Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
File: r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft (raw, json)
Hash identifier: scfMfbOgCnl8syxPvaABC12NOrzF240HjIFHrMxgcJ8=
Subject key identifier: EF:D5:D8:56:7D:5C:46:2D:CD:0E:01:6B:E8:3F:FC:7A:87:40:76:EA
Authority key identifier: AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38
Certificate issuer: /CN=af934ec694af68134b7514c10dcd13857b459e38
Certificate serial: 0194BABB6CE7F9DF91FACDA7DDDF0B0384C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
Manifest number: 0E26
Signing time: Fri 31 Jan 2025 05:00:32 +0000
Manifest this update: Fri 31 Jan 2025 05:00:32 +0000
Manifest next update: Sat 01 Feb 2025 05:00:32 +0000
Files and hashes: 1: 3KVjDh6tV6LcIk6BDE6xPuXzBDM.roa (hash: bQvllPBonHjb5qHCFeaDeGABQpp//k5Dnzxk+0td390=)
2: r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl (hash: C+XuBEoUb1tyemLQ6H8RwYV17bcji2kBgYxI4Ap8nrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:6c:e7:f9:df:91:fa:cd:a7:dd:df:0b:03:84:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af934ec694af68134b7514c10dcd13857b459e38
Validity
Not Before: Jan 31 05:00:32 2025 GMT
Not After : Feb 1 05:00:32 2025 GMT
Subject: CN=efd5d8567d5c462dcd0e016be83ffc7a874076ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:4c:17:68:6f:30:38:8b:a6:07:a9:b2:89:
3b:f1:47:00:85:e9:0f:0c:9c:4e:c8:5d:ca:62:ff:
70:4a:e0:15:1c:ef:17:2d:db:49:6b:c7:12:55:69:
4b:f9:46:18:29:8e:b6:31:a0:22:d1:22:5a:c5:c3:
05:c2:50:41:43:d8:6f:6e:c9:b1:44:3b:d7:d6:56:
8d:dc:0f:dc:3d:b5:9c:5e:0c:55:28:35:b7:ca:40:
a8:10:1c:f8:05:39:ac:78:95:4a:a9:1b:44:26:b6:
3d:19:32:30:84:89:72:67:de:e4:52:0e:f2:10:16:
b5:39:30:be:94:51:df:4e:3b:ef:a6:4a:c0:0e:c5:
7a:9a:01:9c:63:a6:62:58:eb:56:8e:87:2d:84:f3:
30:31:eb:4c:00:35:eb:67:09:c6:80:3a:91:e2:0d:
02:c1:34:44:09:2e:77:66:52:da:14:3d:1c:e9:ea:
0b:46:af:04:30:e7:70:5b:3c:3d:b6:c4:24:e2:e8:
a0:b9:57:75:c0:a1:8d:8c:c4:99:45:1f:96:99:bc:
47:ff:f2:ed:8c:ed:71:bb:ab:5e:4e:f1:cb:b9:2f:
ae:8c:3e:7a:a3:96:fe:16:de:10:e2:21:23:f7:ec:
b8:6e:33:04:18:73:e4:b9:dc:69:1d:f9:60:d6:07:
64:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D5:D8:56:7D:5C:46:2D:CD:0E:01:6B:E8:3F:FC:7A:87:40:76:EA
X509v3 Authority Key Identifier:
keyid:AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3b:ab:51:cb:4a:7f:7a:c3:7e:41:11:a0:1c:a2:f9:ea:6e:
aa:a1:e9:46:18:c4:8a:78:3e:64:4c:fd:3d:7d:46:03:0f:24:
ff:4d:e0:a9:fb:8c:07:fb:76:09:00:5b:fa:31:ff:e9:15:66:
3b:7c:c2:97:4c:4c:a1:4a:e9:57:1d:e4:d9:53:a6:b7:dc:d5:
19:f4:07:41:69:33:07:14:5a:56:3f:dc:e8:55:a4:cb:61:cb:
fb:b0:b7:5d:ce:36:86:5a:27:fd:94:af:33:ce:e1:72:a1:0e:
70:68:4b:7a:7b:3e:73:7d:ac:64:80:d5:e6:83:c6:da:b2:c3:
56:08:e2:7b:6c:9d:af:c1:a1:d9:33:07:03:f8:f5:15:b9:84:
8d:1f:68:af:bc:25:6b:b9:3a:11:e1:78:2f:07:e5:19:bd:f3:
12:99:f5:13:71:c0:be:a4:1c:ff:0a:1e:f8:8a:42:09:0a:4c:
4a:62:03:2c:4e:fd:51:9b:be:72:4f:3c:0c:ef:e3:96:2d:52:
57:2b:f9:6a:d7:61:c5:f6:4f:3f:d1:62:83:3e:92:33:76:53:
58:d4:30:24:1c:23:28:36:21:2a:10:a4:cf:e3:a7:22:5a:00:
7d:2c:49:3f:5b:a5:a3:7d:78:aa:d3:6d:8a:b6:6b:42:5b:30:
74:11:38:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:55 2025 by rpki-client on console-fra.rpki-client.org