Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
File: 1e5A9FidahGyT3u8wpq5-a5olxk.mft (raw, json)
Hash identifier: c+Tf3YWL7yYeMrqujc8mZ4DJVgVmTK63+PVGGPHwClM=
Subject key identifier: 57:52:0E:61:70:4C:73:39:60:4B:D3:23:FA:72:F3:90:F5:7F:4E:B9
Authority key identifier: D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
Certificate issuer: /CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Certificate serial: 0194BAF26964B682B36146DBD9131FD83B26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
Manifest number: 0855
Signing time: Fri 31 Jan 2025 06:00:36 +0000
Manifest this update: Fri 31 Jan 2025 06:00:36 +0000
Manifest next update: Sat 01 Feb 2025 06:00:36 +0000
Files and hashes: 1: 1e5A9FidahGyT3u8wpq5-a5olxk.crl (hash: zunIZldMAwm/ex/BaT7L9xzVvgpUEjH962lbOQeQDdQ=)
2: XjL_VzQpHSFAWpxr8LGCRwpbqdA.roa (hash: Brx7GKcJBpG7UwHG4ArWnTWvC9k75AexdudLOh9h/Pw=)
3: _iMkYM2SlDhb8BiWpSMXooueyD8.roa (hash: S5QL6kGITU62oZ1okwVbSjZ25wXtKrDyDz3OlnPy3eo=)
4: wGzcUkf9TrX4X1TKP2pudnSOrpY.roa (hash: 213aWrKEIvcLJfIVltuh4GjeKhwAlQ7vRwl6MLXTT98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:69:64:b6:82:b3:61:46:db:d9:13:1f:d8:3b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Validity
Not Before: Jan 31 06:00:36 2025 GMT
Not After : Feb 1 06:00:36 2025 GMT
Subject: CN=57520e61704c7339604bd323fa72f390f57f4eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:fd:19:dc:06:5f:54:52:00:50:0e:9e:3f:
cb:36:14:ee:e1:10:32:41:06:54:fb:21:a7:23:cb:
44:37:3f:78:e0:f5:83:81:95:a8:ff:2d:e2:a9:6f:
ce:28:77:b5:81:10:56:c9:e9:22:89:2f:3a:05:f6:
4e:18:53:5c:31:90:40:08:5b:01:38:c3:ec:8a:6e:
65:8c:80:1a:0c:5b:e9:48:e4:e7:e8:2a:14:cb:b8:
20:58:ae:c5:90:bd:96:7d:0c:65:f2:5e:10:98:66:
fe:3a:30:d2:99:5d:03:bc:34:69:8e:91:85:ab:43:
c3:ed:f3:a5:d1:ba:34:aa:2f:61:c6:ae:81:55:f6:
cd:4a:36:d3:e5:df:9d:c9:fe:fa:0d:cc:8a:8a:2e:
cb:03:9f:48:e9:61:1a:ff:b4:1a:5a:98:eb:6c:bb:
6d:b3:8c:12:3b:9a:0a:74:1c:bc:e9:ac:ea:d7:7c:
af:cd:be:17:2a:91:33:48:b3:47:57:79:17:7b:9b:
0c:56:31:5b:6d:72:59:25:22:5f:e4:9b:24:64:fd:
09:da:94:8d:1d:56:d1:b9:c6:a7:97:3e:99:5d:5d:
cf:81:a2:17:d8:8e:a0:3c:cc:2c:61:99:3f:fb:6c:
ec:24:3d:d3:51:44:c3:fb:38:f9:7a:62:cb:b3:d1:
68:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:52:0E:61:70:4C:73:39:60:4B:D3:23:FA:72:F3:90:F5:7F:4E:B9
X509v3 Authority Key Identifier:
keyid:D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:42:21:b4:2c:d3:0b:5c:b4:8a:e2:7d:61:27:b8:cc:71:40:
35:21:b5:f8:39:39:62:91:d9:99:8d:d0:1f:f2:b2:5a:1d:56:
da:eb:ce:6c:eb:6f:ca:51:14:38:7e:c5:cc:9f:09:20:30:58:
e8:0f:72:f1:2d:cc:fd:50:81:22:30:6d:7d:2f:c1:16:e0:74:
37:ab:85:77:46:ff:01:5b:e3:ce:02:d6:a1:5e:e5:3f:15:62:
85:2d:c3:87:d2:3e:f3:03:19:51:9d:d9:bb:1b:7d:0a:94:81:
e6:40:08:56:b0:c4:dd:3c:e2:91:88:15:88:c4:26:2f:23:71:
de:ea:27:89:2b:c4:40:88:90:2c:97:2e:f2:1b:86:73:c8:17:
09:2f:04:db:4a:f7:39:1e:42:ea:99:19:2c:f4:a9:18:59:de:
34:92:43:7f:8e:b8:e4:a0:b8:97:97:56:2a:18:1c:d2:89:72:
1d:fb:71:38:8d:37:a8:84:75:dc:f4:31:90:9e:4b:91:33:80:
06:25:7d:0b:9e:63:c9:cf:e0:2f:fa:52:24:13:52:02:de:99:
cf:d0:1d:53:97:4c:6e:2c:e3:3c:9f:dc:b8:8f:be:d4:90:ca:
3e:a6:0b:cb:b3:a8:0e:5c:3e:fb:e9:f7:34:d3:e3:75:06:1f:
49:40:5d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:46 2025 by rpki-client on console-fra.rpki-client.org