Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
File: 5vOOPoarVh-g3TywmnDWGyykR0A.mft (raw, json)
Hash identifier: 8fIGVCwc01t+SgO/wg/uI/6j5NGGj8l9F1Q2hDOoaHc=
Subject key identifier: 0A:C9:C1:E7:E1:C9:2A:EE:04:08:6F:72:51:74:1B:E7:16:E5:B9:03
Authority key identifier: E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40
Certificate issuer: /CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740
Certificate serial: 01951135183ACFE4333A20E3BE7638A61E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
Manifest number: 01FC
Signing time: Mon 17 Feb 2025 00:00:46 +0000
Manifest this update: Mon 17 Feb 2025 00:00:46 +0000
Manifest next update: Tue 18 Feb 2025 00:00:46 +0000
Files and hashes: 1: 5vOOPoarVh-g3TywmnDWGyykR0A.crl (hash: nqnsS5EjsqDGC9bfYOcXYLZpWxXfVdO/wOIravgc4z8=)
2: l3aNToPytPwYHgxWfH_Fxe7l9-8.roa (hash: rud0x/u1K9V6C61gkvZO4dPUmEXcZ8EJf2+cgfvlR5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:18:3a:cf:e4:33:3a:20:e3:be:76:38:a6:1e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740
Validity
Not Before: Feb 17 00:00:46 2025 GMT
Not After : Feb 18 00:00:46 2025 GMT
Subject: CN=0ac9c1e7e1c92aee04086f7251741be716e5b903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:54:63:da:56:76:9b:4a:36:c9:b4:a2:99:18:
96:8b:e6:33:0b:72:79:96:ea:97:3e:0e:42:f0:e4:
ff:d7:81:ce:14:d4:5f:94:6f:49:1b:59:79:00:77:
63:7d:7f:82:b6:73:5b:a9:1e:ff:c3:fe:d5:67:b6:
1c:a7:af:0f:60:e0:a5:9f:61:ff:03:55:fe:ad:89:
a2:cb:de:f8:1b:4c:10:29:13:47:b3:40:92:f3:44:
06:9b:4c:2e:80:12:0f:13:6e:96:92:c4:89:96:72:
95:e7:28:21:2e:72:f3:2a:1b:d6:8e:3d:cb:9a:dc:
2c:44:13:2b:c0:b2:7d:26:66:ba:0e:0d:ad:48:88:
ec:7e:fe:bd:56:b8:99:35:63:97:3b:43:00:32:1a:
08:ff:ff:e9:a9:22:2e:db:a7:e1:f4:84:ed:72:6b:
9c:6e:f4:16:d7:b1:84:f8:c3:b8:bf:f7:9c:45:16:
2c:ab:66:66:2c:7c:ef:6a:aa:85:ed:48:e1:d5:60:
39:b6:8e:3d:68:2c:1c:4a:1d:0b:a7:66:f2:a0:7f:
81:5d:e4:5b:9b:94:8e:9c:03:3d:9e:b8:19:2f:67:
89:9b:63:9e:6b:d7:ad:77:cb:b9:a6:d2:ed:ef:65:
04:d7:b0:46:0d:eb:f9:5e:ea:30:fb:ce:9b:9a:8b:
d8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C9:C1:E7:E1:C9:2A:EE:04:08:6F:72:51:74:1B:E7:16:E5:B9:03
X509v3 Authority Key Identifier:
keyid:E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e5:ca:99:36:a7:18:18:cc:3f:48:54:c9:99:a3:13:2e:a1:
ad:b1:c6:78:d4:25:a6:53:5b:35:c4:83:14:c2:aa:62:8b:63:
72:ec:94:96:ea:0a:4a:6c:70:f1:9d:c0:56:78:f4:2d:ca:ca:
cb:1f:d5:cf:ff:d6:7b:87:52:7c:e8:2d:ac:59:73:f1:e9:95:
e7:6d:be:3b:84:45:00:63:6c:0b:31:13:21:e3:0c:40:f4:30:
b9:39:5b:ee:71:b4:38:26:36:45:bd:0e:a1:b9:0c:50:96:18:
12:a4:46:61:09:9f:7a:56:40:e4:3d:05:8b:33:6d:ac:ab:48:
57:4b:a6:b9:08:c8:fa:4c:09:cf:97:fe:9f:bf:d6:ce:69:e0:
c3:23:39:20:40:0b:3e:db:0e:7d:bb:b0:bf:7b:6f:07:ee:41:
9a:75:5f:95:13:86:1d:0b:21:c0:4d:42:b0:60:a3:61:2c:0e:
f6:e6:2d:6d:a8:3b:e2:93:af:b2:f5:ea:99:35:d9:29:8c:3e:
ec:75:0e:46:83:01:e8:2b:16:bf:b4:8b:31:1d:7b:f2:da:23:
d6:80:cb:40:1e:89:57:ab:09:17:5f:ad:3a:e6:61:11:1b:ba:
6f:fc:38:a7:b2:94:d2:9e:09:b1:cf:df:96:2f:01:a2:73:10:
ab:01:94:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:45 2025 by rpki-client