Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
File: 5FudrqoDQlXqMxFPWLiMHD48fK8.mft (raw, json)
Hash identifier: kORdoYCeXz2ic855q936rHlSkhmwUeCFDiAcroebH7E=
Subject key identifier: 6A:29:AA:11:26:91:31:EC:44:52:E0:72:F6:E3:37:40:E3:0A:98:BB
Authority key identifier: E4:5B:9D:AE:AA:03:42:55:EA:33:11:4F:58:B8:8C:1C:3E:3C:7C:AF
Certificate issuer: /CN=e45b9daeaa034255ea33114f58b88c1c3e3c7caf
Certificate serial: 0196594B4F893709E510DF2331C6748538F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5FudrqoDQlXqMxFPWLiMHD48fK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
Manifest number: 0C4B
Signing time: Mon 21 Apr 2025 17:00:29 +0000
Manifest this update: Mon 21 Apr 2025 17:00:29 +0000
Manifest next update: Tue 22 Apr 2025 17:00:29 +0000
Files and hashes: 1: 5FudrqoDQlXqMxFPWLiMHD48fK8.crl (hash: RRvZ15uUuTAKfKPh+ebJTcUWZmItYCpwCSB6p+YLgmE=)
2: GzZOn0FMwyF0PqvIWI6Nnb-Vd4g.roa (hash: 5J/Uh3Vu4lMEWtHw6mjugw4/PpXu0iZuwIZUgCw3aCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5FudrqoDQlXqMxFPWLiMHD48fK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:4f:89:37:09:e5:10:df:23:31:c6:74:85:38:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45b9daeaa034255ea33114f58b88c1c3e3c7caf
Validity
Not Before: Apr 21 17:00:29 2025 GMT
Not After : Apr 22 17:00:29 2025 GMT
Subject: CN=6a29aa11269131ec4452e072f6e33740e30a98bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:7b:2f:35:05:86:83:b8:f2:7c:21:c0:36:
a8:09:b3:92:45:f3:74:47:78:16:63:58:e7:a7:87:
cb:28:74:fc:f8:67:7a:70:56:46:48:cf:c5:2b:67:
a8:3a:a4:05:38:63:d2:8a:de:fc:b2:fd:79:08:fe:
2a:c9:ab:ee:23:69:47:4e:eb:e5:73:8d:80:14:34:
bf:00:f8:c9:d9:85:42:89:72:6b:2a:b8:0c:26:29:
71:2f:87:12:44:a4:02:22:17:bb:8e:b9:30:4e:0a:
24:8f:f9:b4:9f:a3:c8:0f:a8:6f:b9:48:f2:e0:6a:
62:75:ae:d5:d0:6c:fe:c1:94:a5:f1:8d:88:1f:42:
6e:c6:ab:a2:2a:9e:e6:14:f1:27:d8:67:bd:4a:b4:
91:9a:31:40:c7:9c:e2:ac:3d:3c:a3:ae:7b:10:a6:
92:3e:b0:78:50:2e:89:20:af:f4:5e:9a:ff:8f:4f:
8f:cd:43:03:68:5f:fd:a5:c3:a0:40:d8:57:2a:13:
58:00:82:85:ac:bf:3a:e1:2c:9d:80:11:5d:91:96:
7f:cf:a6:ff:eb:fa:a9:ca:06:58:08:ef:45:4a:7b:
99:19:d6:c6:51:f2:84:40:cd:fb:48:e3:c8:8d:70:
66:2b:85:a5:ae:e8:73:23:1d:68:97:15:06:9f:67:
bf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:29:AA:11:26:91:31:EC:44:52:E0:72:F6:E3:37:40:E3:0A:98:BB
X509v3 Authority Key Identifier:
keyid:E4:5B:9D:AE:AA:03:42:55:EA:33:11:4F:58:B8:8C:1C:3E:3C:7C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5FudrqoDQlXqMxFPWLiMHD48fK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:11:82:30:3c:75:b9:bf:33:b8:71:13:85:64:44:02:29:7a:
50:6e:d1:83:2a:1b:29:10:fc:6e:c5:08:1b:30:f5:80:1c:41:
aa:c6:5f:37:06:fd:d0:d6:28:d1:41:da:6c:6d:e4:3a:cd:1a:
5f:47:e3:ab:83:c9:93:0a:41:69:f8:e2:cd:e6:34:da:96:42:
0f:41:01:29:f8:ce:80:26:43:b3:a4:55:26:1a:d5:ea:be:61:
d9:44:88:b9:68:22:a7:a7:f2:5d:e4:57:f3:18:cc:02:3a:10:
91:18:6b:ee:b8:1c:7f:19:16:98:71:65:5d:c7:0b:b1:20:76:
4e:bc:8c:5d:08:2c:16:de:65:3e:7b:80:8b:9a:ce:32:dd:07:
72:74:54:29:08:d6:c1:83:a0:96:f5:65:b1:9b:ed:b5:f4:75:
3d:19:a1:26:ae:34:15:a5:0b:96:d5:d5:52:cf:ad:f1:28:0c:
89:1a:1e:ff:10:4e:02:e8:63:cb:f3:54:5f:d9:21:b2:7c:a3:
88:81:d4:4e:aa:25:14:d8:26:a0:a2:11:9c:79:c9:42:4c:87:
14:ba:3e:0f:9b:ec:71:33:90:cf:93:9c:a5:9e:78:89:61:a3:
f4:cc:da:27:e3:57:d8:ac:79:12:40:2a:01:70:fc:35:1f:04:
16:77:32:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:08:16 2025 by rpki-client