Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
File: 5cePoZk9RRL-JDa4ztqL_JKdZX0.mft (raw, json)
Hash identifier: 0LXUFUyRLhDJ/M4c/RP2b4vhY0Rhsuxm3a4MBTMrPmI=
Subject key identifier: 37:B7:9C:33:40:7D:E5:2A:A7:D8:5F:9F:B5:BE:3C:8E:44:1D:EB:C5
Authority key identifier: E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
Certificate issuer: /CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Certificate serial: 0194BABB8DC14D5943FF7D15EAAB98CDD2C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
Manifest number: 0769
Signing time: Fri 31 Jan 2025 05:00:41 +0000
Manifest this update: Fri 31 Jan 2025 05:00:41 +0000
Manifest next update: Sat 01 Feb 2025 05:00:41 +0000
Files and hashes: 1: 5cePoZk9RRL-JDa4ztqL_JKdZX0.crl (hash: y/cFwhKTIaE3Hj1kX/+QSAUpqWacX+WuIRSl1xrcNJA=)
2: sxXzCHmD4CxDgty1OLpDx0DtMMI.roa (hash: /ld9Wsyv6zrLHEXivfqQOk2cQ1fruSCWz5YkqZ+WXCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:8d:c1:4d:59:43:ff:7d:15:ea:ab:98:cd:d2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Validity
Not Before: Jan 31 05:00:41 2025 GMT
Not After : Feb 1 05:00:41 2025 GMT
Subject: CN=37b79c33407de52aa7d85f9fb5be3c8e441debc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ea:27:9c:6c:6f:cf:6e:78:82:12:6c:9c:01:
70:67:f0:2c:51:48:e8:9b:0e:b5:e1:33:41:08:e5:
46:a2:8e:b6:f6:14:04:6d:27:04:43:91:e5:28:52:
8f:0d:db:dc:ea:87:cd:40:7a:2d:f7:f6:02:38:94:
d5:08:53:0f:71:8d:29:ab:e1:de:d8:c8:b3:96:e5:
fc:e7:de:52:3a:0f:e8:be:5c:3f:e5:1a:4b:a7:e4:
5a:cc:53:79:86:71:6f:44:a7:6b:ec:12:3b:7d:c9:
53:14:10:d8:55:46:eb:8a:fa:17:b6:a7:de:47:7f:
6f:bd:d1:4a:05:84:b5:ee:13:bb:b1:d0:8f:d5:0b:
2e:d1:84:ea:22:4b:c3:f8:bc:77:35:7b:e6:d6:37:
4a:b4:fb:84:79:26:95:4d:5d:6c:04:ad:3a:61:64:
36:32:3a:9c:33:0c:05:85:b5:90:d3:08:b3:61:27:
f2:0c:4f:65:72:97:ff:1e:b1:c9:b1:ae:06:d9:8d:
ac:62:b6:f9:0e:52:f6:93:b3:bf:b1:ee:be:ed:f6:
a5:9a:22:b7:b3:0d:8d:4f:ad:2d:79:e9:5d:83:2d:
33:fc:df:8f:d6:8d:f2:f4:e9:b0:82:c2:1e:34:92:
24:03:55:dd:22:12:88:df:04:5b:75:be:d9:b3:16:
8f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B7:9C:33:40:7D:E5:2A:A7:D8:5F:9F:B5:BE:3C:8E:44:1D:EB:C5
X509v3 Authority Key Identifier:
keyid:E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5f:b9:46:64:11:77:d6:64:53:2d:91:1e:b0:63:7b:b1:f8:
bb:d6:81:0f:4f:a3:2b:c6:96:fe:f1:84:07:9c:af:14:ba:87:
48:14:84:5a:0f:d5:f1:1a:f6:53:f5:38:ef:c9:f6:8b:72:b1:
52:e8:81:64:84:e1:d4:2b:57:41:d9:4f:43:90:5a:58:5a:ca:
88:00:11:90:2b:5b:9e:9d:42:38:d3:2e:d9:a9:c3:6c:07:68:
86:1d:12:95:22:99:a8:23:4f:46:1b:03:87:c0:2a:cf:2c:47:
4c:e4:a1:c2:78:81:ce:25:48:de:17:0a:31:e7:09:5a:5f:a5:
4e:3f:e3:16:49:8b:87:cc:3a:bb:90:0e:79:99:29:61:c1:5c:
24:b8:f4:37:4b:e7:d6:10:0f:f7:02:b3:ea:95:54:25:87:b3:
95:d5:70:41:d4:3b:7d:5c:5a:ad:dd:9b:30:c4:d7:8a:c1:c7:
27:69:87:12:ed:98:92:d5:38:03:e7:60:02:33:fe:e9:62:8d:
5e:c6:ae:75:ee:c6:15:e9:97:b9:9c:47:33:f7:f8:de:22:12:
b9:59:1e:74:c5:28:27:09:bd:9f:89:37:ac:91:66:a9:36:65:
a7:2f:21:56:04:6d:77:ed:49:8f:3a:3e:43:d2:78:20:11:63:
22:66:5b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:26 2025 by rpki-client on console-fra.rpki-client.org