Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
File: 5Q5mktlyjagfXE9J4VB3Phr7yAs.mft (raw, json)
Hash identifier: Gwhan0TIOyiO9BPclBkMKQOBxugrGjUX8H12Tu8f/wc=
Subject key identifier: ED:63:C4:D3:E6:E9:59:A3:2A:D8:A2:D4:CA:7D:6E:8D:4E:19:9E:1D
Authority key identifier: E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
Certificate issuer: /CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Certificate serial: 0194BABB36E06748E04FF04BEB6CC3DECF01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
Manifest number: 0C47
Signing time: Fri 31 Jan 2025 05:00:18 +0000
Manifest this update: Fri 31 Jan 2025 05:00:18 +0000
Manifest next update: Sat 01 Feb 2025 05:00:18 +0000
Files and hashes: 1: 5Q5mktlyjagfXE9J4VB3Phr7yAs.crl (hash: cyRFn3Ccc9EQqMNxhQhH5cjiTmTqQ+ov7800h/u7PBs=)
2: h1D7CnT2PY1NPObHiR4r21lOKxw.roa (hash: FFNEtoxBXjniX9r1DmUch9vHzQqa3zr4aAAiKoIwvtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:36:e0:67:48:e0:4f:f0:4b:eb:6c:c3:de:cf:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Validity
Not Before: Jan 31 05:00:18 2025 GMT
Not After : Feb 1 05:00:18 2025 GMT
Subject: CN=ed63c4d3e6e959a32ad8a2d4ca7d6e8d4e199e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:01:9a:fa:9a:01:e9:44:9a:fb:02:cd:00:f0:
10:d1:6f:fa:47:78:f5:7b:02:fe:ae:13:ba:46:22:
d3:c0:a5:9b:49:a4:27:d6:9c:07:17:cb:31:6f:61:
5c:36:25:5a:12:38:0c:cb:eb:f9:d6:39:60:8b:d3:
57:ca:4a:43:f0:6d:80:31:1d:f8:7c:64:d6:b2:a8:
6c:52:6b:c3:3e:48:66:97:d4:ea:22:ad:4d:46:c1:
c9:ec:68:47:47:eb:87:81:45:9c:c0:f7:9a:b8:8b:
fd:bc:09:8b:2d:f7:7a:04:b0:5e:9f:ed:9a:38:2c:
6f:c5:86:67:60:d0:ac:68:03:76:9f:4c:1f:65:08:
fe:6d:58:a6:b7:5b:b3:62:c7:9a:09:72:7a:1d:be:
bb:9c:8f:4a:9a:fd:c0:be:3a:a2:0a:46:0a:90:f3:
d2:37:ab:b3:1f:05:8a:d3:20:9b:c4:7f:e4:1f:a7:
cc:f0:4c:98:93:09:9a:13:3c:50:8c:5b:9d:89:d1:
6d:f4:dc:c4:c5:e8:e1:8c:45:92:f6:00:7a:8c:a5:
c9:ad:25:9f:c4:39:13:20:56:96:4f:78:19:6b:f3:
0b:7d:8d:06:46:20:bb:13:13:63:ef:f9:a8:df:12:
9a:c5:73:6c:30:93:3a:de:a6:2a:db:8a:46:b2:eb:
a7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:63:C4:D3:E6:E9:59:A3:2A:D8:A2:D4:CA:7D:6E:8D:4E:19:9E:1D
X509v3 Authority Key Identifier:
keyid:E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:6c:4b:65:a2:2f:c0:28:2f:86:9d:be:6f:b5:a6:ec:c5:b5:
13:60:7f:47:32:e1:72:71:9a:2b:20:32:0e:55:a2:5e:2d:d5:
31:09:50:e7:67:66:c7:24:b4:6c:74:30:ca:5c:0e:06:df:6d:
39:da:7a:1c:db:7f:35:b9:2b:86:0f:fb:46:37:d6:41:8f:ed:
69:61:41:b4:a1:b3:02:e2:ed:e6:78:07:63:d1:6f:b3:1c:d9:
ec:64:d9:e7:61:5c:d1:5e:87:59:fc:50:71:3d:de:81:17:ad:
a2:bc:28:93:d3:cc:86:ab:9f:08:ae:b6:26:91:48:16:fb:5f:
2d:0b:ec:a5:5b:4a:3e:a0:ab:97:9a:ef:65:5f:7a:07:3a:97:
00:4d:9d:27:5a:72:be:05:9f:b4:24:40:46:fa:e5:81:a9:0d:
cf:99:e9:ca:da:0c:a4:d6:33:51:6f:35:13:42:65:6e:21:77:
fc:81:61:3f:67:ba:da:96:ff:d1:80:81:46:fb:a9:73:94:d3:
ca:77:a7:14:a7:a2:ca:0b:c6:79:0d:06:28:6f:8f:15:b3:ac:
b0:d8:92:dd:9c:c2:7f:33:f3:19:a0:31:34:e3:f4:f7:e2:4a:
47:55:4f:0b:bb:40:ea:0f:3f:33:89:42:29:f3:b6:62:e1:ae:
e0:13:69:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:45 2025 by rpki-client on console-fra.rpki-client.org