Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
File: 5hU_zqGfHUn68-R-mJ22v15v5ak.mft (raw, json)
Hash identifier: pEKVlIUrNE4cv2NInXLQyeIeHD2RjTtdnUpmzpVaOMU=
Subject key identifier: 83:4A:58:9A:5C:6C:90:2D:40:F8:A5:07:55:0A:E1:DC:5A:58:78:BB
Authority key identifier: E6:15:3F:CE:A1:9F:1D:49:FA:F3:E4:7E:98:9D:B6:BF:5E:6F:E5:A9
Certificate issuer: /CN=e6153fcea19f1d49faf3e47e989db6bf5e6fe5a9
Certificate serial: 0194BAF24A5D45BC61CD6FD791B4D86BB5E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 06:00:28 +0000
Manifest this update: Fri 31 Jan 2025 06:00:28 +0000
Manifest next update: Sat 01 Feb 2025 06:00:28 +0000
Files and hashes: 1: 5hU_zqGfHUn68-R-mJ22v15v5ak.crl (hash: 1nNLz+DfHn1P8izOnKvfGe1WTQmzLoG+JG2ayiIrQkc=)
2: AfwJnib3HYEEvfX22iQD4QQrJJU.roa (hash: ZxsajNoVQaxEO2iOv8vpTbsfS52PxCBiq/kifGttXT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:4a:5d:45:bc:61:cd:6f:d7:91:b4:d8:6b:b5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6153fcea19f1d49faf3e47e989db6bf5e6fe5a9
Validity
Not Before: Jan 31 06:00:28 2025 GMT
Not After : Feb 1 06:00:28 2025 GMT
Subject: CN=834a589a5c6c902d40f8a507550ae1dc5a5878bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ec:50:c9:bd:3e:02:98:b0:1f:3d:60:9a:b8:
7f:1a:2d:52:35:ba:49:ba:ae:19:98:9c:1d:f9:d9:
37:02:d5:a1:7f:b6:52:ea:09:7a:a9:36:c2:4f:43:
42:03:eb:7f:28:21:fc:0a:ce:59:52:cd:fd:7a:9e:
a3:e6:1e:2f:f8:ee:f8:ba:2f:44:a5:79:a4:b7:37:
b0:a4:3c:d5:74:68:f1:40:7e:e7:c3:e4:a0:08:ee:
9d:7e:df:6d:89:ad:fe:33:de:f3:08:30:e7:28:c0:
0c:19:43:ab:2b:16:bf:f4:42:03:a5:94:00:9a:9b:
82:b4:20:a1:36:3e:9a:98:fa:c3:66:c1:aa:14:dc:
31:fb:f3:40:e3:9f:e1:be:f4:03:80:c5:e9:4a:ff:
65:b3:8f:0e:15:e8:e4:a4:1f:9d:a9:10:b6:0e:b9:
7f:58:7a:de:c6:b8:33:11:e9:2f:62:fd:a3:04:e2:
a2:42:bd:29:da:4a:24:38:9e:de:1b:97:c4:3b:e5:
01:f4:10:01:9e:4b:f1:a2:43:3d:46:55:75:bf:2d:
08:ee:1b:c7:97:a9:c5:9b:d4:43:ed:a3:f6:46:00:
62:a3:ea:d4:1e:71:e9:dd:78:93:37:a1:6c:22:7f:
4f:6b:a6:80:50:8a:17:5a:99:14:39:d8:ce:cb:84:
01:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4A:58:9A:5C:6C:90:2D:40:F8:A5:07:55:0A:E1:DC:5A:58:78:BB
X509v3 Authority Key Identifier:
keyid:E6:15:3F:CE:A1:9F:1D:49:FA:F3:E4:7E:98:9D:B6:BF:5E:6F:E5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f5:5e:7f:26:8f:c8:19:ad:e0:ad:71:c1:1c:a2:ed:f1:47:
1f:0f:37:f0:35:1d:4f:13:10:c5:ed:5a:ef:13:e4:f7:48:39:
3b:8c:2e:b4:7d:d5:ae:e3:87:e5:20:bb:24:a4:9a:ef:4f:4d:
52:90:8c:bf:80:0a:6c:2f:79:fd:35:3d:d7:d4:12:e4:21:68:
2b:86:d1:99:a0:2b:52:b6:19:f6:56:63:62:c4:c4:ac:85:38:
5a:0c:9e:70:4d:bf:7a:2f:3f:3f:24:5a:82:20:c3:7a:d5:a2:
ca:05:f0:bf:e1:e0:1d:97:a3:5c:15:d3:03:55:4d:64:5b:de:
6a:6b:95:80:3b:30:da:5c:59:a3:44:aa:5b:b0:10:46:2e:59:
68:f0:c2:67:4c:c6:33:bf:2b:c6:5b:42:36:ae:3d:a9:4e:2f:
31:d8:b3:64:7f:38:d2:3a:f6:2d:81:e7:a6:d1:5f:44:07:98:
e2:79:5e:31:86:cd:9f:5a:97:72:ad:45:da:c0:84:2d:75:cb:
49:44:35:a5:8c:9d:b6:50:cd:17:a0:2c:2b:61:cd:40:89:75:
89:fa:dd:e1:1a:db:75:99:d4:ca:d2:a7:bd:52:d8:38:e9:ce:
58:30:d1:9b:d0:8f:29:8b:06:1f:ef:34:2b:af:57:ea:95:83:
fc:b9:eb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:04 2025 by rpki-client on console-fra.rpki-client.org