Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft
File: 5EV2NuWtZuHw-7LBDfKQleY-mS8.mft (raw, json)
Hash identifier: 76kmtranI9imVbAo2pvJ6z2jHYRgTLXZ+6do/7S2Oco=
Subject key identifier: 70:BB:3B:EB:F0:7B:B1:1C:16:1C:05:D6:29:AF:90:E0:36:25:77:B0
Authority key identifier: E4:45:76:36:E5:AD:66:E1:F0:FB:B2:C1:0D:F2:90:95:E6:3E:99:2F
Certificate issuer: /CN=e4457636e5ad66e1f0fbb2c10df29095e63e992f
Certificate serial: 01951210C1D09D8E1E983E5FD8ACA58BAB40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5EV2NuWtZuHw-7LBDfKQleY-mS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft
Manifest number: 0DDC
Signing time: Mon 17 Feb 2025 04:00:42 +0000
Manifest this update: Mon 17 Feb 2025 04:00:42 +0000
Manifest next update: Tue 18 Feb 2025 04:00:42 +0000
Files and hashes: 1: 5EV2NuWtZuHw-7LBDfKQleY-mS8.crl (hash: uLxsrHh/hqN2WE1aaA1LNErRV9Vrqt5W5+w++Dcxe48=)
2: 7dpbzZX7eYfnBG7vQSonxLufldI.roa (hash: MAdnQYRbZ0ATJEdytmIxDRxyJPZ/GK0bSNF0Uiu38tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5EV2NuWtZuHw-7LBDfKQleY-mS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:c1:d0:9d:8e:1e:98:3e:5f:d8:ac:a5:8b:ab:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4457636e5ad66e1f0fbb2c10df29095e63e992f
Validity
Not Before: Feb 17 04:00:42 2025 GMT
Not After : Feb 18 04:00:42 2025 GMT
Subject: CN=70bb3bebf07bb11c161c05d629af90e0362577b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:87:e3:d8:df:2c:c0:9c:1f:4d:93:66:22:1d:
7e:13:88:e6:1d:99:72:80:85:72:c2:94:0f:8b:0c:
2e:b3:a4:5b:12:73:66:1e:10:6b:76:c5:3a:75:a6:
be:49:84:33:0c:0b:5b:2a:d6:91:29:8b:d9:ac:65:
a3:8b:14:2e:7f:59:8e:30:3a:a8:2a:62:e1:53:50:
ad:f7:bc:6c:96:1d:c3:33:e4:5c:84:85:fe:ec:2c:
d0:84:29:4c:a4:eb:c2:de:77:5e:fe:50:48:0b:55:
65:04:72:48:3f:79:c7:fb:a2:70:21:ae:3a:0f:27:
bc:d7:f0:76:9b:64:fd:00:03:64:94:9a:0c:1f:68:
8a:42:50:6b:7d:d7:d9:f3:c5:b4:43:a1:79:64:14:
27:36:e2:8a:94:1b:da:35:a7:82:b1:6f:a7:da:3c:
7e:70:d2:5d:9b:fa:00:39:ec:c5:14:70:95:6d:7c:
be:49:7f:58:a1:1d:4e:6d:7f:22:a5:df:c6:2e:29:
b8:aa:9a:89:ad:54:8d:19:86:87:cf:a5:3b:b9:75:
13:72:a3:ef:75:b8:bd:a4:2a:b5:8c:e8:a6:e1:fc:
02:55:ef:90:d3:72:37:72:43:cb:c5:6e:8b:c9:65:
06:3e:26:94:fe:c5:f2:a1:3e:b1:e6:87:9c:83:b8:
d8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BB:3B:EB:F0:7B:B1:1C:16:1C:05:D6:29:AF:90:E0:36:25:77:B0
X509v3 Authority Key Identifier:
keyid:E4:45:76:36:E5:AD:66:E1:F0:FB:B2:C1:0D:F2:90:95:E6:3E:99:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EV2NuWtZuHw-7LBDfKQleY-mS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:2f:f3:55:5c:d0:65:1d:43:c7:41:f5:10:50:85:c1:c2:04:
f6:ad:8a:cc:9b:26:95:16:62:18:7e:0a:c8:b8:77:1d:2d:87:
51:ed:1b:30:11:5b:03:df:1e:60:71:f2:70:70:ed:08:6e:bc:
75:ae:0a:82:a3:4a:68:16:8a:ed:c0:03:f0:7e:00:ee:09:05:
05:00:4a:ad:a4:21:b2:55:51:a0:67:b4:db:46:db:2e:8a:36:
2e:3d:05:47:9c:32:67:d5:9c:1d:aa:ce:84:4f:35:24:50:a5:
4c:e3:2d:40:98:15:b2:d6:c1:c5:08:92:6b:1b:ec:ad:74:14:
98:56:6c:9a:76:57:59:c8:12:5b:c9:8a:69:ec:42:cc:de:6a:
64:a6:36:52:6b:61:ec:db:ed:10:61:89:56:2b:90:35:0c:27:
6a:af:70:8e:7a:3a:29:b0:2b:5c:c1:6c:9c:e4:77:6b:63:e4:
7c:2d:cd:85:8b:48:b8:15:ca:54:aa:3d:54:f5:84:0d:4a:2d:
d2:30:89:20:0e:9c:81:8d:26:e6:3c:21:f0:b3:d4:2e:5b:c2:
18:39:74:c0:d8:e7:3e:61:82:1e:83:1c:46:5f:6b:59:69:be:
4e:b9:fe:fc:e6:66:85:33:81:98:07:22:c0:3a:d1:2e:2d:79:
75:43:77:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:17 2025 by rpki-client