Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
File: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft (raw, json)
Hash identifier: Ya+E9qbWCIQtrAngpOCJvqxRVbIuOBs+/CVOEKyZ+pY=
Subject key identifier: F8:46:DF:F7:3E:BE:98:F2:54:96:C0:55:5D:75:73:8A:E1:41:18:9B
Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94
Certificate serial: 0194BB292ADDA3B6AF9295B5ADBA7F834C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
Manifest number: 0EB5
Signing time: Fri 31 Jan 2025 07:00:24 +0000
Manifest this update: Fri 31 Jan 2025 07:00:24 +0000
Manifest next update: Sat 01 Feb 2025 07:00:24 +0000
Files and hashes: 1: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl (hash: Um1ZvLMgXNtGXXNESpqmK+uppx5ldoOoNlJMDc1GgZk=)
2: Ixi6Iu1s_azsg7gT1vp8GAKjehk.roa (hash: 2FsA5WHKtbk04OgMfAS2wYrqdHkHBCfhy5Jp5cWaqXg=)
3: j7PmpSFhgBjVYHJZ9v-oJkPT_1s.roa (hash: coCXdiUavSzSexx19Rr3HiHaVSAnRm2htTb2x9gwHcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:2a:dd:a3:b6:af:92:95:b5:ad:ba:7f:83:4c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94
Validity
Not Before: Jan 31 07:00:24 2025 GMT
Not After : Feb 1 07:00:24 2025 GMT
Subject: CN=f846dff73ebe98f25496c0555d75738ae141189b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c2:aa:76:9c:0f:07:cb:1b:75:0d:16:3a:b1:
46:a8:91:61:0d:5a:d9:c5:6d:56:e3:14:30:c7:e0:
3f:e0:2e:ed:00:67:84:03:78:a0:d8:0f:fa:6b:55:
2e:cd:89:55:2f:6a:44:61:37:43:b1:a9:06:f4:7e:
89:0a:94:ef:10:8f:9d:e5:f6:74:7f:13:f8:47:4f:
d6:05:fe:33:00:45:16:7f:6f:cf:93:f6:e5:f8:b6:
3f:08:31:9e:03:5e:2f:53:bd:bd:bb:11:bc:52:d2:
5b:2d:7b:6e:c3:d2:e7:99:7c:f8:5f:36:10:8d:97:
a4:18:3e:30:23:4f:f2:c0:09:5d:f7:23:22:0e:86:
ee:5d:46:42:57:4c:f6:e8:12:ac:6c:04:3c:4e:28:
1c:0a:31:2a:2a:25:82:11:6e:e4:8c:23:59:5c:54:
fa:1d:1f:91:10:b2:89:b8:24:34:05:d2:d3:8c:76:
57:9b:87:92:c5:77:1e:b0:81:da:e2:d5:a8:37:72:
b0:da:31:1f:65:fc:a7:f9:35:82:af:43:8d:34:33:
54:6b:19:ef:42:3c:a0:e4:a1:b8:2f:72:83:10:65:
89:0d:63:22:d8:b1:8c:92:fc:5a:5a:39:d6:ad:65:
51:83:0c:64:e0:32:d7:f6:e4:69:10:8c:9e:7d:c7:
03:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:46:DF:F7:3E:BE:98:F2:54:96:C0:55:5D:75:73:8A:E1:41:18:9B
X509v3 Authority Key Identifier:
keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:43:b2:78:e6:12:00:8b:08:8c:00:fc:ae:a9:1a:f1:ae:78:
27:87:be:39:a7:62:26:d9:8a:80:e1:45:93:05:db:e2:21:2d:
bb:4b:ea:c6:73:33:03:5b:ad:ca:f2:df:ed:ec:d8:12:a1:00:
ea:70:1c:7e:2f:0a:a0:89:7c:56:7a:ea:e6:8a:36:f5:6d:22:
48:b6:33:ba:39:dc:15:4b:c2:e4:32:a9:30:1e:5a:7b:82:fd:
a7:42:b5:4c:bf:4c:ea:e7:ad:15:5d:30:b0:a8:93:f1:1b:d2:
e4:9a:11:49:b8:58:d0:04:58:42:a0:2d:c1:c8:b3:cd:95:6e:
49:a8:be:90:04:17:42:2c:cf:1e:8d:e4:40:a3:0f:26:9b:c8:
91:1b:0e:26:e5:7b:ec:4e:f0:1c:12:50:c3:ac:fe:30:02:0d:
e5:c5:16:bf:4f:c9:bb:77:3e:a5:a2:43:19:a4:d8:08:40:73:
64:c9:e9:04:31:2a:80:52:b0:90:67:c3:62:9f:fb:23:42:07:
e1:55:be:ea:da:43:7b:36:0e:db:38:81:07:d7:48:4d:25:0a:
07:2f:17:c6:d2:9a:ee:e7:1d:c9:64:63:0b:9e:f4:4c:23:87:
af:54:e4:76:77:76:2f:79:1c:3d:33:a4:39:e3:d3:91:5c:ec:
f0:89:5c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:57 2025 by rpki-client on console-fra.rpki-client.org