Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
File: 5UTrMoWRGEs_r55xqTHLMl3LEag.mft (raw, json)
Hash identifier: pdzk/skwsojkHWxldO1ew51k2SVTI+CvF+FLTCakbf0=
Subject key identifier: 1F:DB:D9:42:10:B1:50:28:38:BD:30:5C:CE:CB:DF:B6:41:40:7D:CD
Authority key identifier: E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8
Certificate issuer: /CN=e544eb328591184b3faf9e71a931cb325dcb11a8
Certificate serial: 0194C3508784A26683D8363D71C4B3A3DD61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
Manifest number: 48
Signing time: Sat 01 Feb 2025 21:00:21 +0000
Manifest this update: Sat 01 Feb 2025 21:00:21 +0000
Manifest next update: Sun 02 Feb 2025 21:00:21 +0000
Files and hashes: 1: 5UTrMoWRGEs_r55xqTHLMl3LEag.crl (hash: GOEAgDJCMcQZXNYu4jvpmDyXgofCOgYQ5ccc9kANKOk=)
2: WZ6QV7I388WfR1atNyelt0Q9Mso.roa (hash: KwrEk8zO8slIVjQv6gkfQCNK8LKZkPpOkNAIgKKlEQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:87:84:a2:66:83:d8:36:3d:71:c4:b3:a3:dd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544eb328591184b3faf9e71a931cb325dcb11a8
Validity
Not Before: Feb 1 21:00:21 2025 GMT
Not After : Feb 2 21:00:21 2025 GMT
Subject: CN=1fdbd94210b1502838bd305ccecbdfb641407dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:be:36:d2:21:17:ed:f9:86:46:c6:f8:2c:12:
f3:1e:c1:9a:80:28:a7:02:79:91:bd:e6:e6:13:24:
ba:79:c1:c8:97:e9:9b:ed:7c:8f:58:9f:88:a7:b2:
79:2d:4b:02:d0:7f:3f:9e:6e:ab:48:98:29:dd:8f:
cf:c5:38:ef:44:2a:35:cf:ed:34:51:ed:bf:00:3e:
11:ab:0c:fb:e9:ba:c5:65:7c:82:ed:54:20:4d:d8:
bd:78:52:5c:c6:8e:58:2c:a9:0d:a4:02:e4:26:8e:
ac:9d:87:b7:51:a5:82:70:a9:5c:0d:ea:fa:0d:74:
2c:73:f9:74:70:ea:dc:b3:3d:a1:b3:51:c2:82:ee:
1a:0d:1a:6c:2f:da:e5:9c:0b:92:10:52:0f:31:77:
4e:7a:ce:a7:b3:4a:1b:c6:5e:fe:1d:da:0d:ba:81:
69:87:75:67:a2:e0:7d:21:28:bb:23:df:42:10:39:
6b:e9:ba:e1:39:b8:90:bc:43:4a:40:83:c4:e6:c6:
b9:60:d8:f7:a1:bb:5e:92:06:a7:f2:2c:03:d4:a0:
94:ae:11:3f:74:f8:69:fd:98:ff:d6:5a:ff:90:75:
92:5b:8b:c7:b0:4b:6a:3e:66:e3:3f:0b:e5:86:81:
e7:32:ad:71:93:96:19:1f:cf:04:8b:35:f1:dd:46:
da:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DB:D9:42:10:B1:50:28:38:BD:30:5C:CE:CB:DF:B6:41:40:7D:CD
X509v3 Authority Key Identifier:
keyid:E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f0:ce:32:c3:ca:5d:d8:37:43:60:cb:c3:4e:70:ff:a1:bf:
41:fe:6f:cb:9f:95:0d:b3:87:e2:3a:b4:59:94:bb:6b:14:e1:
86:9c:3d:b1:c9:ff:2c:a3:a0:c1:25:81:09:79:62:e4:12:c8:
54:40:50:d1:85:e9:04:6f:9a:db:aa:20:df:4e:60:6c:b1:7f:
35:36:ba:0b:17:2b:dd:91:2c:0d:fb:b5:3f:b7:22:be:92:5a:
78:80:4b:70:40:0a:23:de:c1:d9:da:5a:d8:c0:55:91:0f:db:
a4:e9:7c:5a:5a:82:a4:00:37:e1:05:02:d6:af:23:3f:89:ca:
9e:a1:b4:ff:7d:7b:5b:ba:32:a4:98:f6:d0:d5:39:59:df:b6:
fe:77:9b:6b:35:0f:17:16:9a:53:cf:61:33:5a:0a:f4:e2:65:
ce:e2:07:6e:89:a7:6f:54:e7:1e:ed:12:7d:7d:6c:20:0c:a8:
e3:ce:ca:77:54:3e:3f:1c:e9:7b:11:93:a0:df:6f:88:28:d9:
56:81:b6:35:8c:0c:88:d1:eb:97:4c:54:3e:b9:b4:ca:77:c3:
7d:a1:46:dc:d7:37:28:86:23:b4:b5:5c:7e:5f:2c:b8:56:a6:
15:84:61:fe:a4:13:31:b8:f7:fe:0c:b6:cc:ed:83:34:26:e7:
7a:8a:6a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:27 2025 by rpki-client