Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
File: E5WjqPyN003W88lQxmH0shJxdaU.mft (raw, json)
Hash identifier: xpq8HnVSI06MQ9A4Gl8D2CsOLp3T4wqvURJssRyeNs8=
Subject key identifier: CA:E2:BC:5A:94:91:EE:1D:2D:B4:E6:E6:1E:DF:88:F8:A5:AB:90:96
Authority key identifier: 13:95:A3:A8:FC:8D:D3:4D:D6:F3:C9:50:C6:61:F4:B2:12:71:75:A5
Certificate issuer: /CN=1395a3a8fc8dd34dd6f3c950c661f4b2127175a5
Certificate serial: 0194BB6004C5E8786E7C7E8BA0080A05EA28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 08:00:19 +0000
Manifest this update: Fri 31 Jan 2025 08:00:19 +0000
Manifest next update: Sat 01 Feb 2025 08:00:19 +0000
Files and hashes: 1: 7WkSNMeKo3hgBONjdlWZ4xeGZtA.roa (hash: l6jtovWx9ge466onVKmeSTTNETL8X/SNcFUw3TEBnWE=)
2: E5WjqPyN003W88lQxmH0shJxdaU.crl (hash: HNJaV3b+JkaYa3OJXXzO+dhjVWndXMReuaPL/tzs0aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:04:c5:e8:78:6e:7c:7e:8b:a0:08:0a:05:ea:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1395a3a8fc8dd34dd6f3c950c661f4b2127175a5
Validity
Not Before: Jan 31 08:00:19 2025 GMT
Not After : Feb 1 08:00:19 2025 GMT
Subject: CN=cae2bc5a9491ee1d2db4e6e61edf88f8a5ab9096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:a9:7e:b3:cc:72:71:b9:8f:c1:cb:fd:b8:
f3:fc:88:97:8c:4f:4e:59:f5:47:1c:c9:d7:97:81:
ab:85:96:ab:ca:05:b3:8f:a7:8c:63:43:c3:3d:20:
6c:ce:e7:05:d7:a5:5d:1c:9e:a3:de:b6:a5:d7:73:
ff:c0:8f:57:39:6b:31:a8:2a:4e:b9:44:10:ac:19:
f7:f9:d2:5a:b7:0f:10:c5:f2:75:6a:7a:df:dc:37:
ee:f2:e0:e3:82:f4:e6:91:a8:3b:b2:6a:de:b3:9c:
18:4f:e2:3d:48:71:86:5a:bb:7a:4a:c5:c5:5e:57:
d3:23:2c:cf:e4:09:c1:6b:0b:c3:9d:ca:76:e6:d0:
53:88:9d:b5:56:02:00:e4:bd:e3:a5:b3:18:4f:ae:
09:29:fa:25:e9:89:e6:ed:6f:e7:9a:83:bd:a1:8f:
e7:9b:e1:27:b9:5e:31:3d:48:3d:78:8b:7b:d8:0e:
41:04:61:87:11:0b:a4:30:3c:eb:bb:32:10:09:a4:
db:f6:5a:cf:e5:a7:63:61:cf:25:36:d8:5a:6d:9a:
c9:a7:2e:07:d2:3b:64:f0:c8:33:fa:af:fc:65:bc:
37:4d:0d:6d:1c:18:3e:fc:8a:9c:72:ce:b7:f6:13:
01:69:9c:2e:99:08:be:20:a8:9f:31:ea:ac:1a:e4:
90:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E2:BC:5A:94:91:EE:1D:2D:B4:E6:E6:1E:DF:88:F8:A5:AB:90:96
X509v3 Authority Key Identifier:
keyid:13:95:A3:A8:FC:8D:D3:4D:D6:F3:C9:50:C6:61:F4:B2:12:71:75:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:94:16:65:12:8d:cd:a1:81:4a:67:3d:6a:d5:31:e3:7c:28:
9e:e3:ae:56:d8:36:2d:f9:29:3a:36:a1:d4:0b:06:07:77:39:
58:e8:9c:95:61:c0:9d:d0:9f:c2:3a:24:43:10:38:4c:31:f0:
b2:24:3a:16:7b:45:34:a0:46:ed:ae:10:41:79:38:aa:a7:d9:
92:5e:fd:78:a9:22:50:cd:b5:cf:05:7d:29:f9:ca:3d:7d:86:
50:ce:b3:6a:0e:ce:d5:19:3e:4e:a3:43:de:27:b8:db:f5:f7:
f6:1a:df:d0:18:50:38:bf:f2:b5:8f:56:c7:12:24:d6:57:54:
81:5e:bf:21:fa:0a:81:4d:a5:1d:44:7a:4f:84:5c:32:16:c4:
14:3a:83:c5:66:93:1c:c5:a5:d0:8b:7a:40:94:b5:5b:03:c5:
83:9c:7b:ae:c0:ab:b7:a3:fc:f2:cc:3e:5a:32:82:57:75:a0:
01:8f:37:8e:3d:f0:8b:d1:73:21:3d:4f:2f:e1:d7:1b:7d:36:
12:54:9c:6b:d1:22:0e:de:8d:18:2f:71:12:07:d3:f9:54:69:
f7:0a:83:eb:4a:a8:85:40:4d:62:e4:14:e5:ea:da:0b:eb:a4:
c4:ae:61:a3:5d:4e:d5:33:d4:08:d5:a8:ea:38:31:8a:84:96:
ac:49:e4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:44 2025 by rpki-client on console-fra.rpki-client.org