Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
File: 5vwXvqVVttODIflAKOUV-6T6dNw.mft (raw, json)
Hash identifier: HKIJT4z7kxtGhODhZbzyhD9+ieXucyke0MNiooxoGsg=
Subject key identifier: D2:38:D8:10:82:E5:AA:39:08:0C:0D:2A:29:B8:E4:C4:A1:AB:12:A1
Authority key identifier: E6:FC:17:BE:A5:55:B6:D3:83:21:F9:40:28:E5:15:FB:A4:FA:74:DC
Certificate issuer: /CN=e6fc17bea555b6d38321f94028e515fba4fa74dc
Certificate serial: 01965492D984447CD4087A761EF28EF8658A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
Manifest number: 1502
Signing time: Sun 20 Apr 2025 19:00:32 +0000
Manifest this update: Sun 20 Apr 2025 19:00:32 +0000
Manifest next update: Mon 21 Apr 2025 19:00:32 +0000
Files and hashes: 1: 5vwXvqVVttODIflAKOUV-6T6dNw.crl (hash: BnxUYch/3ocLYL7VfMcE3Ct3HRM62nIwGw/g3SE8UVU=)
2: J1qh-XLlSb83Cvw0tPyOs7lbFV8.roa (hash: UbADxFQd1kOQt6qZzcUh4NVaCiaCa54WExVcxjT3EEU=)
3: kLrHkvE4C0vYJ_I9mm47FT5Tbv0.roa (hash: wliDZ4/aTNMerRMfSzhrbSpYGq5mGBX1nX+LRd2XWsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:d9:84:44:7c:d4:08:7a:76:1e:f2:8e:f8:65:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6fc17bea555b6d38321f94028e515fba4fa74dc
Validity
Not Before: Apr 20 19:00:32 2025 GMT
Not After : Apr 21 19:00:32 2025 GMT
Subject: CN=d238d81082e5aa39080c0d2a29b8e4c4a1ab12a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e0:36:d1:bc:bb:d8:60:51:d7:40:41:cd:26:
7f:66:d5:12:c8:e7:65:3b:de:aa:44:74:56:97:b3:
c3:45:da:25:b0:f8:39:d7:7d:d4:7a:76:9a:9d:5d:
21:74:f9:f4:e8:c9:2a:2e:e0:8c:5a:e8:84:45:cf:
a2:17:65:a1:06:d8:cb:8d:be:68:84:cd:73:ba:ce:
ba:1e:c2:81:46:f2:0a:b2:5e:a6:de:32:e2:84:6c:
10:ee:d1:21:13:16:63:e2:42:83:f4:e8:e7:77:49:
da:e9:91:93:e9:60:b9:db:8d:80:95:2f:c7:b3:e8:
e8:5f:7a:cc:75:a4:e4:dd:c6:a6:d8:b7:d9:52:0c:
34:de:ae:de:3e:03:cf:d8:7b:16:85:32:94:71:e0:
20:87:ef:d4:fe:be:3b:a1:d4:bf:9d:78:77:88:0f:
69:f8:3b:06:c7:0d:23:5c:4d:9a:dd:fe:71:e5:9b:
e1:ec:7c:28:0a:8a:bc:c7:a9:ca:7a:52:57:dd:df:
e5:9b:1c:9a:1b:dd:f5:7c:3a:b7:ca:42:cc:b9:ab:
fe:84:28:1d:af:cd:5b:2b:99:fd:32:c0:b6:ba:5f:
19:c3:24:51:3b:92:86:20:94:1f:0f:a2:af:2a:4e:
72:d5:aa:05:22:7e:4d:6d:d2:2a:35:ba:26:f3:90:
e5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:38:D8:10:82:E5:AA:39:08:0C:0D:2A:29:B8:E4:C4:A1:AB:12:A1
X509v3 Authority Key Identifier:
keyid:E6:FC:17:BE:A5:55:B6:D3:83:21:F9:40:28:E5:15:FB:A4:FA:74:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:96:11:38:c3:8a:d2:2c:18:cd:fd:57:07:61:3c:2c:3e:42:
55:9b:13:06:c8:88:53:cf:86:aa:19:86:95:88:f2:d1:36:58:
e9:cc:e0:c3:2b:2f:b2:b4:ff:b7:42:04:ca:8d:cf:8a:65:c7:
9c:83:69:14:f1:58:6d:a6:2f:d3:e0:f1:71:20:e3:fb:e0:ca:
1a:a6:64:8c:63:91:8a:92:6a:65:36:36:dd:a2:a6:79:bf:3c:
71:68:09:98:60:a2:2f:c3:68:6b:9d:65:13:e7:ff:04:66:5e:
cb:87:50:fb:8c:d7:5d:d9:2c:23:04:24:9a:d2:be:27:b4:b0:
a6:0d:60:c6:ee:a8:79:70:66:8c:77:98:f1:9e:b0:2f:39:1b:
29:5b:87:2f:6c:07:79:a8:7e:fe:f6:23:24:a3:4e:04:13:8b:
89:d7:3b:0d:bf:5f:b0:7d:ac:81:89:bc:81:45:d5:f7:27:db:
be:9c:e6:2a:97:90:fd:3d:b3:62:f0:4a:bc:8d:22:9b:90:6d:
ec:cc:f1:b5:9d:f8:a9:aa:a9:d8:83:ab:ce:fb:38:f5:e7:1e:
cb:d7:40:f9:45:7c:40:4a:1a:00:ed:19:7e:1f:8d:28:33:43:
2a:a8:7a:3b:13:61:68:1a:70:ef:7a:2f:36:8e:0c:86:68:33:
7e:65:2d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:11:12 2025 by rpki-client