Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
File: 5mNquBo0Op_9glfqyx3exTiWaAQ.mft (raw, json)
Hash identifier: T8dSAyGwmXX8Gh8ndes4fHzORRD53YaJiOdG7D/Kumg=
Subject key identifier: 10:6F:19:97:23:CA:D1:0A:FC:5A:69:FC:6F:C9:97:39:27:BD:07:98
Authority key identifier: E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
Certificate issuer: /CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Certificate serial: 0194BAF23A335A0C14C6BC9879F69150BDDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
Manifest number: 0EAE
Signing time: Fri 31 Jan 2025 06:00:24 +0000
Manifest this update: Fri 31 Jan 2025 06:00:24 +0000
Manifest next update: Sat 01 Feb 2025 06:00:24 +0000
Files and hashes: 1: 5mNquBo0Op_9glfqyx3exTiWaAQ.crl (hash: a4vK8aRDrA6lMagOtRSlYuBHRD8pcfNL10s1sKjumwU=)
2: qBH3YGMaFK7YFVrKhQ5pFdeSVI0.roa (hash: 0gWn80uN/F/B7m+caBdi8E0X9ChrpKW2B3Hw8j3IN30=)
3: vMTodOq6xsRuVpjojWIKyaTkK_Y.roa (hash: wkJrOUu2B+xH8ypfmdsSGQvJ0AuehbonV39UjaZS0FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:3a:33:5a:0c:14:c6:bc:98:79:f6:91:50:bd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Validity
Not Before: Jan 31 06:00:24 2025 GMT
Not After : Feb 1 06:00:24 2025 GMT
Subject: CN=106f199723cad10afc5a69fc6fc9973927bd0798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:57:49:d1:06:d8:91:df:e9:0e:36:1e:ad:
43:6c:96:1d:a8:08:62:88:f1:99:df:f7:a6:9e:93:
16:60:06:55:50:96:ad:f6:30:32:96:44:48:f7:27:
c6:e9:58:d2:81:8f:5e:d0:56:18:ba:17:86:e4:3c:
12:bd:09:09:2d:b4:21:2c:bb:f0:f0:7f:be:a5:44:
c2:0e:6b:a1:da:a0:e5:b4:37:40:ae:59:5e:fa:64:
3f:e1:55:d2:c2:01:f7:fc:b7:c8:e8:75:d1:e1:39:
57:60:c4:c9:1d:78:63:e2:67:9d:9a:a5:86:5c:59:
68:90:99:d4:16:7f:62:37:7d:c5:f2:d9:a8:85:d3:
c3:0c:1b:1d:cf:ce:77:69:cd:a5:c1:fb:8d:46:a6:
7e:c2:80:ef:bc:0e:e0:0c:c3:7c:21:fc:78:a9:a4:
0d:36:d5:73:83:d5:c6:3e:0c:6a:fa:f7:0e:cd:c9:
de:4a:53:f7:16:70:da:29:f3:b3:63:21:99:93:b3:
8e:7a:eb:7c:33:7d:3a:bf:cc:92:72:00:71:76:5d:
2a:c4:5e:bf:5e:eb:0e:ae:50:e9:32:11:30:59:d1:
16:e3:09:17:20:b7:15:53:a1:eb:bb:ff:cc:f6:c2:
0d:b3:34:e0:b7:8d:ba:31:c8:96:e8:28:c5:d2:cf:
84:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6F:19:97:23:CA:D1:0A:FC:5A:69:FC:6F:C9:97:39:27:BD:07:98
X509v3 Authority Key Identifier:
keyid:E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:37:fe:6e:17:9a:4e:2c:8e:a0:34:ed:1a:a1:53:0f:76:20:
f4:61:f1:58:9e:1c:09:c1:a1:10:fd:c6:c7:8c:50:ae:11:56:
b6:01:3c:1d:32:a9:e0:b0:4d:98:b3:e0:79:aa:d0:66:ae:59:
4a:d7:94:5e:8f:a9:16:66:f4:d0:2a:35:ec:92:3e:da:6d:1a:
02:8d:cd:1a:2e:91:ba:5c:f8:91:4c:df:5d:45:ae:c9:37:d6:
c7:17:57:ae:ee:85:dd:e7:34:8b:bc:64:8a:9c:dd:36:6a:e2:
de:7c:f3:f7:da:20:b7:8a:28:d1:bc:e2:6f:6c:a8:e2:2e:de:
64:57:11:84:53:95:49:df:c0:61:63:d2:ed:cd:fa:66:29:65:
db:84:52:38:b3:3a:c3:f5:24:52:34:d6:27:0c:af:04:ef:cb:
c4:8f:be:20:6b:f2:48:39:b8:d3:8e:18:1b:22:a9:66:85:b0:
0d:b7:79:a3:f3:83:20:ff:b5:af:22:4c:16:d7:55:ad:53:6d:
c8:00:11:c8:07:dd:7d:0f:99:d7:aa:f4:2a:95:6b:98:1b:e4:
96:1b:9c:7a:57:05:2c:f1:5d:06:39:a4:ea:fa:cd:5a:2e:11:
02:8b:70:ae:4a:60:8e:ee:fc:70:4e:4a:db:b1:7a:de:5f:23:
1f:4f:2d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:48 2025 by rpki-client on console-fra.rpki-client.org