Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
File: 5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json)
Hash identifier: XQrNk4B5c5XRVF6kVae4DGqtP8r0VZbZMPjC0G9g7bU=
Subject key identifier: BC:5A:FC:19:17:78:3C:54:C5:F5:48:1D:53:E4:E3:AD:C5:BB:C5:49
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial: 0193579BE8A22B2AFEAEA1D6F3B5369AEE02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
Manifest number: 101D
Signing time: Sat 23 Nov 2024 06:00:55 +0000
Manifest this update: Sat 23 Nov 2024 06:00:55 +0000
Manifest next update: Sun 24 Nov 2024 06:00:55 +0000
Files and hashes: 1: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: uGgNw5a5TCLvJNhJLM8EaL+iBUtlN6Eu0yT65TJmpAE=)
2: FJQIZVMeiyc9wSIzstPQlHfse_E.roa (hash: qFFAZ8Xoid2TpsYYJs6ifWPS3M4YhkDatAXCroG6eVU=)
3: nklu39GiIl21oAX6jnk8H02Zx5s.roa (hash: fBfJyE3aCgO6wGEdku4ZwFjd7ciYW3itYatwSDy1bEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:e8:a2:2b:2a:fe:ae:a1:d6:f3:b5:36:9a:ee:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Validity
Not Before: Nov 23 06:00:55 2024 GMT
Not After : Nov 24 06:00:55 2024 GMT
Subject: CN=bc5afc1917783c54c5f5481d53e4e3adc5bbc549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e8:d2:d5:b4:94:e3:3f:b7:b0:c8:a2:96:57:
eb:7e:2b:26:89:99:2c:ab:44:69:3c:0f:5f:14:71:
8c:d8:44:a1:48:aa:62:75:5c:c4:12:99:80:c2:e6:
84:e4:b8:48:e0:00:9c:55:82:a7:3e:17:17:d3:66:
2c:ba:81:be:be:7b:e3:e2:9b:67:5e:8c:9f:69:1c:
db:7b:61:50:11:6b:c6:51:e0:c4:6d:22:7e:44:5a:
8f:25:d1:65:e8:67:3b:ac:bd:c1:3c:0f:18:3e:29:
51:d9:ba:9c:0e:b3:d7:74:9b:0a:97:93:1a:5b:45:
25:69:1d:7b:a3:dd:3d:75:31:1e:ff:97:01:cf:ce:
b0:d4:53:54:5e:74:2c:ce:89:cf:e0:e4:8a:bc:fe:
80:a5:ae:3a:eb:36:9b:90:4b:fe:19:84:25:d5:fa:
0b:20:89:2b:14:c7:d3:66:b7:d4:f5:9b:b7:ff:4a:
2f:de:36:0c:3d:38:6b:8a:f6:bd:f2:e0:b0:3c:7b:
27:33:d0:84:d0:72:91:49:04:93:4a:3d:08:4b:f5:
25:ad:9a:b0:41:9d:3c:d3:9f:9f:57:84:02:3f:40:
3b:3c:01:18:3b:ab:75:e7:89:70:31:5e:b2:94:79:
0a:57:b3:c0:b5:74:bf:a5:55:7c:aa:0c:a8:02:2e:
02:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5A:FC:19:17:78:3C:54:C5:F5:48:1D:53:E4:E3:AD:C5:BB:C5:49
X509v3 Authority Key Identifier:
keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6d:31:f2:88:95:3f:ce:e5:50:f2:19:4f:e0:98:45:cc:d1:
0b:5f:e9:da:a7:b5:ae:e0:a9:ba:8a:ed:b5:8d:d1:b6:95:8b:
d1:25:6e:50:81:51:c7:bf:fd:ff:af:0b:a2:70:64:1c:ab:2c:
02:97:29:d4:1c:01:4a:16:48:d5:3b:c9:e9:13:64:4d:9a:e7:
5f:27:e5:79:aa:07:48:db:db:a9:1b:8d:95:69:b3:fa:fe:56:
1c:d7:88:dc:80:12:04:eb:86:5c:04:72:18:78:f1:09:bb:fb:
32:88:e1:98:85:63:d3:de:5f:5f:cb:7b:03:b5:5e:44:43:0d:
14:07:3b:e5:47:1a:8e:b5:b1:97:fe:4d:0e:01:56:0e:14:f8:
3a:e7:66:16:49:35:44:da:90:ff:fa:fa:38:39:e3:92:21:e5:
a6:6e:3f:87:a3:46:6e:44:c0:5e:59:4a:44:7b:94:99:ec:f1:
3a:db:7a:05:bf:06:b0:e9:5e:a7:47:26:20:a7:f3:2d:2e:0f:
94:49:22:de:15:e1:88:64:d7:07:96:8a:6d:37:14:a5:91:14:
65:c6:df:22:60:89:cd:8a:75:75:db:f7:2e:f9:13:a2:35:6f:
a8:b1:df:73:c0:8a:ee:b4:11:d5:e3:52:d9:3c:0f:3a:92:d4:
19:f6:64:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:15:42 2024 by rpki-client on console-fra.rpki-client.org