Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
File: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft (raw, json)
Hash identifier: 3UBtRIp6bv0GoiVspDbPwfSvz1FkepmLRGCQHxfEaWc=
Subject key identifier: 89:E9:00:76:A4:1D:C3:D8:DE:DD:A8:58:69:3E:CD:99:E5:09:5E:BE
Authority key identifier: E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
Certificate issuer: /CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Certificate serial: 0194C388A70B87A87DDDEB91EAF8E89C9EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
Manifest number: 41
Signing time: Sat 01 Feb 2025 22:01:40 +0000
Manifest this update: Sat 01 Feb 2025 22:01:40 +0000
Manifest next update: Sun 02 Feb 2025 22:01:40 +0000
Files and hashes: 1: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl (hash: I0OhspY2LQpX0WoEeIaP680OYnHyPsl3nAhudzWqUIo=)
2: GqkvkcQA2bbgQwHJ2b6jWAleiGg.roa (hash: EGM2nICbqAUwB5CP81F3mXlaWH5q4kAR9J7Mx82LHRQ=)
3: U_pf5mr7mVogKbgEVCSPIKt6P1Q.roa (hash: A+REPWck5DlDgbp9k+f3tR4pBhovVcICYPMhumJUrjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:a7:0b:87:a8:7d:dd:eb:91:ea:f8:e8:9c:9e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Validity
Not Before: Feb 1 22:01:40 2025 GMT
Not After : Feb 2 22:01:40 2025 GMT
Subject: CN=89e90076a41dc3d8dedda858693ecd99e5095ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:59:59:f8:0c:82:ff:a8:b6:25:57:de:24:e4:
c8:1e:14:5d:b1:c9:93:75:a7:9d:d2:a9:db:47:a0:
cf:e1:c3:71:52:12:46:44:4a:6a:80:00:fd:77:12:
4b:ca:41:ff:a3:67:34:20:b9:87:65:8c:63:a2:39:
5f:bd:e5:63:8b:1b:27:b6:be:f4:95:b5:8a:e9:07:
76:c9:2c:cc:0f:13:6e:d7:56:b8:33:bd:0c:2d:dc:
ae:47:57:59:ac:c2:b0:8a:ec:36:8b:94:99:fc:ab:
0d:eb:30:a9:15:55:e7:bb:42:20:10:9b:d3:c5:50:
44:30:2e:e5:cc:00:f6:44:26:a3:30:dc:90:6e:50:
b5:64:2c:ea:c8:d4:64:b0:db:c4:33:9f:55:0e:77:
04:1a:b5:98:c0:0f:cc:06:62:01:d1:f9:23:c0:89:
49:7d:fc:7a:5d:72:f6:aa:5a:2a:6d:db:91:06:ba:
61:6d:dd:2f:0d:9c:03:8c:02:d8:01:29:53:51:bc:
ed:33:47:04:98:c1:e3:dc:50:5d:6b:f2:69:b6:43:
92:fa:73:93:1c:66:30:28:0d:20:dc:2d:9b:8a:9c:
a1:6f:46:08:ce:40:f6:4d:37:83:8a:9d:d7:72:e1:
37:1b:7a:e5:f3:63:4d:31:8e:99:f1:da:0f:da:49:
76:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E9:00:76:A4:1D:C3:D8:DE:DD:A8:58:69:3E:CD:99:E5:09:5E:BE
X509v3 Authority Key Identifier:
keyid:E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e3:e5:c6:05:0b:c8:9f:db:67:39:f9:4c:e3:37:0f:fd:9a:
e9:cd:52:9e:29:63:c4:b2:fc:a8:7c:40:05:4d:57:4a:ee:94:
a6:b0:50:15:54:cb:3c:92:76:4c:f4:4a:f2:f1:a0:99:9e:24:
b6:b3:28:08:09:16:27:5b:a0:db:bc:32:b5:89:30:aa:41:f5:
db:a1:45:30:df:11:c1:37:cf:64:6f:29:32:c9:ee:e1:2b:6a:
22:88:f6:98:49:e6:98:bd:3e:9b:98:70:8b:d0:50:20:5b:92:
75:53:81:10:5f:24:03:c8:a4:7f:3c:fe:cc:b8:34:a2:fa:9f:
c0:76:74:79:66:0d:27:cb:f5:cc:4c:c2:11:07:71:e1:e7:23:
50:93:81:b4:9d:c7:69:1e:be:26:a1:b7:dd:6a:bd:a5:ce:c6:
a2:b7:fc:23:6a:f7:fa:2d:4b:04:94:71:02:a5:0c:47:22:a3:
33:2c:6d:84:df:40:21:73:b8:7f:fd:20:63:f1:bf:82:66:ed:
b6:f0:25:52:f5:f5:a6:b5:ee:da:ed:4a:84:96:c7:33:ce:3f:
ae:47:7d:97:27:77:d8:81:69:75:52:d2:7f:39:bb:d5:6c:81:
5b:c7:42:91:29:ab:ef:da:95:7b:f0:ec:26:c6:9c:6a:9d:3d:
fd:60:e8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:04:34 2025 by rpki-client