:11:ee:c9:e1:
d4:3c:57:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:12 2025 by rpki-client