Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
File: Si5_568rpaMEbhdkT6vo8Di0598.mft (raw, json)
Hash identifier: pqsxz/x2SCmYmADz30P0Qmw/bY+jjImWuqgpjZnb7v8=
Subject key identifier: 74:8D:86:93:9D:41:54:87:75:FE:2E:AF:26:99:54:94:11:FB:7A:F6
Authority key identifier: 4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
Certificate issuer: /CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Certificate serial: 0194BB299998075D3375A06FF0C2B57D2015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
Manifest number: 0CAE
Signing time: Fri 31 Jan 2025 07:00:52 +0000
Manifest this update: Fri 31 Jan 2025 07:00:52 +0000
Manifest next update: Sat 01 Feb 2025 07:00:52 +0000
Files and hashes: 1: Si5_568rpaMEbhdkT6vo8Di0598.crl (hash: pgLibMTEPZQVtPXBO4VnL+nqgmP7kJTmXd0ICoD4dII=)
2: x05kuSTQillWAvYC1VSvIsPJiaU.roa (hash: YaAmDXOkb7npVO3SgdzcRdFaOrP01AvggeHWb2jbRUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:99:98:07:5d:33:75:a0:6f:f0:c2:b5:7d:20:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Validity
Not Before: Jan 31 07:00:52 2025 GMT
Not After : Feb 1 07:00:52 2025 GMT
Subject: CN=748d86939d41548775fe2eaf2699549411fb7af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f4:7a:0b:0a:04:f4:13:25:14:3d:f4:b9:94:
5b:88:1b:49:d2:ef:f4:01:25:5a:0a:5f:48:28:60:
71:49:fe:36:45:2c:f0:12:c5:61:23:87:e3:07:43:
85:61:a5:66:69:cb:90:72:35:70:a4:57:7a:88:cf:
7b:07:0c:e7:68:80:89:e6:f1:aa:81:7d:ee:dd:50:
95:c6:f0:d1:33:20:7a:e8:9a:ea:e4:42:27:08:e2:
0c:85:06:11:50:7e:58:cc:59:c7:5a:95:44:6d:0f:
c7:14:39:a7:4c:33:9f:74:db:ba:36:54:a1:a1:cb:
5b:1d:1d:cc:d8:c8:db:79:9d:a9:04:d1:30:92:fd:
d2:1e:d5:5b:e8:1b:91:04:41:0b:f7:47:f1:86:ae:
25:c7:99:21:ae:31:4c:36:51:a6:ab:5d:24:22:9a:
20:66:59:67:8a:a7:cb:3c:51:47:e4:b5:28:41:19:
2c:43:d4:88:ec:6c:4f:ba:02:9a:15:13:01:0d:6f:
68:47:aa:d1:68:97:ba:02:81:34:02:a5:f1:7f:12:
1f:59:f2:5a:b5:0f:2c:67:6b:ac:39:55:e6:16:ef:
40:b2:af:f1:31:55:f5:64:c5:f5:d5:ce:62:ea:27:
d9:2e:cb:b9:1f:ca:a1:a4:af:2e:80:e3:bb:f3:71:
9c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8D:86:93:9D:41:54:87:75:FE:2E:AF:26:99:54:94:11:FB:7A:F6
X509v3 Authority Key Identifier:
keyid:4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a9:63:fe:d9:bd:f0:e7:bc:8e:00:eb:15:14:a5:e9:0d:4b:
70:76:b8:66:2b:99:c8:3a:da:99:94:3e:92:7a:bd:f7:7b:93:
77:e4:b6:8c:99:18:e5:ae:1d:aa:5d:e2:36:63:33:39:40:90:
31:51:6d:4d:da:7e:d6:83:4c:3a:cf:b1:90:5e:db:c9:e1:0b:
ae:d6:d5:7a:ec:07:1b:d0:fb:f3:e7:f3:66:79:6b:d5:20:83:
58:19:8a:4f:74:64:72:25:a3:bf:ea:98:52:8b:83:da:71:95:
26:1a:eb:21:83:1a:00:f7:91:5a:b0:aa:55:b9:43:9a:d6:d1:
20:af:52:1c:cb:ef:f8:67:ff:e1:6b:72:21:b0:b9:04:58:e1:
2a:4f:bc:50:19:ae:e6:31:84:12:0b:b1:68:9b:bc:b3:17:76:
fa:57:36:9c:9f:04:5a:6f:75:5b:2f:64:d5:b6:16:b3:f5:93:
d2:a9:02:72:45:89:73:b1:ce:2e:17:b5:16:b7:ed:45:da:7f:
2d:41:98:35:f7:81:45:02:e3:25:70:9b:46:8a:d7:f1:b0:ce:
ef:e6:be:bf:27:ad:e4:44:62:de:3b:08:e6:cb:c6:17:07:54:
95:f6:a4:e2:7e:e8:53:bb:f6:42:75:d9:83:ae:5c:3d:ed:22:
6e:e3:81:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KZmYB10zdaBv8MK1fSAVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMmU3ZmU3YWYyYmE1YTMwNDZlMTc2NDRmYWJlOGYwMzhi
NGU3ZGYwHhcNMjUwMTMxMDcwMDUyWhcNMjUwMjAxMDcwMDUyWjAzMTEwLwYDVQQD
Eyg3NDhkODY5MzlkNDE1NDg3NzVmZTJlYWYyNjk5NTQ5NDExZmI3YWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PR6CwoE9BMlFD30uZRbiBtJ0u/0
ASVaCl9IKGBxSf42RSzwEsVhI4fjB0OFYaVmacuQcjVwpFd6iM97BwznaICJ5vGq
gX3u3VCVxvDRMyB66Jrq5EInCOIMhQYRUH5YzFnHWpVEbQ/HFDmnTDOfdNu6NlSh
octbHR3M2MjbeZ2pBNEwkv3SHtVb6BuRBEEL90fxhq4lx5khrjFMNlGmq10kIpog
ZllniqfLPFFH5LUoQRksQ9SI7GxPugKaFRMBDW9oR6rRaJe6AoE0AqXxfxIfWfJa
tQ8sZ2usOVXmFu9Asq/xMVX1ZMX11c5i6ifZLsu5H8qhpK8ugOO783GcgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSNhpOdQVSHdf4uryaZVJQR+3r2MB8GA1UdIwQY
MBaAFEouf+evK6WjBG4XZE+r6PA4tOffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2k1XzU2OHJwYU1FYmhka1Q2dm84RGkwNTk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kOWVlYjgtNzkxNC00MDQ3LWI1NzMt
ZTY3MGEyZDQ3Yjg2LzEvU2k1XzU2OHJwYU1FYmhka1Q2dm84RGkwNTk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9kOWVlYjgtNzkxNC00MDQ3LWI1NzMtZTY3MGEyZDQ3Yjg2
LzEvU2k1XzU2OHJwYU1FYmhka1Q2dm84RGkwNTk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqlj/tm9
8Oe8jgDrFRSl6Q1LcHa4ZiuZyDramZQ+knq993uTd+S2jJkY5a4dql3iNmMzOUCQ
MVFtTdp+1oNMOs+xkF7byeELrtbVeuwHG9D78+fzZnlr1SCDWBmKT3RkciWjv+qY
UouD2nGVJhrrIYMaAPeRWrCqVblDmtbRIK9SHMvv+Gf/4WtyIbC5BFjhKk+8UBmu
5jGEEguxaJu8sxd2+lc2nJ8EWm91Wy9k1bYWs/WT0qkCckWJc7HOLhe1FrftRdp/
LUGYNfeBRQLjJXCbRorX8bDO7+a+vyet5ERi3jsI5svGFwdUlfak4n7oU7v2QnXZ
g65cPe0ibuOBiw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:27 2025 by rpki-client on console-fra.rpki-client.org