Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
File: 5qr3mKBsFXlcb-xweYOYvrD01m4.mft (raw, json)
Hash identifier: QBTfi1tN4j9Jia65LBr+P7mAQLrncBSnIzFD/vB0DM8=
Subject key identifier: 97:B9:57:AC:10:C3:5F:AE:2E:2E:28:94:96:58:C4:BC:61:B4:1A:C4
Authority key identifier: E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
Certificate issuer: /CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Certificate serial: 0194BB5FDFD1F4E95F7C249B84B995CEA929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
Manifest number: 0212
Signing time: Fri 31 Jan 2025 08:00:10 +0000
Manifest this update: Fri 31 Jan 2025 08:00:10 +0000
Manifest next update: Sat 01 Feb 2025 08:00:10 +0000
Files and hashes: 1: 5qr3mKBsFXlcb-xweYOYvrD01m4.crl (hash: Kn2Jd25Yo5pKmRucNluA01SJ8y87peYIuSU6L+dqyq4=)
2: QF9fIw7vy0eAFpEn9gjeokPnPnM.roa (hash: q/KInKHcPLJ4cSVDaCLVjiOhhH/dOxf+Ggq3kQQJxYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:df:d1:f4:e9:5f:7c:24:9b:84:b9:95:ce:a9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Validity
Not Before: Jan 31 08:00:10 2025 GMT
Not After : Feb 1 08:00:10 2025 GMT
Subject: CN=97b957ac10c35fae2e2e28949658c4bc61b41ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:ac:51:97:7f:4b:47:9d:04:27:11:39:3b:
90:6f:b6:01:5c:60:b3:35:f0:84:e4:38:58:f9:ac:
eb:a4:84:d9:1c:86:b3:80:af:ac:53:06:c2:78:ae:
83:7d:d3:a6:c2:8c:80:c0:d8:e4:67:c6:17:18:ac:
9e:b4:4e:b4:dc:86:76:79:88:09:78:11:94:5e:f2:
6f:3d:de:6b:fb:d5:fd:fb:7f:24:42:b1:99:21:f7:
61:c8:69:e1:77:09:42:62:0f:5f:ef:1a:ac:32:56:
cd:bc:a2:6a:2a:68:63:77:2e:89:32:00:c5:37:9e:
5d:97:74:8e:94:da:98:1a:4d:05:4c:c3:5a:15:9c:
60:27:a1:bb:45:b1:46:03:14:56:7b:c5:dd:4d:8a:
23:b5:88:b5:ee:24:12:e0:ee:53:68:af:cb:76:42:
5c:89:f8:ea:21:eb:5e:bc:35:8b:2e:67:c6:09:37:
96:ec:43:ea:48:f9:6f:d2:81:c4:6d:93:11:16:06:
98:9c:dd:16:e9:b0:bc:b9:fd:00:b4:f8:3d:d1:21:
74:ca:90:bf:e9:38:2a:21:3b:ad:ff:bf:be:92:68:
a6:7d:a6:82:8e:a8:55:1d:41:1e:c7:56:74:ca:b4:
87:b2:d7:5b:0f:a2:66:51:44:44:e7:cd:67:d6:6e:
37:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B9:57:AC:10:C3:5F:AE:2E:2E:28:94:96:58:C4:BC:61:B4:1A:C4
X509v3 Authority Key Identifier:
keyid:E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:26:4a:d5:9e:17:d2:f4:df:be:80:bd:68:8a:26:4d:8d:4b:
e0:e8:28:97:0c:9e:eb:5d:cd:df:30:6c:0d:19:cd:22:6f:f9:
a6:16:91:fe:1e:62:05:7f:48:2f:f0:ce:d5:c0:c7:eb:87:04:
66:66:68:7e:a7:38:ab:17:63:b1:e0:74:0d:5b:2e:37:92:e3:
a5:35:ad:00:57:36:3a:6c:bb:ed:76:db:3d:82:d7:63:33:8e:
e0:89:ac:9d:fe:65:36:8e:b5:7b:e1:08:bd:f3:bc:42:7b:4c:
81:3a:eb:89:f7:39:e6:a1:f3:3d:18:a9:13:78:c3:07:f6:c6:
27:61:32:27:90:07:84:8a:aa:2b:4e:60:fb:0e:d7:18:5b:50:
0b:48:0b:c5:95:af:4b:26:99:aa:55:d1:0b:74:a9:09:65:93:
c1:e3:a4:cc:41:db:2e:6a:42:c9:dd:a8:91:c5:9b:84:92:8f:
ff:96:24:a1:68:c5:ea:19:c0:db:7e:cf:ba:66:cd:f6:bf:c4:
ad:89:49:ee:87:d5:09:73:eb:94:e9:7c:a4:fd:18:2c:ec:de:
00:9e:11:4b:02:25:4a:4d:9d:90:7f:74:a5:36:94:5b:43:72:
ae:de:22:30:e6:9e:68:07:0f:46:2b:d5:b6:ac:e2:34:d0:3c:
a5:c9:4e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:59 2025 by rpki-client on console-fra.rpki-client.org