Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
File: 5RgEXPvZajduyY4_Xosq-xTMqTw.mft (raw, json)
Hash identifier: DGb3np44Yb34ABUQdpFQm3xURQgbM6YdiUDT6buAAgA=
Subject key identifier: 05:9A:7C:8B:B2:D6:05:18:7C:71:75:29:64:07:64:B6:2A:7E:7A:BA
Authority key identifier: E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
Certificate issuer: /CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Certificate serial: 0194BB601FAE6C7E7CCB56849280AC888073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 08:00:26 +0000
Manifest this update: Fri 31 Jan 2025 08:00:26 +0000
Manifest next update: Sat 01 Feb 2025 08:00:26 +0000
Files and hashes: 1: 5RgEXPvZajduyY4_Xosq-xTMqTw.crl (hash: fLOump1tW1tODijfzk8oZzdfBWbN131551Yk1ztwbfk=)
2: OHRptNvQN7btyzlZYvC9PKCpnpY.roa (hash: mAc+fZIgpvpgde9/WLkYrKDLdCBnkog0duL73LIoIB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:1f:ae:6c:7e:7c:cb:56:84:92:80:ac:88:80:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Validity
Not Before: Jan 31 08:00:26 2025 GMT
Not After : Feb 1 08:00:26 2025 GMT
Subject: CN=059a7c8bb2d605187c717529640764b62a7e7aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:b8:49:05:09:4a:f5:ce:6b:b2:0b:8f:a6:
e6:d7:a3:5e:09:b5:d0:05:66:82:7d:d6:3a:36:e4:
1e:51:55:9c:43:65:10:bd:c7:7b:0f:d6:c0:85:6e:
48:59:40:f6:06:cd:28:79:e7:a2:5c:1a:bd:c9:5c:
e2:31:55:77:3d:df:52:6c:02:62:f7:c8:6e:9a:4e:
3e:0d:5e:4a:52:74:ef:87:24:93:3d:5e:66:e3:5e:
ce:d0:67:d7:1b:b1:04:6f:4d:03:15:59:40:1e:4f:
86:69:f3:11:c6:f6:14:29:20:4b:fc:cc:40:2d:66:
4d:8b:a0:04:df:20:56:14:24:33:f6:0e:38:c8:25:
2e:42:74:0d:97:c2:cc:bf:56:32:e7:aa:0a:7c:1a:
2f:fe:86:0a:90:e3:a6:23:69:54:16:bb:7c:66:9e:
88:d5:4d:c8:e9:95:12:72:dc:f2:ce:52:5b:2d:b5:
67:f6:a7:b8:cb:2d:6f:39:13:c6:31:9f:b1:9a:b1:
0e:5e:1d:65:a6:f6:5d:2e:52:a5:a4:9f:04:7f:b8:
79:21:85:9b:65:a9:38:74:1e:e9:df:24:57:e7:3a:
75:9a:72:06:c4:14:28:33:cd:3f:f7:dc:1f:00:99:
ea:3d:a1:37:33:1f:6f:7e:ef:1a:77:ab:da:f3:3e:
89:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9A:7C:8B:B2:D6:05:18:7C:71:75:29:64:07:64:B6:2A:7E:7A:BA
X509v3 Authority Key Identifier:
keyid:E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2b:4a:28:af:91:09:df:b6:c0:23:8d:2f:04:3b:1d:83:c8:
d3:7a:52:94:c1:ed:91:9c:01:5e:ff:b7:66:51:0d:64:37:2f:
c6:30:b2:75:81:66:a9:42:2e:8e:59:c6:a7:55:56:e1:2c:5f:
1c:74:0b:ae:c6:d8:0c:10:3f:9c:33:c3:82:26:fc:a2:71:ad:
f9:e2:46:42:cb:a8:48:14:86:04:8f:77:ea:d4:9f:c0:09:dc:
1b:31:60:01:e8:89:61:3b:d0:c0:24:48:ee:3d:fd:fa:be:bf:
0c:8e:f2:e1:8b:9f:4a:c8:80:6f:43:1a:3c:c5:89:1f:7d:8f:
71:4b:c5:5a:68:c7:16:39:67:a0:ac:38:92:bc:61:52:52:75:
66:c5:4d:c8:2e:f7:e8:1e:50:1e:cf:b4:02:35:17:4b:38:66:
4a:16:7f:64:10:d8:41:65:d9:f6:7a:f8:1f:aa:67:f5:69:57:
55:dd:f4:86:1e:81:a1:ae:0d:f3:75:0a:e1:3c:5d:2b:90:24:
59:4d:ba:bf:ec:f1:1c:8e:79:22:43:2b:71:e8:d6:b8:df:d3:
e3:b2:3d:50:33:90:ed:a3:02:5b:27:ec:00:dc:fa:68:41:85:
86:b1:f3:5a:70:ee:8c:5d:6c:18:1f:23:b6:41:a8:77:86:e0:
02:8d:bc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:50 2025 by rpki-client on console-fra.rpki-client.org