Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/23d009-773c-4e1b-b856-d9aee164d81e/1/W5zjRuXXUzxJLf20djqT4lPRMw8.mft
File: W5zjRuXXUzxJLf20djqT4lPRMw8.mft (raw, json)
Hash identifier: UV5KFoxzIgxtRn2RjVI4/RNnLl+LcMtyXx0RMRnqTnc=
Subject key identifier: CC:ED:0F:4C:66:1C:77:1C:0C:B0:2B:2D:3D:C6:81:8E:83:D3:3D:E6
Authority key identifier: 5B:9C:E3:46:E5:D7:53:3C:49:2D:FD:B4:76:3A:93:E2:53:D1:33:0F
Certificate issuer: /CN=5b9ce346e5d7533c492dfdb4763a93e253d1330f
Certificate serial: 0194BBCE0ADE8D57EC9C947AE98BB39B2EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5zjRuXXUzxJLf20djqT4lPRMw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/23d009-773c-4e1b-b856-d9aee164d81e/1/W5zjRuXXUzxJLf20djqT4lPRMw8.mft
Manifest number: 139F
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: W5zjRuXXUzxJLf20djqT4lPRMw8.crl (hash: we+auVVJLlcM+Ja88ucvgfC2w9RAlBk5j4wIM4N3/cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/23d009-773c-4e1b-b856-d9aee164d81e/1/W5zjRuXXUzxJLf20djqT4lPRMw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/23d009-773c-4e1b-b856-d9aee164d81e/1/W5zjRuXXUzxJLf20djqT4lPRMw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5zjRuXXUzxJLf20djqT4lPRMw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0a:de:8d:57:ec:9c:94:7a:e9:8b:b3:9b:2e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b9ce346e5d7533c492dfdb4763a93e253d1330f
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=cced0f4c661c771c0cb02b2d3dc6818e83d33de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:8b:4b:58:46:dd:f9:10:c8:eb:66:5c:9a:
9a:b6:10:82:66:dc:0f:61:7f:96:ed:4c:6d:dc:6f:
76:d0:4b:3e:f7:c8:8a:7d:66:e4:d9:63:33:f0:a4:
4d:29:a4:23:57:9d:df:16:4a:80:55:6b:6c:38:88:
0a:cf:d7:da:2d:b4:c5:ce:43:80:08:57:3e:13:b8:
fb:1f:f4:86:e0:a8:f7:1a:fa:70:1c:fe:fa:c5:e4:
f1:40:18:77:aa:09:eb:0e:50:06:59:54:33:f0:be:
0f:3d:3e:db:7b:52:2e:57:d4:2b:a2:8f:d8:2e:25:
b2:9b:2e:bb:f6:d0:3f:81:4c:88:d4:58:e0:5c:11:
f6:74:dd:d7:2b:45:18:49:82:0e:52:38:d9:46:44:
ac:fa:61:e7:dc:1b:6d:51:1b:64:a1:52:3a:31:fa:
eb:43:78:d8:80:4d:71:3f:19:42:83:2b:af:fa:68:
d5:d7:34:a4:1b:34:f0:47:dc:1e:46:4e:f4:c6:58:
61:2f:1f:0f:76:63:e8:0d:09:d6:ba:ff:19:0d:d8:
f6:88:e4:a0:99:48:b8:19:07:94:02:41:5e:73:b0:
08:00:72:7c:3c:74:2c:70:8d:20:6d:be:20:6e:ae:
ca:cd:da:c4:c8:be:c5:fe:8b:78:7b:fa:2e:47:80:
63:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:ED:0F:4C:66:1C:77:1C:0C:B0:2B:2D:3D:C6:81:8E:83:D3:3D:E6
X509v3 Authority Key Identifier:
keyid:5B:9C:E3:46:E5:D7:53:3C:49:2D:FD:B4:76:3A:93:E2:53:D1:33:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5zjRuXXUzxJLf20djqT4lPRMw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/23d009-773c-4e1b-b856-d9aee164d81e/1/W5zjRuXXUzxJLf20djqT4lPRMw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/23d009-773c-4e1b-b856-d9aee164d81e/1/W5zjRuXXUzxJLf20djqT4lPRMw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:14:2e:3a:c2:91:4e:ab:6e:79:38:4e:1c:bc:57:4f:08:40:
ce:e0:24:53:f0:86:73:fe:1f:24:92:f9:21:fd:4a:d9:9f:5a:
35:ec:3a:4e:24:51:ef:1d:ce:86:fd:ae:ed:96:a3:18:47:a8:
12:a8:a3:3d:7c:ed:ad:72:68:3c:e7:ca:53:dd:df:f7:8e:e9:
4d:10:68:90:4c:40:a5:47:e1:ee:b3:8c:f4:d2:a2:cb:7c:64:
13:0c:a7:4f:68:6a:d3:49:f0:3a:9c:df:59:13:1b:fe:a2:f3:
ad:c8:fb:fb:58:d4:f2:be:95:a2:e6:d1:cd:8b:06:90:0a:5b:
60:b3:c4:9d:3b:e0:1c:65:cc:dd:e5:9f:61:2f:dd:3b:8b:ce:
b6:51:ed:da:b6:76:a3:a6:45:bf:25:2f:19:0c:9c:52:07:c7:
f7:cb:26:c6:81:bf:6c:e9:79:fa:1f:f1:74:54:55:7c:96:93:
3b:b5:88:d3:9b:29:ee:d9:60:d6:36:bd:7a:c6:0c:64:3c:88:
67:e0:06:44:7e:c0:e5:e4:71:21:e0:d5:7f:74:f0:61:b2:bb:
7e:bf:1a:86:81:26:9f:cf:ef:2d:02:67:79:62:45:54:fd:e7:
f5:e7:2f:7e:57:bd:84:b9:43:b7:76:a5:66:47:7c:79:97:e0:
67:2a:b3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:28 2025 by rpki-client on console-fra.rpki-client.org