Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft
File: 5v-BaTR_UwcrLRGtGNmiU8r--uc.mft (raw, json)
Hash identifier: myFN5NLLglpiA/IwDHlvBJSzSkmnCVIDZOX4REMOFZE=
Subject key identifier: 8B:7E:33:2C:E2:0F:06:04:66:60:FC:39:31:BC:35:96:38:33:B9:AB
Authority key identifier: E6:FF:81:69:34:7F:53:07:2B:2D:11:AD:18:D9:A2:53:CA:FE:FA:E7
Certificate issuer: /CN=e6ff8169347f53072b2d11ad18d9a253cafefae7
Certificate serial: 019511354717B747BE7CEED114280161A92E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft
Manifest number: 032C
Signing time: Mon 17 Feb 2025 00:00:59 +0000
Manifest this update: Mon 17 Feb 2025 00:00:59 +0000
Manifest next update: Tue 18 Feb 2025 00:00:59 +0000
Files and hashes: 1: 5v-BaTR_UwcrLRGtGNmiU8r--uc.crl (hash: vyVh+hRx+/PtamjPuBNMptK985s247KxMvyD20BCaOg=)
2: wTQvHz6KrEBh22NnZfSVSbP_3L0.roa (hash: FPUhMtrstm1Ac2XI6rl3vCrIvxuS83fDR4A5ahN+U+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:47:17:b7:47:be:7c:ee:d1:14:28:01:61:a9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ff8169347f53072b2d11ad18d9a253cafefae7
Validity
Not Before: Feb 17 00:00:59 2025 GMT
Not After : Feb 18 00:00:59 2025 GMT
Subject: CN=8b7e332ce20f06046660fc3931bc35963833b9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:68:00:c5:74:03:92:c0:56:62:2f:c3:c7:85:
55:9b:75:88:98:27:28:96:1f:44:26:4a:bf:cd:31:
17:95:a3:76:39:2c:72:16:78:e0:40:b4:1a:3a:90:
4d:8d:bd:92:46:85:dd:75:f5:e2:01:9f:9d:1f:20:
81:5a:ee:c6:2e:fa:38:74:ac:21:be:12:fc:9a:6a:
a4:26:35:c3:6a:38:e2:49:9b:24:91:dd:7b:e8:17:
1b:37:a5:b2:d9:38:1f:d7:ab:aa:ca:90:53:1c:18:
71:c6:55:6e:10:6b:9e:5a:fc:6e:bf:8c:9b:59:2a:
52:aa:17:a2:9d:82:ee:91:bd:db:9a:fa:d3:a8:36:
95:58:ab:02:bc:ae:30:00:5f:cc:d5:f7:8a:f8:89:
31:16:21:77:f2:95:ac:bf:45:d3:78:3c:da:a9:8d:
5a:1f:c5:f1:00:73:7b:68:b8:c7:b7:1b:1d:2b:56:
a8:e0:e0:42:7f:ea:41:27:88:f2:74:a4:2b:a9:28:
f5:46:28:6b:fe:26:26:73:94:bb:85:05:87:f7:52:
91:ea:9c:d5:86:3a:0a:11:83:06:3e:08:cc:47:92:
65:48:c8:ae:8b:cc:73:7a:33:f7:d8:8e:56:ac:90:
73:d6:11:78:5b:05:fc:90:93:1b:d6:67:e6:35:4f:
de:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7E:33:2C:E2:0F:06:04:66:60:FC:39:31:BC:35:96:38:33:B9:AB
X509v3 Authority Key Identifier:
keyid:E6:FF:81:69:34:7F:53:07:2B:2D:11:AD:18:D9:A2:53:CA:FE:FA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:51:3d:14:1a:0b:ba:de:77:21:b5:61:e7:a7:33:1d:e8:f5:
2e:6f:a9:96:10:8b:73:d6:80:94:27:df:56:d7:a2:85:69:e2:
79:fa:99:04:d4:ff:0b:48:cb:ad:9b:38:1d:e6:4a:23:e4:67:
e4:ae:d9:65:5a:58:22:06:2f:d9:77:ce:17:15:37:a1:47:41:
9b:f3:99:c2:2f:ae:34:a0:5f:6a:cc:47:37:6e:33:46:e6:24:
2f:e1:46:f6:f2:03:ec:bf:3c:6b:14:a6:e4:d4:cc:00:39:c6:
21:1f:c5:4e:b2:13:da:8e:80:99:bc:58:bf:2e:62:ac:86:fb:
73:73:cf:b7:15:5e:c0:77:8b:44:2a:9d:b6:2b:28:f6:05:73:
d6:d7:82:cd:ff:86:fd:f1:8d:82:8b:ca:7f:3b:15:cd:53:00:
7f:76:8b:39:d5:fe:fd:7e:19:94:bc:ef:e2:63:9d:6a:10:07:
40:c6:ec:4a:77:f1:e2:df:c7:16:dd:e2:9d:2b:21:3b:0d:a5:
fd:09:ea:f2:1c:1b:a7:70:d4:c6:15:41:06:f5:5e:f5:78:84:
e9:b9:9b:8d:61:eb:1f:f6:03:02:93:91:ed:35:46:1a:b9:32:
74:5e:5c:9e:5e:5b:74:cb:1c:38:83:3d:88:e2:c5:ba:16:44:
71:b6:d1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:12 2025 by rpki-client