Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
File: 5oS0UXk_YkGGF7yTT16CUT_Daok.mft (raw, json)
Hash identifier: uA7RKkWj9lUlPcpsI6tjrCcdnrilMrjyZWwCS2rv0Hc=
Subject key identifier: 89:3F:A2:02:71:31:72:D1:44:26:8A:D1:DE:4F:EE:E6:2C:F5:D5:F5
Authority key identifier: E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89
Certificate issuer: /CN=e684b451793f62418617bc934f5e82513fc36a89
Certificate serial: 0194BAF21D9FF7F6999F6CA091751BA9514B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
Manifest number: 1336
Signing time: Fri 31 Jan 2025 06:00:16 +0000
Manifest this update: Fri 31 Jan 2025 06:00:16 +0000
Manifest next update: Sat 01 Feb 2025 06:00:16 +0000
Files and hashes: 1: 5oS0UXk_YkGGF7yTT16CUT_Daok.crl (hash: ASGGfxhtz/K7GBnblW8X7adhPPMJ71ejzIs3YkExI7U=)
2: VxHZXRxJTRxl_GAJfXRGk4eUbgQ.roa (hash: h1782ABvZxcb8lHBxbC/bEHNiNxIT1YjharjivSSmh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:1d:9f:f7:f6:99:9f:6c:a0:91:75:1b:a9:51:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e684b451793f62418617bc934f5e82513fc36a89
Validity
Not Before: Jan 31 06:00:16 2025 GMT
Not After : Feb 1 06:00:16 2025 GMT
Subject: CN=893fa202713172d144268ad1de4feee62cf5d5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:7e:f6:13:62:0a:0b:1a:a1:a5:0f:dc:44:
8a:1a:96:66:a5:b5:a8:a5:db:4e:af:65:c7:f3:cb:
f6:1d:b3:ca:1f:2c:68:c8:5a:af:fa:e0:02:ff:c8:
83:65:ab:a3:b6:c7:ec:26:c9:ba:56:b1:e7:61:6c:
72:20:46:67:3f:7a:9e:a1:36:fd:91:91:df:b4:f5:
f4:f4:fb:10:d8:a0:a2:5c:17:2d:ab:17:a1:5c:26:
1b:84:44:24:ec:c6:d1:10:17:32:be:a1:47:b5:52:
a6:58:64:14:d3:0c:fb:4a:a1:a9:94:be:8f:c6:a4:
5a:bb:92:e1:54:42:bc:75:e6:7b:ca:34:23:b2:9b:
ea:b1:93:e6:84:89:36:39:bf:21:b4:42:9f:5d:f1:
2a:8e:0b:2d:4a:fb:85:6c:01:48:94:4e:24:ad:d5:
00:42:48:42:5e:cc:a2:4f:15:7d:cf:5e:af:1e:d5:
6f:ae:8c:7b:cf:e6:ef:93:18:23:25:3d:f6:60:4f:
8a:0a:34:7d:6f:26:af:8a:38:45:6e:a2:6f:0e:55:
40:32:71:a4:0f:9f:c6:cd:25:7c:79:28:57:06:2c:
aa:16:33:2a:b9:07:b2:cf:7e:a9:c9:2b:99:d0:be:
4a:51:67:7a:f1:65:c8:79:96:84:db:44:dc:3e:be:
55:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3F:A2:02:71:31:72:D1:44:26:8A:D1:DE:4F:EE:E6:2C:F5:D5:F5
X509v3 Authority Key Identifier:
keyid:E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:dd:ab:4a:67:b9:b9:a3:ab:8a:af:d0:72:38:95:65:32:9e:
ec:f8:2c:82:17:f4:25:56:27:99:ce:08:13:9e:9c:a0:3f:e4:
6e:23:4e:5b:19:cb:ca:22:40:97:12:fd:d0:af:6c:87:39:80:
e5:d4:12:ce:ee:e9:1f:f7:1b:3b:7f:de:21:03:d0:f1:64:a0:
52:1f:80:85:47:6c:d8:5f:be:71:28:13:b1:90:e0:39:e0:69:
ee:35:6b:4e:41:cd:09:72:13:c4:7f:01:46:e9:ba:89:04:6d:
f3:3b:85:7d:88:46:c1:ff:77:fa:77:33:f6:8a:df:ec:f9:ec:
15:09:96:8c:29:62:df:33:8a:ff:d0:b2:ac:6e:b6:1f:19:e0:
00:25:aa:8f:1e:65:c4:69:15:8f:39:c0:0a:fd:b8:43:e6:81:
d9:32:a0:cd:db:62:cc:11:36:15:b5:76:66:c7:cb:f1:a3:8f:
bf:e1:08:ca:8d:c0:80:42:9b:86:fb:0c:58:a6:8d:b0:c0:8d:
81:26:11:6f:6a:9e:1a:51:d2:63:a3:32:87:5f:1f:47:16:8b:
3f:ec:df:3a:1f:8b:51:45:c1:60:8f:89:1c:34:18:52:57:71:
3a:e9:9c:26:7e:78:f1:c9:a8:9c:33:69:29:dc:f7:e8:f4:0e:
7d:0e:33:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:29 2025 by rpki-client on console-fra.rpki-client.org