Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
File: U5Nwh4FLQ1glRwBp255yPb5yjzs.mft (raw, json)
Hash identifier: sXRuj/rNuK6TT7frN4WtsxYxOjIdj+y1eTI2Gjj2Un0=
Subject key identifier: 70:3E:C1:CA:70:5F:D9:12:B0:C5:8E:07:45:EE:C2:5E:52:9C:84:EA
Authority key identifier: 53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B
Certificate issuer: /CN=53937087814b435825470069db9e723dbe728f3b
Certificate serial: 0194BA84418C765F735A45219B2653D70C10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 04:00:17 +0000
Manifest this update: Fri 31 Jan 2025 04:00:17 +0000
Manifest next update: Sat 01 Feb 2025 04:00:17 +0000
Files and hashes: 1: U5Nwh4FLQ1glRwBp255yPb5yjzs.crl (hash: w/SQncWJGdd/fMpMATQpPEySH+8e+vy41CKsYegxFOE=)
2: XysHQU0TQpQ18huR7cIIDrfZWfY.roa (hash: NtroWgAMFvSSwwYDxpo3NQGtG+bQQozP9je3mTfJHRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:41:8c:76:5f:73:5a:45:21:9b:26:53:d7:0c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53937087814b435825470069db9e723dbe728f3b
Validity
Not Before: Jan 31 04:00:17 2025 GMT
Not After : Feb 1 04:00:17 2025 GMT
Subject: CN=703ec1ca705fd912b0c58e0745eec25e529c84ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:c0:32:b7:0b:94:ab:4c:4b:dc:f3:96:06:
d0:a1:fe:78:39:e6:a4:29:a6:03:fd:e1:2a:14:a2:
ee:95:48:5f:56:73:f5:68:d8:c5:67:99:60:90:6e:
f3:76:41:bf:f0:ca:ba:b9:40:6b:3b:f8:05:22:a3:
f2:61:2e:6c:3b:f6:db:e7:b1:fd:1b:60:c1:2f:26:
98:a5:b2:1e:10:7b:3e:3c:81:cb:1c:2c:70:20:2d:
16:5d:74:42:77:33:7c:10:13:b5:fb:3a:cb:d0:8f:
43:65:98:98:af:59:8c:0f:a8:2e:72:33:37:7c:03:
29:9b:8f:dc:7f:63:c5:68:3e:00:44:4f:91:a6:de:
61:a2:0f:d9:37:6e:6c:2b:0c:b8:af:ed:fb:0e:b9:
50:c5:8a:2c:72:71:ad:61:d7:b8:c6:2b:73:bb:79:
7c:bd:23:46:b8:65:d8:dc:99:5c:0f:7b:c8:04:6f:
c5:7d:31:82:e7:82:9b:a3:82:d0:42:33:67:b7:74:
b6:5d:c4:39:5f:d5:ee:d2:5d:13:0c:fa:d0:39:40:
e3:c9:86:c9:fb:25:04:41:b3:8c:8c:85:0f:d9:fd:
cd:bc:43:a0:7e:c9:fb:36:fa:3b:f3:80:3a:e8:ca:
9e:d5:6a:fa:d9:6a:ba:b1:8c:08:8f:01:14:e0:fb:
28:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3E:C1:CA:70:5F:D9:12:B0:C5:8E:07:45:EE:C2:5E:52:9C:84:EA
X509v3 Authority Key Identifier:
keyid:53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:18:ac:4b:0f:9c:3a:f5:bb:48:6a:3b:df:45:2e:2d:4b:0b:
6c:65:36:1a:06:c6:19:b6:89:ca:7e:e9:19:dd:26:ef:fc:d2:
3e:08:4c:91:5d:59:5e:0f:54:75:57:f9:4f:18:77:79:b7:18:
73:5c:fb:2b:f4:23:2b:62:d8:08:93:a4:a3:1a:cb:e7:6c:54:
8e:30:c6:f7:e8:80:fb:fa:a6:b0:ee:f0:c8:af:86:d3:2a:c9:
6d:2b:df:97:9a:b0:0a:d9:bb:a4:a3:b8:8b:b8:d8:a2:10:91:
5b:15:06:12:02:98:03:5d:3e:04:32:8d:3c:81:3e:08:35:b8:
51:d3:0b:60:c6:11:9d:da:3b:c4:38:d8:c3:85:2b:07:86:82:
a0:89:83:fc:b3:90:5d:f2:fd:a6:2a:cd:eb:32:6d:83:3b:bc:
1f:7e:7b:01:84:c4:6b:19:32:6a:f2:55:29:bd:f9:b7:0f:55:
ee:36:ee:85:d8:a5:89:b1:5c:42:0c:2a:4b:6b:44:b9:66:45:
f1:1b:fc:c7:11:7c:9f:b4:1f:91:9d:da:b8:fb:20:3d:65:97:
a1:02:fe:38:95:3e:e3:c0:c2:b9:77:e9:82:54:a6:d5:a0:d3:
1e:33:1c:39:e1:ea:64:e2:6e:d0:29:58:af:db:92:bc:ce:48:
f4:7a:3b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:09 2025 by rpki-client on console-fra.rpki-client.org