Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
File: E5YC73YK3ApbekhYPPv5tg_LcTA.mft (raw, json)
Hash identifier: rRKjJmVqKIy9yQ3XzlLXjlZdMk+fn+ltgZ8iKvdJ8tI=
Subject key identifier: 85:8D:93:9C:D0:F5:3B:D7:ED:33:62:8C:F8:4E:43:47:DA:3E:27:5B
Authority key identifier: 13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
Certificate issuer: /CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Certificate serial: 019654C9ADD9236C28A0B6FE60415C70F417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
Manifest number: 0D71
Signing time: Sun 20 Apr 2025 20:00:25 +0000
Manifest this update: Sun 20 Apr 2025 20:00:25 +0000
Manifest next update: Mon 21 Apr 2025 20:00:25 +0000
Files and hashes: 1: E5YC73YK3ApbekhYPPv5tg_LcTA.crl (hash: GjyOnryJQ6N6KVvZsmuK3KUsTyrXmcfmOYMfkMrZHDg=)
2: p0QXsp4w5wGQ69G08TDsPy1mPRM.roa (hash: viuANp3uqgANQPYvajNcRDfYwh8Tr9E4g9FS/j0tP9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:ad:d9:23:6c:28:a0:b6:fe:60:41:5c:70:f4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Validity
Not Before: Apr 20 20:00:25 2025 GMT
Not After : Apr 21 20:00:25 2025 GMT
Subject: CN=858d939cd0f53bd7ed33628cf84e4347da3e275b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f3:95:af:f6:3d:cd:65:01:21:e9:ff:25:43:
1b:9e:8f:70:ff:0a:38:db:2e:87:f7:82:67:cd:57:
d5:f0:78:8a:55:8c:b0:0b:bc:0f:a6:c6:65:d5:83:
52:93:f4:54:ce:75:e7:60:a8:57:64:c3:75:f6:9e:
16:b1:2e:b9:cd:4c:16:d6:79:b6:c2:dc:06:63:36:
05:a9:c7:4e:27:69:b0:af:01:3c:98:e1:2b:63:d4:
70:8e:bf:de:ef:c1:f0:56:5c:bf:9a:67:8c:fa:35:
2e:55:1c:87:70:ed:89:e6:70:74:cf:8e:54:37:26:
6f:ce:dc:25:a8:c1:31:04:8c:e0:8a:d0:b0:34:70:
a7:ba:4a:a7:b0:88:50:ba:07:7c:a3:96:88:d4:c0:
cd:1b:ab:09:dd:e3:72:6d:ba:d6:a3:2e:73:8d:5a:
2b:9c:9f:1a:a1:ec:f6:ae:0e:80:c5:38:43:19:f3:
58:ef:50:77:d8:e2:97:9a:16:07:13:ee:d4:a8:f5:
65:32:9f:17:e9:a1:a2:61:f4:e8:c2:3f:ec:af:10:
ed:2e:f9:19:59:72:72:ff:d5:1a:50:9a:4d:01:ef:
60:54:de:c1:b6:d4:73:a4:26:5e:08:15:0c:35:0e:
7d:88:36:4d:da:b3:38:e8:4f:34:74:22:af:6d:aa:
59:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8D:93:9C:D0:F5:3B:D7:ED:33:62:8C:F8:4E:43:47:DA:3E:27:5B
X509v3 Authority Key Identifier:
keyid:13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:79:db:98:76:b8:61:d3:61:da:7c:55:aa:96:8f:db:26:07:
d8:d5:f2:6c:45:27:f5:36:60:46:fd:1b:55:a6:35:48:ad:09:
15:d2:63:26:88:96:86:9b:c1:40:91:6e:ed:5e:7d:34:d1:26:
f8:89:39:88:88:60:0c:a3:4d:b4:b9:36:bf:fd:69:3c:3b:7f:
95:27:62:4f:16:31:f4:10:58:89:05:aa:a6:af:81:56:f0:d0:
7b:81:01:7d:59:be:01:6c:ee:59:bc:ad:02:28:c2:a0:bf:6e:
30:d5:25:9d:b1:e6:4d:82:e4:4a:f2:7d:27:15:5d:72:52:01:
b7:04:18:b3:e1:8b:d0:7c:4d:c5:18:be:8d:a5:20:3c:43:7e:
89:6a:18:7e:04:33:cf:e0:8a:25:12:6a:7a:79:85:05:d6:cb:
a3:80:9b:7c:3b:35:c6:15:37:6c:05:5d:c7:aa:46:57:b8:50:
dd:97:1f:64:24:08:07:1d:44:37:9c:99:a9:32:97:3b:19:ee:
8c:b2:cb:ad:7e:49:4f:d4:17:56:68:c8:65:80:bc:01:c3:11:
5f:7e:13:ed:b3:34:5d:28:18:25:05:8e:4d:7c:1d:47:0e:3a:
fb:03:df:2f:a5:ab:22:af:8c:b9:e1:a0:a7:99:7f:6a:6e:df:
4c:84:54:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:12:29 2025 by rpki-client