Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
File: 5nEAZ58HKCzUjLUQe_l69684ick.mft (raw, json)
Hash identifier: kwwXEoOJlC10bt+AZbVuLbj8gCGZ660A8TmiUToFX+M=
Subject key identifier: 88:9A:43:0B:F9:F2:B5:67:2D:9B:62:49:B3:CD:27:8D:2B:ED:A2:3B
Authority key identifier: E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9
Certificate issuer: /CN=e67100679f07282cd48cb5107bf97af7af3889c9
Certificate serial: 019655DCEFBDD066D7A8C8F9E8F1EA56BBED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 01:01:04 +0000
Manifest this update: Mon 21 Apr 2025 01:01:04 +0000
Manifest next update: Tue 22 Apr 2025 01:01:04 +0000
Files and hashes: 1: 5nEAZ58HKCzUjLUQe_l69684ick.crl (hash: 2sGlI1DFIoxXMc31SWhoYZHPMk6Vck9FK1ZPWMEb1Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:ef:bd:d0:66:d7:a8:c8:f9:e8:f1:ea:56:bb:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67100679f07282cd48cb5107bf97af7af3889c9
Validity
Not Before: Apr 21 01:01:04 2025 GMT
Not After : Apr 22 01:01:04 2025 GMT
Subject: CN=889a430bf9f2b5672d9b6249b3cd278d2beda23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ec:95:2c:16:c0:26:b8:f0:1f:89:4f:3c:ee:
f0:11:c6:ac:7e:19:51:f8:13:70:8e:2d:e0:fa:60:
24:92:ed:fc:eb:da:4e:8c:33:7c:71:85:70:60:52:
ac:46:2e:08:e5:69:75:4e:32:24:a0:37:9c:60:fe:
53:3a:5b:99:4d:2c:29:a6:6b:f4:9a:65:3c:9b:f0:
c8:a4:c9:3e:40:f7:a2:cd:12:b5:ef:ca:0a:8b:44:
c2:b1:55:e0:f2:88:ae:31:e4:3c:73:5e:92:8b:ce:
d0:91:89:a4:a0:ca:cf:96:70:6c:ff:51:6e:c8:ab:
fb:52:79:f6:dc:e0:fb:90:5d:68:e6:ff:a9:2b:b3:
32:29:a8:f0:3e:44:b6:0d:29:52:cf:46:49:16:9c:
f8:b7:1d:4e:6c:d9:26:73:9d:81:c4:8f:f2:fa:9b:
7d:4f:f5:67:8d:bd:7f:02:70:11:cc:68:3f:80:ae:
ff:f0:67:4b:fa:bb:cc:d6:29:98:01:20:7c:05:02:
9a:7e:c1:6d:70:83:5d:f1:e8:d6:f1:8e:6c:f5:aa:
51:6c:75:8a:22:e5:37:a7:5a:6a:6a:d8:41:1d:a8:
8c:5f:82:62:aa:f3:5c:90:46:23:ae:30:2f:3d:83:
c9:61:2b:5a:3d:ea:37:17:22:62:ff:c2:63:a1:f0:
9b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9A:43:0B:F9:F2:B5:67:2D:9B:62:49:B3:CD:27:8D:2B:ED:A2:3B
X509v3 Authority Key Identifier:
keyid:E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a0:0d:b7:f4:d0:43:01:f1:64:56:c4:96:9e:04:26:73:d7:
bd:aa:7a:ef:97:6c:30:b2:8a:56:63:0e:b3:1b:e6:46:09:d0:
6f:76:95:63:63:b6:a4:1a:6a:3e:e3:fb:0f:8f:8f:39:d3:79:
35:ae:c8:3b:0c:47:d1:7c:b4:69:5b:eb:8b:a6:3a:f5:4a:3b:
cd:5a:06:06:60:a1:1e:28:16:f4:aa:09:9a:c1:6a:ef:94:3a:
d6:58:5d:d0:9b:e4:2e:39:56:64:14:f3:0b:6a:2b:41:e0:02:
77:10:47:b7:34:31:88:d4:7e:42:a4:d1:7a:54:74:df:35:79:
89:8f:39:26:af:63:8c:19:c6:30:29:e7:fe:19:14:65:e6:24:
91:59:7d:9f:a0:fa:50:db:94:ff:d7:de:93:9a:7e:94:b2:5a:
92:3c:3e:31:6f:18:bb:91:d6:0a:c3:53:41:0e:8a:28:02:36:
13:2e:06:b4:0f:53:3a:79:8f:ba:2d:d1:19:b6:09:e0:ec:1f:
c7:1e:5a:6c:b9:ff:55:4f:f6:1c:52:44:b0:83:b7:30:47:c6:
68:a2:95:2f:15:ca:46:dd:3c:cc:a9:84:51:a3:34:56:b2:03:
e6:ba:45:d4:d6:22:e2:b6:8c:ec:41:30:06:41:44:d8:ea:63:
5c:72:bb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:40:17 2025 by rpki-client