Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
File: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft (raw, json)
Hash identifier: mQnRAIO98gyQx66Kri8T1+azVFLIZ354XJ83qI60LK0=
Subject key identifier: DB:C1:37:35:0D:98:B4:22:53:3F:27:40:31:8F:9D:AF:2C:48:E1:9B
Authority key identifier: E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
Certificate issuer: /CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Certificate serial: 0194BB2977FE365F2B3DF20A9859CB009202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
Manifest number: 08DE
Signing time: Fri 31 Jan 2025 07:00:44 +0000
Manifest this update: Fri 31 Jan 2025 07:00:44 +0000
Manifest next update: Sat 01 Feb 2025 07:00:44 +0000
Files and hashes: 1: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl (hash: mjILVHzhjdqvfUia1sQBIKV9PmEDqqCO/rBwnXf2aww=)
2: uzOfDn3na_0H4FMYAvULbyI0B6c.roa (hash: uAuwh9KcLGGG4HeIvB3vA//BXxot+F12ayTtv/6riqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:77:fe:36:5f:2b:3d:f2:0a:98:59:cb:00:92:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Validity
Not Before: Jan 31 07:00:44 2025 GMT
Not After : Feb 1 07:00:44 2025 GMT
Subject: CN=dbc137350d98b422533f2740318f9daf2c48e19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:3f:10:13:84:f4:f3:dc:98:ac:3b:a0:ad:
0f:c1:1e:3e:80:d9:59:c6:20:47:a2:0e:98:2f:65:
53:5f:ea:52:4c:69:0f:50:cd:65:c9:db:e5:4c:14:
7d:8f:3c:80:d5:f0:b6:f5:ba:12:ab:1f:83:b7:7b:
98:91:b5:09:ae:df:00:e7:84:90:7b:cf:13:65:9a:
5f:ff:b2:55:88:77:ef:4c:73:f4:06:e7:fe:fa:da:
dc:60:6e:f8:91:26:62:f2:07:96:4e:b1:aa:64:8a:
de:ea:1e:af:08:42:80:e7:ee:24:e3:92:86:85:20:
fe:cd:2d:d5:1c:df:94:38:76:57:40:4b:db:b2:37:
c1:05:8e:67:82:b7:fc:88:dd:fe:2d:9e:f1:6a:e8:
67:04:e7:88:1d:c4:43:f7:b8:67:55:dd:37:e1:9e:
2e:05:37:bf:c0:3f:f9:29:12:73:3f:98:ef:2e:99:
60:34:c6:4c:c1:aa:18:57:f5:db:56:d3:00:04:10:
c1:66:b2:d5:24:47:13:8e:de:2a:26:1f:cb:b5:06:
2c:41:cf:07:64:29:07:79:61:7e:9c:94:68:a5:36:
4d:9f:5c:da:85:da:ca:11:0a:31:23:04:a5:3f:8b:
fd:bb:8d:ec:4b:1b:cd:58:6d:f5:5b:ec:8d:f9:83:
30:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C1:37:35:0D:98:B4:22:53:3F:27:40:31:8F:9D:AF:2C:48:E1:9B
X509v3 Authority Key Identifier:
keyid:E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:fa:69:39:21:28:42:02:3e:e1:0b:e5:f7:14:3a:f4:3e:35:
40:51:e6:07:54:b4:75:b6:c3:07:db:0f:99:bd:17:0e:3f:4f:
5c:1e:27:e9:ab:29:cf:37:cb:ad:89:ee:2f:83:f2:90:18:ba:
39:f6:70:80:94:66:75:55:5d:a7:37:b2:3f:95:5f:70:a7:fb:
ee:76:51:20:c6:f2:5a:f0:d9:5e:c7:13:01:32:e3:55:30:1d:
53:50:a7:5b:b0:8a:db:6f:69:8f:64:0d:12:8e:6b:e4:7e:9d:
db:25:a9:29:00:71:45:3d:be:6d:07:c6:6c:24:c9:91:da:ed:
20:5f:0f:1a:03:e3:23:e1:0c:28:4a:b1:03:9a:09:5e:f0:d7:
7e:41:71:eb:8a:bf:95:b0:c5:80:65:48:1d:3a:c4:59:f2:b8:
d3:b9:b0:7e:09:81:5e:2b:ff:29:48:84:37:77:a8:ac:13:6d:
ac:c8:25:10:5a:50:ca:e8:9d:aa:04:5c:bc:38:89:9d:c0:cc:
10:aa:12:95:f4:6f:9a:86:15:f3:32:cd:d2:47:44:4d:40:6d:
a6:c1:99:f1:58:63:50:61:e5:7d:93:66:bf:f8:1d:c1:24:80:
9c:4e:48:05:8e:e2:b7:1f:d8:5b:24:f8:77:6c:a4:35:a2:e5:
8d:fe:60:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:56 2025 by rpki-client on console-fra.rpki-client.org