Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft
File: uOT3NP3nGsQhlX8nyEmUlvREDXw.mft (raw, json)
Hash identifier: yKG6q973OlWWT1GORlpwpGymI9+j09xEtcEyvzkj+Eo=
Subject key identifier: C7:85:5E:B8:F8:76:C7:AC:C9:72:30:FD:20:42:0B:0A:F1:6B:5E:9D
Authority key identifier: B8:E4:F7:34:FD:E7:1A:C4:21:95:7F:27:C8:49:94:96:F4:44:0D:7C
Certificate issuer: /CN=b8e4f734fde71ac421957f27c8499496f4440d7c
Certificate serial: 0194BABB08E8CD6DB1674040653D9C4D85DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft
Manifest number: 05E5
Signing time: Fri 31 Jan 2025 05:00:07 +0000
Manifest this update: Fri 31 Jan 2025 05:00:07 +0000
Manifest next update: Sat 01 Feb 2025 05:00:07 +0000
Files and hashes: 1: d2hr0pHHIb2j2ec6gvu36_cpbPw.roa (hash: jc4XIb7FDS9N2TD9hPswSv8o+WQzbQbclxlPYsHdj3U=)
2: uOT3NP3nGsQhlX8nyEmUlvREDXw.crl (hash: sBfCy+2GldyUqpi0K8XHC4Z/S0Jh2AtPc/3KpaigRl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:08:e8:cd:6d:b1:67:40:40:65:3d:9c:4d:85:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8e4f734fde71ac421957f27c8499496f4440d7c
Validity
Not Before: Jan 31 05:00:07 2025 GMT
Not After : Feb 1 05:00:07 2025 GMT
Subject: CN=c7855eb8f876c7acc97230fd20420b0af16b5e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ae:b1:ba:ea:90:6c:b3:76:0a:c3:9a:8a:86:
71:ad:7a:83:82:e9:a1:93:aa:eb:00:75:91:05:92:
3a:d9:c7:e9:93:13:37:e2:bd:b7:47:55:e1:4e:15:
ec:b2:2c:7d:92:0a:37:1d:6b:ae:8d:8a:46:b6:a5:
1c:21:69:01:46:ab:21:5d:98:8a:6c:7c:88:6c:f3:
2a:e2:51:78:67:97:fa:bf:19:5a:bd:ce:9c:96:11:
21:aa:e0:14:c5:41:e2:8f:c6:22:7a:6f:97:68:15:
27:30:da:77:98:0a:57:83:3e:c3:bc:fb:e9:51:c1:
25:aa:2b:09:13:dc:65:14:1e:09:d6:82:ca:3c:2a:
0a:2c:52:3a:94:ab:dd:8c:40:fe:d2:8d:4d:42:4b:
d5:d7:bb:e4:14:9f:ad:bf:91:d8:fa:ba:f3:63:26:
87:89:a3:9e:16:09:02:7f:bb:c7:1f:a4:9a:ca:c6:
0d:57:6c:82:6e:b6:fd:a8:10:c8:1c:71:8f:9f:0a:
ee:2e:8e:6b:af:56:d4:3b:75:20:af:1c:ee:97:ef:
e1:8e:2e:08:8f:73:e5:ae:c0:87:0e:d2:94:3e:37:
11:1f:67:4f:84:25:df:b1:99:a8:fa:6c:0c:ea:2e:
9d:33:c2:fc:c4:a0:ad:08:6c:75:9b:56:a7:0a:3d:
61:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:85:5E:B8:F8:76:C7:AC:C9:72:30:FD:20:42:0B:0A:F1:6B:5E:9D
X509v3 Authority Key Identifier:
keyid:B8:E4:F7:34:FD:E7:1A:C4:21:95:7F:27:C8:49:94:96:F4:44:0D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:24:ce:38:7b:89:2e:c3:f9:73:c8:93:e3:96:26:8a:1d:e1:
42:eb:ea:26:18:cf:d9:26:9a:6a:72:de:69:89:13:b7:99:99:
b9:7b:ca:b2:b9:f7:d5:ea:b4:ea:c0:7b:72:d6:95:ef:b4:65:
a6:08:ad:b6:0c:7a:2c:53:22:fd:04:8b:aa:d6:38:2a:7d:cf:
d5:47:5e:5d:55:97:7b:73:66:34:c6:cf:16:98:36:a2:ce:67:
c0:16:9b:4b:5a:33:ff:dd:5c:a7:5f:29:fb:62:ea:f8:bc:1d:
0c:91:e4:03:48:d0:ec:65:f6:41:62:0b:8b:f9:2a:25:a9:0e:
78:6f:dd:da:f3:91:d8:8b:33:2f:de:46:3f:76:81:95:c5:cd:
db:76:29:fa:1f:94:e5:71:16:0c:a0:50:3e:52:7e:e9:b5:33:
8f:fd:55:e9:16:1c:7b:b7:08:00:a8:84:50:65:99:87:c6:0c:
b8:fc:22:3a:ef:54:4b:68:0d:44:89:e3:54:0d:aa:e1:67:fe:
36:cc:2b:9f:2f:d3:f1:84:91:a2:f9:9b:9a:fe:6a:01:8b:11:
ad:44:60:26:0b:83:3c:52:8a:36:44:64:3a:3c:37:8a:39:35:
aa:2c:f0:7f:49:f7:f2:87:19:29:9f:58:b5:48:21:b9:68:6a:
89:7d:d4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:57 2025 by rpki-client on console-fra.rpki-client.org