Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
File: r0E_0q2eJchLwLWeYIpkNmPmu2g.mft (raw, json)
Hash identifier: RifhmnCaxCaERsdpje+XoOtFtD4OU0bb7H3j2YupbjI=
Subject key identifier: 5A:5E:EF:5C:CC:F4:58:29:F3:F3:A8:98:CF:2A:A5:5B:C6:E7:F9:C6
Authority key identifier: AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
Certificate issuer: /CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Certificate serial: 0194C499F7C712188D7891C90A2332F1B045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
Manifest number: 0536
Signing time: Sun 02 Feb 2025 03:00:12 +0000
Manifest this update: Sun 02 Feb 2025 03:00:12 +0000
Manifest next update: Mon 03 Feb 2025 03:00:12 +0000
Files and hashes: 1: 0oGqULcqh7TjR1aiXv8XIf0-NOc.roa (hash: Z5ZVfPbO731TWKbW3nZdYbx/03d2bvLNYy1oWzqtiJI=)
2: r0E_0q2eJchLwLWeYIpkNmPmu2g.crl (hash: eIT6Z/G9SjgaZIXP4m618JtU6QOPEVVU8Uj8D4hDF40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:99:f7:c7:12:18:8d:78:91:c9:0a:23:32:f1:b0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Validity
Not Before: Feb 2 03:00:12 2025 GMT
Not After : Feb 3 03:00:12 2025 GMT
Subject: CN=5a5eef5cccf45829f3f3a898cf2aa55bc6e7f9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:4f:5c:ae:13:86:2a:03:8c:8e:a2:8f:ac:5d:
5e:e9:8e:68:b4:f1:5a:55:5f:f0:89:f2:49:94:85:
c8:e0:a6:b0:ca:59:3c:77:da:62:f3:f9:2e:e0:ba:
7c:de:52:bc:58:72:ed:7d:70:9d:61:a3:4f:e1:66:
0a:a3:7f:5f:97:48:b3:2c:f0:09:cb:6f:c7:c1:5e:
d6:4d:6c:31:06:95:48:9b:e3:b9:21:d3:ce:54:42:
10:6e:b5:b5:86:f2:d5:6d:25:0c:7e:25:ab:bf:8b:
6e:ca:f3:f0:5d:8d:4c:db:ad:2f:f8:5e:56:c2:8d:
5f:78:83:50:b3:a6:82:75:c1:ef:08:8b:9a:9b:08:
31:b0:45:dc:7c:b0:42:7e:56:14:8b:f0:41:0b:00:
b3:f3:5f:2f:08:99:be:3e:89:99:f8:a9:64:b4:6d:
be:94:cd:97:e6:e2:11:15:09:10:49:03:76:dc:d2:
3b:02:14:b5:43:ad:12:42:7b:08:97:46:25:87:19:
f1:31:54:b0:72:c8:2d:f3:0a:14:3b:28:ba:2a:a1:
94:27:8c:0f:01:f1:7e:6a:37:7d:1b:a7:9e:2d:62:
f5:9a:d0:da:5a:8f:05:83:18:75:2c:41:01:5a:e2:
4d:7a:a1:9b:d3:ac:2e:05:b2:be:47:3b:10:41:48:
07:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5E:EF:5C:CC:F4:58:29:F3:F3:A8:98:CF:2A:A5:5B:C6:E7:F9:C6
X509v3 Authority Key Identifier:
keyid:AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:19:97:70:f9:52:2a:0d:b6:3d:a7:f7:8a:a4:93:af:9e:36:
d3:ec:83:dd:f1:6a:d0:16:de:f1:cd:d3:15:4c:98:71:7f:67:
2b:ca:76:99:49:13:61:55:9a:c0:19:14:7c:c7:40:32:8f:20:
43:88:d7:46:18:f1:b6:7f:68:e8:a0:3c:2e:fe:45:24:f0:77:
49:b1:fb:6e:a5:66:35:1c:c5:9a:9c:71:fc:f1:1f:19:15:c1:
fa:b9:df:90:39:66:02:53:1e:21:9b:d6:4b:62:9f:93:0c:f5:
e4:3a:71:42:bd:08:c7:78:09:e2:97:72:62:ce:e3:f0:8d:db:
59:eb:a6:a7:13:3c:7c:37:4b:7f:4b:c2:37:43:54:e1:51:bd:
1c:9f:6b:6b:80:ce:6b:0d:45:53:5c:ce:5b:97:89:67:67:fa:
4f:42:52:a1:a2:94:75:0a:e9:95:ca:06:3f:b4:c8:30:19:81:
1f:a4:12:1c:4c:30:f4:b9:e6:60:d9:9f:e2:31:be:f0:a4:a8:
29:53:ba:5e:99:a8:1d:e7:80:6b:fa:f4:fe:dc:d2:0c:12:c1:
72:13:62:fb:2a:e3:ca:23:81:cb:8e:5f:d6:70:dd:eb:46:a7:
7b:3c:e5:bb:1b:26:e9:19:a3:83:c7:8a:a4:b7:f9:f7:7c:e7:
40:03:df:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:53 2025 by rpki-client