Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
File: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft (raw, json)
Hash identifier: YrEjxkiceBXeHx5fJuPiXxEmmokubYuB7QJtFUfPCf8=
Subject key identifier: E8:F4:10:BA:37:D9:D7:A9:0E:19:14:96:19:06:BC:73:D9:EA:BA:A3
Authority key identifier: E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
Certificate issuer: /CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Certificate serial: 01965BDE77CEDEBE63E043EF3E295E65DC05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
Manifest number: 149B
Signing time: Tue 22 Apr 2025 05:00:28 +0000
Manifest this update: Tue 22 Apr 2025 05:00:28 +0000
Manifest next update: Wed 23 Apr 2025 05:00:28 +0000
Files and hashes: 1: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl (hash: MJgbksqu987hDFZexv0UDNLunmzKXB10os5p0LpWZQc=)
2: 80LgJ-bt-JVgl28q8iQu1JZiGBg.roa (hash: SbBL53O4850VvEVexpsOte6oujPeOQsBp7gTPoi1dqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:de:77:ce:de:be:63:e0:43:ef:3e:29:5e:65:dc:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Validity
Not Before: Apr 22 05:00:28 2025 GMT
Not After : Apr 23 05:00:28 2025 GMT
Subject: CN=e8f410ba37d9d7a90e1914961906bc73d9eabaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:30:46:38:77:da:ee:bf:f5:3e:14:b9:ac:
9a:9e:f5:59:05:4e:30:e0:3a:6f:c0:0f:fa:db:69:
77:36:a7:ca:1d:77:7e:ea:5c:06:e2:85:f1:6a:d4:
10:aa:ec:3b:c4:10:c0:69:22:9f:c3:9d:2e:6a:c6:
6d:91:f7:d1:33:62:51:77:1a:da:f5:58:c9:ca:34:
88:53:62:97:b2:7d:de:c7:cb:88:a9:db:30:b3:44:
3b:37:ec:4c:66:4f:ce:ac:98:8b:3b:67:1a:df:48:
74:dd:b6:01:8d:de:47:a9:40:fe:3d:57:f8:13:eb:
50:55:5f:1d:73:45:6b:e3:76:b7:05:8e:06:e8:a1:
0b:6a:de:21:81:1e:bf:ac:c2:8a:9a:e3:a7:8d:15:
52:83:4e:ed:83:e5:c2:3b:8b:5f:d6:d8:06:c9:6c:
7b:c9:7b:c6:00:13:3f:36:99:18:90:eb:fa:63:4e:
ce:ac:8f:9d:e2:d6:ad:ab:36:a7:4a:53:fc:72:c8:
da:c3:c3:6b:96:5d:35:19:07:90:7d:40:d2:fb:3e:
68:13:54:fd:10:02:9e:c4:7a:84:68:f2:68:85:c7:
91:fd:27:42:61:37:51:26:46:4e:85:55:bb:35:0d:
96:1d:21:b9:5f:d7:92:c4:6e:0d:c8:b0:cd:db:8f:
95:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F4:10:BA:37:D9:D7:A9:0E:19:14:96:19:06:BC:73:D9:EA:BA:A3
X509v3 Authority Key Identifier:
keyid:E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:75:6e:44:b3:01:3c:d4:15:b9:d8:46:34:24:25:3b:42:98:
0f:22:a8:a1:68:31:64:58:94:47:5e:d8:bd:30:4b:70:1c:48:
30:cf:2d:ed:64:d1:10:ef:37:b9:43:26:fd:ae:50:cd:ca:3a:
be:0f:a5:c9:e9:b5:f4:43:f2:97:c6:fe:04:de:97:97:59:88:
a4:e9:4c:34:52:df:d4:19:62:71:af:46:17:21:e2:4e:50:5b:
e0:d1:cd:2d:25:45:54:11:4d:ca:b3:cd:df:6d:4f:ac:6a:79:
3e:35:21:33:41:f0:46:86:4b:fb:d9:73:45:27:7c:7b:19:cd:
ce:88:d0:91:20:7b:f2:04:c5:ce:45:d0:bf:09:c6:cf:d6:48:
b5:f5:9e:33:75:3f:10:f3:e8:bb:eb:02:61:7a:95:18:af:60:
04:f4:ed:97:6a:2e:15:6f:fd:5d:d4:59:eb:25:47:21:d1:2d:
35:ed:ff:86:4a:a6:6a:e0:b7:29:91:05:08:21:3e:88:c3:56:
9a:ae:fb:05:a8:f7:86:c1:09:82:0a:cb:16:4c:bc:29:6a:e5:
e1:1f:80:a9:dc:06:4d:d6:a1:c5:07:db:23:07:30:04:06:58:
b8:db:54:34:c4:cc:8a:dd:46:9d:33:58:32:36:8a:84:79:07:
22:70:af:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:27:02 2025 by rpki-client