Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
File: 5XXe8Yp160XEQHcaziRsUOip0xY.mft (raw, json)
Hash identifier: 1Mq6A/5lhC/udU4MiNWzC6UIvRBVWCrW9Ts00OsS4Ys=
Subject key identifier: 09:0A:9E:8D:E9:C1:69:46:15:C0:6B:E6:29:81:B0:97:ED:56:81:44
Authority key identifier: E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16
Certificate issuer: /CN=e575def18a75eb45c440771ace246c50e8a9d316
Certificate serial: 01965E03D6A1CDA6A6DFEE7171AF590B5C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
Manifest number: 080C
Signing time: Tue 22 Apr 2025 15:00:31 +0000
Manifest this update: Tue 22 Apr 2025 15:00:31 +0000
Manifest next update: Wed 23 Apr 2025 15:00:31 +0000
Files and hashes: 1: 5XXe8Yp160XEQHcaziRsUOip0xY.crl (hash: Bs6+hHenocscRa/OHDIDTJpZ+CrDjSDHsMkmZyOvqSY=)
2: OSfCvRDn5rwH2xpcMtEUP0sV1D0.roa (hash: YJd7BM/YO/DejIANNT19DgGaGBCVl/athIJy3uYWmVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:03:d6:a1:cd:a6:a6:df:ee:71:71:af:59:0b:5c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e575def18a75eb45c440771ace246c50e8a9d316
Validity
Not Before: Apr 22 15:00:31 2025 GMT
Not After : Apr 23 15:00:31 2025 GMT
Subject: CN=090a9e8de9c1694615c06be62981b097ed568144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:68:79:16:49:d8:b2:8c:eb:32:62:77:b1:
db:d1:67:dc:35:31:51:9c:a6:f0:19:27:7f:14:b8:
63:f8:dd:ca:f0:e4:48:60:44:b4:8b:a3:ce:f6:10:
e1:d8:00:10:8c:20:48:0b:a6:0a:eb:cf:2e:76:30:
a3:8b:84:a6:19:0c:98:15:3d:b6:59:65:cd:a2:f5:
7d:29:c1:33:30:a1:6c:dd:b0:fa:d1:4a:ea:88:46:
d7:62:b3:98:2d:99:98:ea:40:79:9b:df:44:1e:54:
e7:de:d9:58:ea:fa:0e:36:55:4c:2f:7b:ae:10:0b:
15:78:c8:8a:28:ef:e2:f1:7b:05:56:20:47:bf:ec:
90:be:a1:f6:90:91:70:7a:c5:4b:70:af:1e:5e:89:
04:9a:98:48:a7:d6:02:fe:e2:f3:ba:46:ce:b7:2b:
bd:b5:8a:4a:4c:ae:a6:30:f8:59:6e:ed:1d:11:22:
8b:e2:b0:fb:46:3f:55:b6:02:bc:f1:c4:f1:9e:24:
f6:8c:68:c0:e8:1c:3b:48:71:1e:e6:a1:ca:4a:f7:
e0:6c:95:95:81:e8:71:fd:c8:4e:76:81:ac:64:0e:
3f:e7:6f:35:a4:77:e4:01:8f:98:32:a6:20:bb:f0:
e8:bb:ec:bd:c3:79:fb:a3:a7:f9:fd:4d:78:c8:ed:
bf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0A:9E:8D:E9:C1:69:46:15:C0:6B:E6:29:81:B0:97:ED:56:81:44
X509v3 Authority Key Identifier:
keyid:E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:22:dc:7f:a1:0f:3a:13:e6:d2:ef:ec:c8:c7:8d:88:83:8b:
35:8f:87:22:91:de:6e:27:c6:fc:5b:5c:25:4e:eb:73:23:10:
10:bf:e7:49:b6:35:05:81:09:66:9e:80:0a:cb:bf:10:6c:25:
5b:41:23:b0:87:09:56:e8:33:70:18:29:eb:03:1c:51:cc:4b:
11:e3:af:49:33:19:3e:85:b4:73:41:94:88:9d:03:16:5e:3b:
de:a9:aa:68:f1:25:5b:83:0a:c0:e1:30:17:b3:aa:40:81:72:
b4:c5:d2:81:03:98:e6:0b:1a:bd:37:35:b3:74:3e:6e:01:b4:
de:e1:a9:12:97:35:2e:5d:32:8a:6a:a0:4c:cc:b2:d1:36:50:
cb:57:b0:31:0b:32:34:cc:1e:9f:1d:d9:c6:bb:cd:ae:b0:57:
46:91:58:c5:a0:d8:bc:10:99:2f:fa:b5:bf:b1:ce:61:76:d0:
c5:54:91:61:05:67:64:f7:5f:da:0c:95:13:f3:a3:2d:26:03:
32:ce:3c:a3:1e:34:c4:56:52:8f:1a:90:1c:32:4c:ba:3b:56:
39:b6:85:29:19:ff:ae:a4:8a:38:e2:e3:32:03:b2:98:da:ea:
e4:4d:53:ed:ad:4c:db:13:43:47:9f:72:cb:fa:7a:66:0e:13:
51:1b:34:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:33:07 2025 by rpki-client