Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
File: 5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft (raw, json)
Hash identifier: FRaX+NQ0fgCGq2iEz+sj1p4E7BLc2ucZi2cnuo2CHaQ=
Subject key identifier: FA:D9:75:45:DD:F8:C9:AD:1E:20:ED:22:5E:06:CD:D8:AA:1E:3F:E8
Authority key identifier: E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5
Certificate issuer: /CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5
Certificate serial: 0194BABB685499D7CD574C1F9ADB09F7C027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 05:00:31 +0000
Manifest this update: Fri 31 Jan 2025 05:00:31 +0000
Manifest next update: Sat 01 Feb 2025 05:00:31 +0000
Files and hashes: 1: 5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl (hash: prdFs1fU5pagEzJIwQctNvc5EsK88YL+joZiGMWUb/Q=)
2: VGd9KjMwAgOKsTmpV-66ONuVSdc.roa (hash: DDJ2sEHFTQOmIwDAMdVrMbf0vg81gKq/jz/yH3diG9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:68:54:99:d7:cd:57:4c:1f:9a:db:09:f7:c0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5
Validity
Not Before: Jan 31 05:00:31 2025 GMT
Not After : Feb 1 05:00:31 2025 GMT
Subject: CN=fad97545ddf8c9ad1e20ed225e06cdd8aa1e3fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7e:42:a4:a0:79:39:59:98:07:07:7d:5d:a9:
73:38:e8:3f:9c:b1:ca:fc:c8:a8:32:af:d1:a7:a8:
7e:cd:43:fb:a8:be:5f:89:d9:23:da:9d:c6:8e:d4:
ea:c7:11:48:cb:37:7e:96:0c:f1:17:11:e1:0d:a5:
0b:06:e4:58:54:0b:9c:68:fb:11:16:f8:05:36:7b:
0b:96:8e:e1:77:57:ae:7b:e2:99:67:5c:27:b1:51:
35:44:64:5e:5b:51:47:de:3d:a9:b1:6c:0c:67:f7:
30:85:37:55:3c:63:ff:12:a3:76:57:0d:dd:87:4b:
ce:44:4b:22:9c:5c:f8:48:c9:7f:c7:31:1c:b0:14:
29:b2:ab:7c:d1:e3:03:b4:b3:f4:de:67:eb:d7:1a:
13:c9:51:6d:fd:1b:d9:f0:79:dd:2c:a9:7c:91:3e:
76:3c:d0:48:13:32:0f:94:a7:00:11:31:a1:6c:b5:
a4:c3:ab:91:53:3b:b5:89:37:56:00:a0:98:0f:bb:
7e:2c:a8:5c:2a:7a:48:71:aa:ab:cb:73:2b:6d:b9:
69:37:d5:6d:47:bd:a2:2f:d5:97:cc:e6:a2:23:46:
af:1e:8c:a4:32:ce:aa:7b:db:f1:06:e7:b5:7c:f8:
21:d6:ea:d1:00:77:07:e9:af:f7:f7:42:e2:2c:7e:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D9:75:45:DD:F8:C9:AD:1E:20:ED:22:5E:06:CD:D8:AA:1E:3F:E8
X509v3 Authority Key Identifier:
keyid:E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:4b:ea:49:77:f6:a6:49:f8:34:26:57:bc:0e:c6:55:40:b0:
33:38:32:df:19:56:59:42:af:b9:45:78:ca:5a:c7:4a:d7:77:
b1:d0:74:95:a8:df:93:9b:8c:05:08:35:69:16:29:ca:ae:a6:
20:73:31:17:ec:2d:db:f8:54:63:17:97:fa:4c:75:c4:48:ee:
d2:32:1a:f3:5f:86:9a:cb:02:f9:a9:8c:86:29:f6:01:1d:aa:
cb:09:d4:af:ea:73:43:09:44:e0:ef:a1:31:10:23:aa:57:a2:
6d:cc:46:ce:05:ef:c1:f6:79:15:0b:63:01:7c:5a:e1:8d:0a:
76:4d:ce:25:24:d4:97:d9:4e:ff:8e:8e:ee:6c:93:9f:11:2e:
e7:19:8e:7e:b3:44:0b:55:e0:a7:fd:1a:8f:8a:95:db:ac:d0:
d9:66:40:f7:da:95:72:b3:38:f3:34:67:75:6a:9f:a4:22:35:
c0:fd:6f:16:94:a3:e7:c4:fe:9c:e4:ec:9f:4d:8f:6b:b4:ea:
5e:c1:44:90:57:7f:0b:90:d8:78:5b:1b:31:61:73:2d:8e:6e:
39:eb:a2:64:94:39:98:5c:96:1e:bf:e6:f7:63:db:61:e8:4e:
56:6b:24:bc:11:b5:2c:75:a0:7a:1f:0a:ac:0d:a2:38:bb:cd:
a0:a5:ac:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:00 2025 by rpki-client on console-fra.rpki-client.org