Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
File: 5UTiZtTrnMfe0pLBKwaxynvOp3g.mft (raw, json)
Hash identifier: foFyS8JUrv8ClW4mRjKhYF+0yxYcY2q/bb3EEsCdb/s=
Subject key identifier: CD:14:A7:AC:BE:EF:E3:4B:A0:4B:B9:B9:63:61:D6:2F:50:0E:3B:52
Authority key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
Certificate issuer: /CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Certificate serial: 019660CE6E4B282F30CC82A9EDE6B9360E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
Manifest number: 1506
Signing time: Wed 23 Apr 2025 04:01:03 +0000
Manifest this update: Wed 23 Apr 2025 04:01:03 +0000
Manifest next update: Thu 24 Apr 2025 04:01:03 +0000
Files and hashes: 1: 5UTiZtTrnMfe0pLBKwaxynvOp3g.crl (hash: 7UKxWZ3mHAxh0Ffc8uznw4oZ8gxDuwaK7UGhtkvtLrA=)
2: LeXJLi-TLu5NLRkSo2hJnEK9QDQ.roa (hash: 1KfkyTUePDTOuHMENqew1KmyeJrolI/GoAGN74JhXHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:60:ce:6e:4b:28:2f:30:cc:82:a9:ed:e6:b9:36:0e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Validity
Not Before: Apr 23 04:01:03 2025 GMT
Not After : Apr 24 04:01:03 2025 GMT
Subject: CN=cd14a7acbeefe34ba04bb9b96361d62f500e3b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:84:77:7a:0e:4f:d0:a7:7e:37:92:dd:c2:
e3:22:01:fc:8d:8a:a0:62:fc:44:f5:c4:fc:2b:b8:
fa:9c:3d:d6:4c:0a:18:cb:29:a2:cc:ba:f0:87:6a:
14:ce:2b:e2:aa:37:c1:e2:fb:09:bb:4c:00:92:a3:
33:30:2b:94:40:f5:89:a8:76:85:f9:69:d2:8f:22:
51:89:8b:2b:fa:04:d2:4b:e7:61:f2:bf:48:bf:84:
f4:bb:c6:7b:d3:12:4c:1a:2e:7d:d2:a3:c2:c8:75:
bd:f2:9e:77:f4:1d:21:d8:8a:cd:5c:80:e3:6b:c0:
74:e7:79:fa:48:1e:c3:e1:f4:e9:3f:ab:65:4f:0b:
2b:26:8f:3a:fe:9e:25:a6:5d:77:d1:3f:bc:6b:ac:
72:12:0b:a1:2c:06:36:58:e9:57:e6:4a:9c:6a:68:
08:09:3b:18:8a:fb:50:1a:c3:01:6b:01:25:6f:d7:
b6:86:50:b2:da:0a:e1:51:3e:af:bb:3c:12:3c:49:
7e:aa:88:2e:9d:98:d5:08:b6:16:6c:c8:38:f6:9d:
fb:df:b3:db:28:01:84:14:89:e3:1d:3f:cd:da:8d:
e1:21:df:3e:26:2f:4c:3c:ff:ed:08:36:35:7f:bd:
85:1d:4e:1d:a6:c1:d9:5e:b6:9e:46:6a:3c:d6:b9:
b9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:14:A7:AC:BE:EF:E3:4B:A0:4B:B9:B9:63:61:D6:2F:50:0E:3B:52
X509v3 Authority Key Identifier:
keyid:E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:af:75:6e:11:cf:96:1e:76:e3:c4:82:d3:59:5b:6e:a9:96:
24:5e:08:0e:6b:9c:42:21:1a:5e:55:bd:f3:61:33:7c:df:22:
6e:b1:65:ed:3c:80:ea:9c:ca:66:0a:72:e9:bb:21:ca:b6:de:
8c:57:b0:7d:59:8d:de:66:6d:37:64:0b:d8:f9:ef:84:dd:25:
87:35:62:40:51:37:4d:0a:a0:b4:79:20:ef:b2:b5:f1:3a:fa:
eb:7e:dd:7a:c0:1d:d3:3d:4e:69:ea:d7:a4:fa:c1:f0:0b:f3:
8d:5c:5a:b4:74:d5:c0:d3:4e:e0:1d:0e:cb:55:4e:ab:0c:fa:
54:53:9f:cb:0c:9e:ab:d6:e6:88:b4:27:f8:28:4d:e9:db:0a:
ab:84:6b:7f:21:62:24:a4:74:09:1f:84:de:aa:05:f3:89:9a:
37:be:7d:60:2e:2f:e0:e3:14:8f:3e:fb:bf:6c:d9:41:86:ad:
b4:98:f2:37:ce:d0:bb:d2:15:b4:1d:41:02:7d:03:12:d8:38:
c8:93:27:d7:8e:89:9a:c4:fa:03:01:62:30:06:3a:13:80:9d:
cb:cc:2f:d7:38:1b:4e:1e:2d:fe:3f:f4:c8:0f:b3:7e:47:ab:
9d:f4:ec:11:56:8d:58:b3:74:6c:2c:59:04:a9:f0:42:ce:3d:
bd:8f:2a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:10:34 2025 by rpki-client