Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
File: 5rtLno321mTvy3e0EEFcg0phd4I.mft (raw, json)
Hash identifier: s1DBiQbAX44CK36mCff9FugmouBmJ87bWVkvUZkr2sU=
Subject key identifier: 2B:56:17:33:72:C3:3F:47:E7:7A:55:EE:E3:C9:4F:55:40:FA:EE:67
Authority key identifier: E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82
Certificate issuer: /CN=e6bb4b9e8df6d664efcb77b410415c834a617782
Certificate serial: 019650487CB124A5A919ED46A8581F795812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
Manifest number: 02E6
Signing time: Sat 19 Apr 2025 23:00:49 +0000
Manifest this update: Sat 19 Apr 2025 23:00:49 +0000
Manifest next update: Sun 20 Apr 2025 23:00:49 +0000
Files and hashes: 1: 5rtLno321mTvy3e0EEFcg0phd4I.crl (hash: xwUUM0OM0UHD5qZh2qU7OnlbxLnC1GpnUPpPg3jYDQk=)
2: XkaKfqFoJaO-K5J7EjOD-dhdRPc.roa (hash: HO99X4r00WVlX046g40bOu9XiDJVwjKinGN75tp1pVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:7c:b1:24:a5:a9:19:ed:46:a8:58:1f:79:58:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6bb4b9e8df6d664efcb77b410415c834a617782
Validity
Not Before: Apr 19 23:00:49 2025 GMT
Not After : Apr 20 23:00:49 2025 GMT
Subject: CN=2b56173372c33f47e77a55eee3c94f5540faee67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7c:9b:aa:ef:f5:62:a6:f2:b3:56:fc:fe:16:
8b:ec:0c:0e:a6:22:98:67:c0:56:a8:d8:8f:13:bf:
dc:ef:02:18:ed:e9:8c:39:25:cb:bc:ad:d9:f9:9d:
d2:bf:c9:20:06:fc:87:ec:1d:cc:af:2b:3f:88:79:
d3:f1:2b:8e:cd:3f:34:35:35:a5:79:c3:3c:a8:21:
4a:c0:9a:ca:50:75:c3:61:89:9a:3d:73:85:09:75:
51:21:32:23:70:bb:c9:71:6d:75:5d:68:64:75:9a:
8f:46:53:0a:c5:82:4d:fa:1c:ba:4e:ec:1d:57:e5:
23:1e:6c:a8:43:0d:fd:26:e7:66:fd:b2:87:e6:5d:
b8:47:48:ec:e2:ec:ee:8d:53:90:73:29:86:bf:c4:
6d:14:14:fe:d2:ba:d0:5d:5a:66:fb:b8:c9:30:5d:
43:4c:a7:8f:76:b8:19:a7:ca:29:91:22:c6:74:48:
47:aa:9f:dc:82:81:08:2e:c8:10:e0:f9:ec:81:5e:
df:be:5e:4a:1c:a7:39:36:61:8c:22:dd:22:63:ae:
18:d9:39:6c:d1:e3:23:8a:f6:6f:7e:23:6e:df:41:
5c:c6:7c:3c:45:06:a7:09:66:bf:29:1a:a0:da:8d:
bc:89:a0:99:0a:c4:fa:1a:79:e8:c6:3f:7f:69:71:
5b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:56:17:33:72:C3:3F:47:E7:7A:55:EE:E3:C9:4F:55:40:FA:EE:67
X509v3 Authority Key Identifier:
keyid:E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ae:3d:6b:12:42:31:b9:7a:de:75:69:a2:b3:05:0e:d8:f8:
7d:33:b0:94:5f:e5:a5:90:ed:d1:0e:b9:e3:90:e8:08:0a:b6:
c3:30:ea:ae:0f:9a:fe:16:53:ba:9b:24:7a:20:6b:33:34:6e:
6b:7f:b0:6f:3d:35:4e:d0:ea:e0:59:fa:0f:c5:3c:e8:a7:47:
c9:7d:1e:53:e7:33:6b:d9:fd:3b:a6:2e:c8:7a:6c:5a:45:e8:
15:c1:76:14:ce:12:78:18:04:79:2f:01:c6:e6:b8:67:53:7a:
6e:0f:b1:4c:21:57:7f:6e:36:8d:5a:c0:c6:a0:85:db:23:a0:
5c:40:4f:9c:c9:da:19:08:63:84:2e:b8:03:9f:87:fd:79:61:
a0:f4:08:cb:4d:98:6b:38:6e:9c:62:bc:8e:2f:f3:84:d1:97:
14:a0:6e:71:3b:8d:bc:ee:a2:ed:09:50:0d:0b:0b:88:9b:26:
12:44:a7:b5:fe:db:98:03:04:fb:27:1a:f2:44:3e:c0:5f:13:
00:0f:39:62:3d:2e:48:24:a8:c9:f1:35:fa:0e:84:e0:6f:37:
33:c0:27:d7:87:28:cb:f9:15:36:5b:36:32:c2:cb:7b:a3:21:
0c:a0:d2:73:1b:89:e2:25:0e:50:a7:8f:1e:99:89:8a:fa:10:
68:44:7c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:24:44 2025 by rpki-client