
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
File: rsr5Su3_76Q2a8or65GZLB2zTMw.mft (raw, json)
Hash identifier: AB0DQ1fYRTNE3dVe4gvjvOzvENqvxi+TCGOMRFTjH5E=
Subject key identifier: 02:60:CC:86:F5:27:03:5B:5F:1C:AE:A2:57:9E:D2:8C:11:30:ED:77
Authority key identifier: AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC
Certificate issuer: /CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
Certificate serial: 0194BABBC7EEBDA6148C32825FBF20F8A56A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
Manifest number: 07C1
Signing time: Fri 31 Jan 2025 05:00:56 +0000
Manifest this update: Fri 31 Jan 2025 05:00:56 +0000
Manifest next update: Sat 01 Feb 2025 05:00:56 +0000
Files and hashes: 1: rsr5Su3_76Q2a8or65GZLB2zTMw.crl (hash: yl2sJq8eNRVMsqF1WB04r9JYNt0ivxhgkin+DruHA+Y=)
2: ycsxAxwfvi_ZHCMIh-H72E7BXeY.roa (hash: 5XrkDdaM3UebECdsSy+x2CvwywLxmUspYKKtB6gwnm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:c7:ee:bd:a6:14:8c:32:82:5f:bf:20:f8:a5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
Validity
Not Before: Jan 31 05:00:56 2025 GMT
Not After : Feb 1 05:00:56 2025 GMT
Subject: CN=0260cc86f527035b5f1caea2579ed28c1130ed77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:81:d9:10:ca:70:77:49:e0:de:b6:63:3d:46:
e2:c3:31:7d:7d:7b:0b:75:90:8d:52:a8:1c:7f:e8:
32:30:61:ac:fc:df:96:4e:87:d1:8d:89:e9:d7:99:
27:ad:69:77:17:c7:27:70:2d:ce:32:51:76:38:7a:
dd:d3:14:07:11:df:7a:c0:c3:5c:56:b7:d7:41:79:
a8:28:93:42:da:f0:4e:d9:b1:17:75:63:69:3a:a9:
7f:36:c6:b6:71:44:27:52:2e:9c:61:69:8d:d5:df:
25:03:01:ef:a5:a4:f3:8c:9c:2d:bb:5c:69:ad:4d:
bd:e0:b5:86:f2:03:ca:91:62:49:f3:12:26:47:65:
c1:08:e5:bf:a3:ba:ed:4a:ee:29:79:39:fb:ef:58:
89:06:d2:25:d7:74:9f:5c:4c:f0:a2:10:25:17:e8:
31:06:be:8d:73:cb:98:4d:33:f8:85:2a:c8:cb:c7:
ff:24:26:5b:48:cf:60:7c:1c:b9:61:0e:e8:96:43:
17:fa:44:e3:91:d2:af:d4:6c:fe:fd:7c:b2:1b:34:
03:ee:90:92:40:de:b6:3c:41:9b:dd:6e:ce:fe:ba:
89:1a:c0:25:69:27:bc:a6:98:e6:53:01:02:83:4d:
77:84:86:e2:04:d7:c9:41:b7:0a:2d:9f:70:54:5e:
da:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:60:CC:86:F5:27:03:5B:5F:1C:AE:A2:57:9E:D2:8C:11:30:ED:77
X509v3 Authority Key Identifier:
keyid:AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:61:5d:f5:e1:24:38:b9:cd:f3:3a:6b:fe:9b:70:85:23:2d:
09:88:27:b3:cc:24:8d:2a:6c:6b:99:2a:d0:5a:58:b2:d9:42:
77:9b:61:bb:02:e2:c0:bb:16:ba:d2:4e:22:15:1a:49:62:fa:
11:cd:7c:3c:e4:4b:79:2b:e5:8f:e2:5c:0a:5f:45:a0:5e:50:
1d:63:f8:3c:ec:22:39:92:d1:d5:b2:ad:0b:ef:8a:37:05:6b:
51:73:bd:5d:ea:ec:e4:01:41:d5:6b:22:12:17:4d:60:64:4b:
7c:a7:09:6e:6d:91:c4:17:48:87:bf:b2:9a:ff:2a:85:23:d4:
de:e5:87:41:f1:6f:b7:db:15:46:96:78:88:95:e0:e3:ff:bd:
9c:14:fc:4e:cb:9b:ff:df:a1:48:42:18:b9:1f:e5:9f:da:b0:
25:bc:8c:73:da:1d:35:a2:d2:74:44:5f:bf:a4:24:7d:c8:e5:
c1:b8:66:c4:b0:30:d9:a6:f5:8d:2c:9c:4a:f0:66:7e:01:02:
92:d6:d4:f8:de:26:6a:87:b1:d8:c7:95:5c:d2:1b:a3:22:ca:
94:f6:bb:bc:6d:2c:fc:f2:81:c0:42:a1:b0:7d:8f:cf:76:0f:
43:7b:cb:15:77:21:7e:a9:7a:8b:77:41:e4:59:10:d9:38:86:
2a:3f:cf:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:30 2025 by rpki-client on console-fra.rpki-client.org