Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
File: 5QwixmuF-smN6D12HvQkNDerA5M.mft (raw, json)
Hash identifier: ZO/Jgg2O2O2BQ6adXnzeTxbhvZfxtM6UG9vSTZqCIO0=
Subject key identifier: 1C:80:35:92:1D:DA:BA:0F:B6:37:EF:76:18:81:2A:08:CB:F6:DF:8E
Authority key identifier: E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
Certificate issuer: /CN=e50c22c66b85fac98de83d761ef4243437ab0393
Certificate serial: 01951134F29803111256FB47F93A877DB5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
Manifest number: 10F2
Signing time: Mon 17 Feb 2025 00:00:37 +0000
Manifest this update: Mon 17 Feb 2025 00:00:37 +0000
Manifest next update: Tue 18 Feb 2025 00:00:37 +0000
Files and hashes: 1: 5QwixmuF-smN6D12HvQkNDerA5M.crl (hash: NNK3sNQc/ZgOsHKZj8xnBeLTEH3FECRoIq9k8+oFw1M=)
2: 5vvZLFuVzrlfVEjgWVSSvDzWzYc.roa (hash: d36pZwdlPn9b+lfJWHYLiYs9ysvYmjF2/rOLd55l7Go=)
3: yV2QuoCYFVjM2-OTmFDea8Z9hyw.roa (hash: Fm6HaS57Sk5HrIHo3AJdE4/OrtFAnjdqKcrhGRoXq3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:f2:98:03:11:12:56:fb:47:f9:3a:87:7d:b5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c22c66b85fac98de83d761ef4243437ab0393
Validity
Not Before: Feb 17 00:00:37 2025 GMT
Not After : Feb 18 00:00:37 2025 GMT
Subject: CN=1c8035921ddaba0fb637ef7618812a08cbf6df8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b6:ea:3d:a0:a4:0b:29:6f:8e:81:11:59:31:
36:90:4f:30:29:a6:90:e2:db:1f:dc:82:6e:80:d0:
df:e8:1d:1d:2a:e2:d9:f1:0a:5f:81:e1:0b:74:46:
34:77:a9:66:64:39:52:7c:af:1b:87:6b:4c:8f:97:
0e:44:99:60:8c:15:93:6c:5b:d9:91:79:98:3f:d9:
09:9f:5e:82:d1:b7:01:f0:6c:cb:c5:24:74:d5:35:
8c:52:27:9e:11:f0:31:18:31:0c:9a:16:9a:c0:d5:
0c:7e:d1:89:47:60:6f:49:2b:66:3f:ce:95:b8:f3:
60:c0:ab:f3:ef:88:c4:e9:50:a9:0c:50:55:45:cc:
2a:cf:43:d1:3d:f1:57:78:ff:8f:c6:4b:43:0a:ae:
3b:c1:1b:2b:89:68:f9:41:56:40:99:95:56:95:5f:
36:84:5f:c7:62:0a:4a:24:0c:a7:97:47:a9:b0:04:
40:b1:2e:19:9d:b7:7c:29:4c:4e:b0:c1:30:95:d1:
4e:04:ce:e3:54:56:f1:3c:81:b5:5f:b5:e4:68:9a:
3e:fb:45:7f:fa:97:fa:ae:b7:3c:db:23:de:a6:16:
e5:31:bb:df:02:db:8d:ce:60:34:40:85:f5:be:bf:
c0:73:68:f6:46:35:fb:e7:cb:a2:a9:20:eb:af:c5:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:80:35:92:1D:DA:BA:0F:B6:37:EF:76:18:81:2A:08:CB:F6:DF:8E
X509v3 Authority Key Identifier:
keyid:E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f1:be:67:a4:37:d6:8f:f2:1e:6b:16:15:77:79:f6:3c:6a:
e2:53:31:09:6f:d8:76:cc:c1:f0:44:a2:9d:03:1b:f7:8f:cc:
15:15:64:0c:5a:d4:f0:12:91:2b:09:7b:72:a4:d7:82:3a:de:
94:7b:ef:9b:59:cd:90:01:8b:62:d8:ba:2c:ee:f0:ca:43:c5:
81:d2:c9:e6:49:73:5c:e9:ab:4f:ab:47:16:2e:a5:f2:32:bf:
5d:9d:2c:5c:c2:76:48:d1:45:30:13:8a:aa:af:9a:fe:26:dc:
54:e2:54:34:41:33:70:c6:b5:8b:4d:ab:31:41:11:b9:b9:11:
30:fc:c4:02:ac:43:ff:e3:ce:67:4b:6d:05:a8:d1:22:2c:8b:
56:b0:01:6a:4c:1a:01:64:25:e9:29:77:18:31:44:42:03:2c:
47:44:3a:44:8a:b8:47:c2:8b:c9:a2:cb:8d:54:cf:82:a0:c3:
c5:e7:e6:47:39:6a:4f:72:79:d0:c7:11:5d:b6:85:f8:7b:22:
ef:87:58:43:db:90:5b:20:d9:f9:20:d1:fb:bd:49:6b:37:cf:
ee:d5:39:4a:49:d2:35:f9:d8:c4:01:05:7b:eb:67:7d:60:51:
fc:4e:fb:dd:6f:05:5c:1c:0e:3b:55:7c:7a:ef:fd:87:d2:3f:
46:80:6f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:56 2025 by rpki-client