Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
File: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft (raw, json)
Hash identifier: Ml6qR/SuTUyUy+2rnLRGbsZAXDzx99uN1AL4pe6amFE=
Subject key identifier: EA:1D:5E:E9:2F:AA:C6:5D:5B:AF:56:DA:8A:CF:54:C1:60:53:C7:F0
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Certificate issuer: /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial: 0194BAF25C8E95626FA465478B18D43B6CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 06:00:33 +0000
Manifest this update: Fri 31 Jan 2025 06:00:33 +0000
Manifest next update: Sat 01 Feb 2025 06:00:33 +0000
Files and hashes: 1: 3cpoDZVsvW-d4pgtfjxgApATZ7Y.roa (hash: xAPK20pv8js5ddYc90CC85IhpMi19I8Q/fSeN00Op6M=)
2: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl (hash: LQpobLFCAwre6H7i4LWGaVT6I50L+wv+gasMhurCjRw=)
3: 9Np_qqUHNhRugA_1xB2ZI6GkPRc.roa (hash: VZhCCAUVQwLPClsCIIsWXL6uNJYCuqsQS18/K+wYTxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:5c:8e:95:62:6f:a4:65:47:8b:18:d4:3b:6c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
Validity
Not Before: Jan 31 06:00:33 2025 GMT
Not After : Feb 1 06:00:33 2025 GMT
Subject: CN=ea1d5ee92faac65d5baf56da8acf54c16053c7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9b:dd:16:02:9e:e6:04:6d:b7:c5:b5:ca:e5:
a4:c2:20:09:16:4a:0b:7e:e3:bd:e1:1a:5a:d6:83:
72:c6:de:d5:13:97:40:0f:f1:c9:f9:9b:5a:24:75:
5f:72:02:38:4f:35:00:b6:06:a7:12:00:f8:88:f9:
5c:5f:d7:a9:7e:fa:aa:8f:3f:73:14:0a:63:6e:5b:
30:a4:88:82:1f:89:fd:83:d0:6d:2d:7b:f4:c7:14:
80:25:22:1a:24:b5:d8:2c:02:85:8e:59:1b:3a:c4:
f3:c9:b9:38:f5:da:5c:57:5f:e2:59:c6:bb:07:a4:
e3:48:d5:61:fa:78:50:61:bf:a1:c4:fd:e4:73:9b:
4b:bd:f2:4f:4f:53:d1:15:f4:48:43:05:96:a6:be:
b9:a2:db:a1:71:77:94:05:ce:39:3f:44:7e:ed:23:
24:d0:07:3f:de:2d:73:9b:72:32:1a:78:97:b6:33:
42:50:92:ca:fd:4e:44:34:45:e6:95:4d:a5:06:b1:
48:b3:99:5c:64:32:fe:f3:e7:48:7f:20:d7:58:af:
2d:2c:c0:48:29:5d:6b:11:33:d9:2a:bc:71:1b:33:
b5:49:2d:54:f1:96:cb:07:a0:a5:3c:65:cf:0b:4f:
ce:1b:04:a3:c7:2c:8c:a7:bd:8d:51:9f:eb:dd:cb:
aa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1D:5E:E9:2F:AA:C6:5D:5B:AF:56:DA:8A:CF:54:C1:60:53:C7:F0
X509v3 Authority Key Identifier:
keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b2:d9:03:2e:3f:5f:3a:54:19:21:fe:2e:cc:2c:7e:48:f6:
27:21:d2:ba:6d:c6:ec:c7:35:f2:37:4f:f3:91:36:f5:91:d1:
62:98:57:a2:b9:08:81:71:51:4e:b3:53:69:b4:b3:bf:2b:2d:
7a:9a:07:83:d3:ec:a2:a6:85:fb:21:d2:16:c0:76:a9:f6:14:
29:6b:59:5e:1b:b2:f9:5a:5e:f1:3e:21:8a:cd:32:eb:c4:55:
14:88:3b:40:b2:f8:42:11:7c:67:e8:39:6e:b6:10:c1:47:ea:
45:7a:0f:ed:9b:6a:f2:83:df:42:fd:9f:21:74:a7:19:d5:05:
20:88:7e:a8:6f:06:eb:d0:de:d1:74:55:2c:e1:e7:4d:76:7d:
48:7e:23:92:71:e8:ef:31:5d:b6:81:4d:2f:d4:ae:0a:44:e2:
8c:a8:c8:ea:91:31:28:3e:84:a8:82:e9:39:70:f5:f1:10:ca:
44:4a:0a:d1:f7:fb:77:97:99:61:24:c1:9f:24:91:13:d7:37:
1e:16:70:05:fa:e2:9a:69:99:a4:89:94:69:44:1a:f8:dc:10:
8a:c1:c3:67:7e:d4:fb:18:b8:a9:23:63:2a:f1:e2:fe:cb:75:
b3:24:64:79:e9:00:f7:5a:a7:ee:9c:90:55:7e:38:82:e4:36:
c0:61:5a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:35 2025 by rpki-client on console-fra.rpki-client.org