Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
File: 5UTiZtTrnMfe0pLBKwaxynvOp3g.mft (raw, json)
Hash identifier: luYk3KUGBGxLYJ6UFiYTjmNLHaeCt/PJwdZVwaOu91I=
Subject key identifier: 72:CA:E4:38:A8:EE:33:45:90:6B:D6:22:36:69:8C:CE:CA:FD:83:4D
Authority key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
Certificate issuer: /CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Certificate serial: 019510C7BAE001D3F18885536D1E2D4BBB3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
Manifest number: 1458
Signing time: Sun 16 Feb 2025 22:01:19 +0000
Manifest this update: Sun 16 Feb 2025 22:01:19 +0000
Manifest next update: Mon 17 Feb 2025 22:01:19 +0000
Files and hashes: 1: 5UTiZtTrnMfe0pLBKwaxynvOp3g.crl (hash: na1wvB3s14y/LTRy7thl2hyRfrbJsT2zcIl848a4xDM=)
2: LeXJLi-TLu5NLRkSo2hJnEK9QDQ.roa (hash: 1KfkyTUePDTOuHMENqew1KmyeJrolI/GoAGN74JhXHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:ba:e0:01:d3:f1:88:85:53:6d:1e:2d:4b:bb:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Validity
Not Before: Feb 16 22:01:19 2025 GMT
Not After : Feb 17 22:01:19 2025 GMT
Subject: CN=72cae438a8ee3345906bd62236698ccecafd834d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:20:c3:b8:74:69:6b:14:c4:54:ad:07:d2:09:
84:07:a9:e7:5e:30:3b:8c:96:05:c1:54:9f:6a:a9:
07:48:22:12:d5:40:e0:43:57:49:89:a3:18:60:bc:
fc:4d:86:33:07:4f:81:41:b5:4f:9f:2d:23:9c:1d:
57:d0:4e:44:c4:32:78:12:56:a3:44:02:9c:d1:58:
0a:4c:7b:2f:6e:a0:4c:45:d4:d3:90:39:ec:63:0c:
29:ec:b7:7a:71:4b:e5:e6:36:ee:31:4b:8b:e6:b7:
ee:f5:a4:01:03:1d:8d:b7:db:9d:35:77:66:c5:ad:
a9:66:ad:a6:df:56:fd:12:c8:9b:94:f5:d2:a5:bc:
05:5a:6b:39:1c:f9:13:dd:eb:15:6a:e4:3a:c4:61:
6d:36:de:b8:94:1a:37:6e:5b:eb:9f:50:65:da:26:
7a:a5:8d:e5:eb:46:e2:6c:51:bb:32:ba:40:2d:7d:
cc:4b:21:55:f9:19:fb:21:f8:a1:1c:ce:23:f1:32:
5d:40:e7:b0:0a:15:4a:e5:82:a6:f1:2e:68:4c:4d:
fe:85:f2:ba:41:d0:e6:ab:56:84:47:c2:15:3d:46:
cc:11:70:a3:e3:8a:5e:5e:69:9f:30:a2:60:76:3d:
64:63:d7:08:c3:15:35:7d:24:60:1e:a7:74:8a:08:
aa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CA:E4:38:A8:EE:33:45:90:6B:D6:22:36:69:8C:CE:CA:FD:83:4D
X509v3 Authority Key Identifier:
keyid:E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b5:9f:c3:1e:73:7b:54:f2:f9:32:ae:e0:e7:d2:5b:94:f9:
49:13:d8:49:ed:d4:e4:88:c4:53:17:63:08:2f:1c:3b:25:e2:
61:ac:91:21:dc:90:ee:7c:5a:14:d6:53:76:20:6b:5f:24:58:
50:ab:b3:c0:21:35:54:28:39:69:ad:74:92:e4:e1:56:f3:2a:
d1:0c:eb:d3:65:43:a1:24:62:63:a0:b8:0c:d3:99:2f:4e:0f:
3f:6d:bc:37:aa:5c:66:2f:44:82:ea:8d:01:9b:87:84:6c:87:
36:6f:75:e3:af:e1:84:f0:a8:08:0e:a8:2f:ec:b6:37:ef:87:
56:a7:fc:df:4c:5a:1c:dc:ac:53:fe:38:80:9d:44:4a:7f:ef:
cd:cd:81:b4:b2:1e:8c:69:33:fb:63:6a:16:18:ce:16:d5:dc:
7f:70:1b:a7:b0:7f:8f:2b:13:4e:ab:f8:c3:ab:f4:f7:29:ef:
9f:0a:74:ce:d3:ec:58:28:07:71:64:86:27:dc:56:c3:a0:7e:
5c:3f:46:a5:07:a0:54:a7:a5:52:67:7c:3f:90:98:5d:b4:78:
90:92:b4:9f:23:e7:e7:5e:89:39:b7:b6:bc:8c:1b:e4:9c:c4:
55:36:c9:ab:d4:9e:2e:15:e1:94:93:c3:9f:41:10:ac:0a:02:
a2:e3:0f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:47 2025 by rpki-client