Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
File: _q5Ur85RVFR5wNoD8gGnTimSfXg.mft (raw, json)
Hash identifier: UVCHsiywi4pWmE/S1tAPnBFVETnX8bM/G9Ekj4xEIII=
Subject key identifier: 5D:E7:BA:09:C2:16:80:45:C3:13:C3:7D:97:6F:90:F1:51:32:A0:73
Authority key identifier: FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
Certificate issuer: /CN=feae54afce51545479c0da03f201a74e29927d78
Certificate serial: 0194C462F65BBF22BF989684C9F2ADFAF7FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
Manifest number: 045D
Signing time: Sun 02 Feb 2025 02:00:07 +0000
Manifest this update: Sun 02 Feb 2025 02:00:07 +0000
Manifest next update: Mon 03 Feb 2025 02:00:07 +0000
Files and hashes: 1: _q5Ur85RVFR5wNoD8gGnTimSfXg.crl (hash: cJssj7z3rbYGvoVqPw708EOw6vvl1V0M+BZR3Gwx1xE=)
2: lZoUgcddrDnXe4fT6Iyd3y19EFw.roa (hash: XV7kQikecJKDAAiTDNdfiups4qb65I8y80bxuDG+ZNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:62:f6:5b:bf:22:bf:98:96:84:c9:f2:ad:fa:f7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feae54afce51545479c0da03f201a74e29927d78
Validity
Not Before: Feb 2 02:00:07 2025 GMT
Not After : Feb 3 02:00:07 2025 GMT
Subject: CN=5de7ba09c2168045c313c37d976f90f15132a073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:99:5c:bf:b6:92:83:fe:87:5b:8d:30:c7:
a0:20:2e:8b:57:2e:95:dc:d3:28:b3:e4:5d:f1:9f:
f8:64:fd:02:b1:35:bc:e7:b6:06:c7:8f:05:2b:0f:
ae:1a:1e:d4:84:6a:4c:e5:c8:0a:03:84:25:db:2e:
6b:bc:65:5f:78:34:0d:fe:42:c3:3e:8d:c8:d5:7e:
02:55:27:af:c8:a6:83:26:e8:25:84:ef:f4:3b:9e:
2e:4c:35:7a:e0:c9:d7:92:bb:d3:c8:9a:b1:6d:4b:
e9:11:2a:1f:86:ad:92:b3:fc:5c:02:4f:47:8e:3e:
2a:1f:36:68:f7:46:b9:db:8b:4c:50:57:67:23:9e:
c3:66:05:68:9a:9c:c2:69:78:c6:be:0f:0f:62:39:
50:ba:3e:d7:f3:7e:56:a5:69:08:e6:00:2c:1a:dd:
e2:09:8a:03:73:75:e3:a9:78:fe:76:0b:e8:d4:51:
26:bf:3e:29:f6:6c:85:5b:af:e2:88:39:01:da:35:
a5:ce:13:64:8b:a6:fd:24:d7:66:82:cd:e1:21:e2:
ac:1b:5d:98:a9:a6:56:79:a2:bb:4b:0c:ef:55:b1:
2b:ec:8e:7c:ea:79:ae:e3:1b:37:d3:c9:2b:d2:66:
74:54:03:26:84:71:76:9a:cd:03:b8:6c:32:d4:29:
b3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E7:BA:09:C2:16:80:45:C3:13:C3:7D:97:6F:90:F1:51:32:A0:73
X509v3 Authority Key Identifier:
keyid:FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:69:6c:f3:dd:00:62:ea:73:72:33:c9:1a:b1:69:08:13:83:
32:7c:b2:05:98:94:8b:5f:63:3d:ec:e8:a9:18:26:f6:bc:43:
30:af:c3:a8:ff:ac:e8:ca:ee:9a:2a:de:98:e6:cc:e5:72:11:
3f:e4:42:b4:47:98:fc:5e:7b:1b:35:66:7e:6b:f9:43:32:4c:
b0:ea:09:ca:a5:3e:cd:0b:f5:43:ec:d1:ec:52:10:58:33:35:
39:f2:5e:d1:13:fa:42:63:04:e2:97:a4:dc:76:79:d7:f3:c0:
0f:e5:be:f3:92:8c:38:33:8d:b4:a8:bb:01:85:2e:1b:65:2a:
73:c9:d9:53:8c:2f:c7:16:fc:dd:f8:92:56:31:48:e5:03:af:
53:e0:5e:73:ce:67:28:47:d2:37:9d:1e:6f:e1:fa:e5:d2:62:
c7:6e:39:c7:1f:2f:2e:ed:48:48:fb:44:6b:7e:99:4e:26:fa:
2c:bc:3b:e9:43:ec:1e:c3:9e:ee:db:2d:22:63:10:78:25:de:
39:0a:06:50:7f:fc:ba:69:72:0b:65:89:8a:66:6d:08:39:df:
66:70:6d:58:fc:2a:69:b6:53:5b:3b:f6:b4:f1:81:35:11:ad:
d3:56:49:1e:15:39:57:5c:90:ef:c5:47:26:1b:64:fa:b5:3d:
a4:8f:68:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:44:52 2025 by rpki-client