Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
File: 5mNquBo0Op_9glfqyx3exTiWaAQ.mft (raw, json)
Hash identifier: CKn7U/dOHmB1lNUpV8vajRmm1Yw7sJ1/Zie2IVAtAT0=
Subject key identifier: A2:B4:69:03:6E:D8:2C:D2:44:E8:B8:54:E2:BC:EA:48:46:68:2F:42
Authority key identifier: E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
Certificate issuer: /CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Certificate serial: 01965A26D06E4ADEB9F1F60D16880373E239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
Manifest number: 0F85
Signing time: Mon 21 Apr 2025 21:00:15 +0000
Manifest this update: Mon 21 Apr 2025 21:00:15 +0000
Manifest next update: Tue 22 Apr 2025 21:00:15 +0000
Files and hashes: 1: 5mNquBo0Op_9glfqyx3exTiWaAQ.crl (hash: 3+kCt0LK4HpuFcBmf9jqlWn7IZTCC2UBC3T4pmdiWm4=)
2: qBH3YGMaFK7YFVrKhQ5pFdeSVI0.roa (hash: 0gWn80uN/F/B7m+caBdi8E0X9ChrpKW2B3Hw8j3IN30=)
3: vMTodOq6xsRuVpjojWIKyaTkK_Y.roa (hash: wkJrOUu2B+xH8ypfmdsSGQvJ0AuehbonV39UjaZS0FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:26:d0:6e:4a:de:b9:f1:f6:0d:16:88:03:73:e2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Validity
Not Before: Apr 21 21:00:15 2025 GMT
Not After : Apr 22 21:00:15 2025 GMT
Subject: CN=a2b469036ed82cd244e8b854e2bcea4846682f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:a8:e9:33:7f:3d:f2:9d:41:70:ff:73:db:
5b:0b:e2:a3:e3:db:1e:1f:15:de:a6:c1:91:c9:c4:
dd:03:a5:af:9b:49:bf:0d:9d:89:e2:86:55:f8:23:
aa:e7:40:3b:5f:22:66:bb:7a:a0:99:0d:b4:8f:99:
13:ed:78:8a:a5:5a:61:40:d5:fb:4f:da:65:f0:78:
c1:98:09:14:c0:ee:33:e1:69:2f:c9:f4:f1:bd:e4:
15:28:b9:0e:54:6d:ef:57:f1:63:41:93:74:1f:02:
ef:2e:d5:7c:f5:3c:82:59:08:8d:70:68:57:4b:cb:
05:59:a3:09:51:51:59:84:28:2f:82:38:bf:b9:cf:
fc:71:3d:ae:ce:10:84:6f:3e:0c:33:c8:5c:44:1c:
27:1c:6c:a8:21:05:b7:8d:a0:6f:df:8b:91:4f:db:
6c:11:90:52:6f:c1:03:cd:8b:e5:bb:60:cd:c0:a4:
73:47:c7:60:2f:df:98:8f:be:76:57:1d:a5:6b:3f:
21:d0:f7:02:81:ae:2e:8e:79:c2:e4:23:b6:85:f4:
4a:6b:a9:0b:c6:ab:ac:64:ae:d7:df:f0:4b:ed:52:
e8:12:31:ef:c2:06:e2:5f:db:67:7e:87:2f:d9:ef:
1f:19:20:ac:1f:31:b9:86:29:b2:1b:a4:d0:3b:06:
fa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B4:69:03:6E:D8:2C:D2:44:E8:B8:54:E2:BC:EA:48:46:68:2F:42
X509v3 Authority Key Identifier:
keyid:E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b9:08:7b:66:07:53:52:e1:93:c0:88:9d:2a:e6:b6:f2:7b:
81:61:a3:e9:80:e9:d9:9f:6d:24:29:45:c2:04:f5:eb:9e:8a:
81:5b:01:02:5c:fb:be:d1:82:1f:81:32:80:3c:ec:b4:6d:88:
a0:29:7a:11:8c:aa:47:86:b5:d1:86:20:da:ba:37:63:18:bb:
c4:a3:80:ce:aa:51:a2:ac:eb:96:b0:cb:e3:5a:a3:69:06:94:
28:7a:ed:41:ce:dc:ab:16:12:b1:90:e6:ff:f2:3a:94:f7:29:
41:8d:f9:0c:ec:1f:1f:3f:4f:96:2c:98:8c:f5:23:e9:2e:a7:
0a:0e:2f:7c:92:98:9b:c3:7a:c7:13:59:aa:7f:9c:0a:f3:59:
b5:48:e6:1f:a9:2e:f0:d7:d4:9c:74:ba:86:e7:48:0a:60:81:
3d:a2:28:e8:ce:6a:b7:c7:27:10:f9:bb:75:e1:23:6a:a2:9f:
aa:67:a7:43:55:ae:35:a5:da:d0:0a:5b:d8:9d:41:5d:9c:9a:
8a:59:e4:75:a4:0c:6f:21:1b:2e:8a:6d:d5:b9:84:98:0e:4f:
28:80:ff:d3:f7:ea:06:70:bf:73:af:69:12:db:70:d6:e4:4c:
ab:de:e2:ff:ff:fa:7f:02:96:75:2a:5f:cf:04:05:af:ea:d5:
29:29:cf:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:05:00 2025 by rpki-client