Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.mft
File: shna0BUe3wUqLxyX34hKWoeotfU.mft (raw, json)
Hash identifier: DK7s2Jvr/1uDi22cAtvyrBq7/6URyM3sInvVmw61350=
Subject key identifier: 71:50:5B:03:68:67:71:F4:DA:B4:0D:91:9D:CA:5B:0D:0D:81:93:F4
Authority key identifier: B2:19:DA:D0:15:1E:DF:05:2A:2F:1C:97:DF:88:4A:5A:87:A8:B5:F5
Certificate issuer: /CN=b219dad0151edf052a2f1c97df884a5a87a8b5f5
Certificate serial: 0194BABB9DD4454CEE567C005545C1A24315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shna0BUe3wUqLxyX34hKWoeotfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.mft
Manifest number: 05CD
Signing time: Fri 31 Jan 2025 05:00:45 +0000
Manifest this update: Fri 31 Jan 2025 05:00:45 +0000
Manifest next update: Sat 01 Feb 2025 05:00:45 +0000
Files and hashes: 1: shna0BUe3wUqLxyX34hKWoeotfU.crl (hash: eQAzjMk4aL/r8fKJA82LRExrVa5N+2BClXPP9X4paU0=)
2: yqdi2I4mvyqmB4-2BzPkMkJ3hIY.roa (hash: oTSjwH5eKf8we68+dtERfn9uiSN2W5Nb5pDWgRrwsxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/shna0BUe3wUqLxyX34hKWoeotfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:9d:d4:45:4c:ee:56:7c:00:55:45:c1:a2:43:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b219dad0151edf052a2f1c97df884a5a87a8b5f5
Validity
Not Before: Jan 31 05:00:45 2025 GMT
Not After : Feb 1 05:00:45 2025 GMT
Subject: CN=71505b03686771f4dab40d919dca5b0d0d8193f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:56:b8:6d:31:76:4e:95:2e:45:11:8a:6b:68:
b6:91:8c:d1:4e:33:13:1a:f6:da:45:1b:12:77:69:
00:e8:31:87:b0:1d:15:27:71:89:b4:af:af:09:8c:
35:be:3f:3e:c5:a9:bd:e1:5e:23:e2:e2:59:0d:95:
c3:6d:d2:06:2e:e0:bb:2b:b1:4b:07:a6:8c:5a:43:
71:9b:f3:59:c8:04:ea:78:73:b7:36:0b:67:38:67:
1b:30:fb:e0:25:c6:3e:0c:fd:24:39:9b:04:1d:6c:
95:49:ed:32:79:3d:e1:4e:9a:88:3e:88:5e:02:90:
c7:41:c3:18:51:43:e4:27:8d:3e:99:6c:10:c0:a6:
e6:9d:01:10:d2:ff:39:c5:46:77:70:8d:f3:88:58:
3f:62:64:72:2d:a8:b8:d5:80:fe:76:34:f5:18:3c:
27:b7:55:36:3e:2b:17:e0:5a:bc:03:36:45:c4:e0:
ba:48:b5:bb:f6:a9:c9:ee:3b:e9:8f:17:7b:78:22:
39:3b:0f:c5:3a:ce:51:e2:c8:4d:f9:09:fc:9b:84:
94:a8:d2:cd:e6:bb:41:50:5d:b6:6a:ba:51:4d:a0:
cc:2f:8d:f0:99:e3:91:9a:15:b9:98:8e:22:df:29:
f4:84:25:d8:ba:31:0b:94:77:aa:56:47:d9:f9:cd:
5f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:50:5B:03:68:67:71:F4:DA:B4:0D:91:9D:CA:5B:0D:0D:81:93:F4
X509v3 Authority Key Identifier:
keyid:B2:19:DA:D0:15:1E:DF:05:2A:2F:1C:97:DF:88:4A:5A:87:A8:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shna0BUe3wUqLxyX34hKWoeotfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:39:08:e3:94:d2:29:4f:22:a9:90:d5:67:93:a6:db:fc:05:
29:36:15:bf:28:d5:c6:0a:34:34:9d:81:06:d7:24:9a:a1:4e:
54:e2:83:eb:72:d9:d3:8f:23:4d:ed:bb:1e:bc:35:39:ca:d4:
0b:b6:52:af:6f:0f:4d:79:6a:66:c1:e6:ed:b5:fe:85:be:b4:
7b:f1:df:8c:99:f3:a6:c3:e4:35:f8:aa:da:5e:7b:d0:ba:3f:
ec:a1:63:74:0a:ec:f3:6c:aa:88:35:cf:88:1a:98:ae:37:69:
95:20:7f:d8:48:24:6a:f1:a3:b5:07:f8:90:1b:65:3c:52:49:
7e:70:fd:23:db:c7:be:b6:4f:9a:a7:6c:9a:d9:1d:e4:54:bf:
1a:df:61:25:ba:3e:03:84:9e:a8:16:64:0c:9a:ab:87:c9:82:
74:d2:34:24:a4:a4:85:db:d5:cb:8e:a0:36:cf:74:e0:28:d6:
b4:36:1b:8c:26:fd:be:c2:5a:d5:85:d4:ba:74:b4:08:2e:fd:
18:b5:4a:c1:b7:e4:cc:f1:19:df:d4:a3:eb:20:57:63:29:63:
ce:2b:4a:26:4e:93:b3:e4:11:bd:d3:3a:72:d8:90:74:34:39:
a5:93:d5:3b:ba:bb:ab:0a:03:65:47:0f:f3:b9:ea:c4:03:05:
ae:6c:3c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:28 2025 by rpki-client on console-fra.rpki-client.org