Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/5gu-C-d8Ti8FeReG6tzIJ2smG4w.mft
File: 5gu-C-d8Ti8FeReG6tzIJ2smG4w.mft (raw, json)
Hash identifier: 72D2dzEmocNOIYcqO35cWI5YzIoHkw2Rzvv7r1z11pg=
Subject key identifier: 3C:B9:CE:25:52:30:79:62:5B:06:F6:54:78:67:84:6E:EA:4A:2D:AF
Authority key identifier: E6:0B:BE:0B:E7:7C:4E:2F:05:79:17:86:EA:DC:C8:27:6B:26:1B:8C
Certificate issuer: /CN=e60bbe0be77c4e2f05791786eadcc8276b261b8c
Certificate serial: 0196575CD23ABC32DD4B44254BC920D1C4D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/5gu-C-d8Ti8FeReG6tzIJ2smG4w.mft
Manifest number: 0D72
Signing time: Mon 21 Apr 2025 08:00:22 +0000
Manifest this update: Mon 21 Apr 2025 08:00:22 +0000
Manifest next update: Tue 22 Apr 2025 08:00:22 +0000
Files and hashes: 1: 5gu-C-d8Ti8FeReG6tzIJ2smG4w.crl (hash: Q9oupBpj6m5T7yyBvQgvmyx79EWL52iG7ps04ii8NmE=)
2: by1TgAx4hrtTz7uWAEk79-VVTJs.roa (hash: X41Ff9+/jE9hdX58NTuSaIYDfgJkUlcWlA+qHpWSACc=)
3: w0MGxtWzNh-Wg8RBcln32CLcNqo.roa (hash: H0A/C+iiSZpPUmhK9SIg9MZWz78n+gyc/aBSLoyD6VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/5gu-C-d8Ti8FeReG6tzIJ2smG4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/5gu-C-d8Ti8FeReG6tzIJ2smG4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:d2:3a:bc:32:dd:4b:44:25:4b:c9:20:d1:c4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e60bbe0be77c4e2f05791786eadcc8276b261b8c
Validity
Not Before: Apr 21 08:00:22 2025 GMT
Not After : Apr 22 08:00:22 2025 GMT
Subject: CN=3cb9ce25523079625b06f6547867846eea4a2daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:65:f3:dd:0f:11:0e:15:5c:21:76:0a:4b:7b:
cf:d3:8a:7c:ee:28:87:f6:af:f6:fe:d2:98:07:12:
52:4b:6b:00:82:a5:62:9b:02:f4:9a:94:55:88:fa:
2b:44:f8:1c:58:b6:4f:ea:09:fc:d4:98:1b:81:7d:
00:d3:24:f0:ed:b4:cd:05:23:db:9c:17:cf:68:b0:
2f:4a:d9:0e:e4:f2:2c:08:6f:d0:12:20:6c:18:37:
3c:5c:c6:b2:94:ac:7f:d7:7f:89:68:fa:3a:e9:60:
56:40:94:8e:d9:4f:76:75:28:bf:c1:a0:16:95:1c:
7c:a4:ba:3b:f3:b4:c4:75:26:17:fe:dd:16:8d:3b:
82:85:11:3c:68:df:03:6d:cb:69:02:5c:11:a4:9f:
d6:87:28:ba:2a:77:d5:d4:3d:23:dd:b2:16:a3:2b:
ba:1a:a3:dc:b5:d7:7d:39:18:5c:a8:3c:8b:48:18:
89:dc:d6:6b:6b:fc:e3:92:06:b0:c3:60:a7:33:13:
34:1b:8f:bc:6d:31:e8:d3:98:5d:e4:9e:ad:7a:44:
2f:9f:97:50:c9:d9:6d:bf:68:f3:e2:53:82:f5:a1:
b3:7d:f4:d9:30:5c:05:72:03:5e:d3:f1:0c:19:29:
72:ae:64:ce:d6:79:1f:db:d7:a4:6c:ab:26:3c:5a:
97:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B9:CE:25:52:30:79:62:5B:06:F6:54:78:67:84:6E:EA:4A:2D:AF
X509v3 Authority Key Identifier:
keyid:E6:0B:BE:0B:E7:7C:4E:2F:05:79:17:86:EA:DC:C8:27:6B:26:1B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/5gu-C-d8Ti8FeReG6tzIJ2smG4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/5gu-C-d8Ti8FeReG6tzIJ2smG4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9c:31:f4:c7:09:39:1f:ae:7c:c1:87:69:04:cd:2c:37:9b:
f7:1f:85:bd:29:6c:86:d3:b9:77:6b:bf:fa:c3:05:44:3d:1e:
6f:25:b6:b0:84:6e:a8:db:0a:96:e8:5f:e2:25:8b:91:14:ef:
82:1d:cf:f0:14:a2:ea:7b:91:c3:ee:42:eb:f2:d7:3b:5d:0d:
5c:a4:d2:3c:25:33:31:8a:fb:15:55:9f:b2:df:cc:31:23:59:
11:11:db:73:8a:e4:8a:43:91:6c:4d:30:dd:79:2f:8d:cc:7a:
e6:ea:9c:20:b8:e6:95:9e:a1:43:2b:19:99:83:f9:f9:ba:52:
45:d3:46:9c:a7:28:04:5b:62:28:df:33:7b:02:1b:cd:a3:12:
66:a3:38:96:06:be:ac:11:07:1c:c6:84:93:95:f7:03:5f:91:
ba:cb:e5:9f:b7:d1:50:ce:f7:bb:9e:18:71:87:97:86:2f:08:
53:16:ed:89:74:ec:19:5f:cf:84:c2:17:78:64:f4:99:b6:f2:
2a:41:42:66:7b:6f:03:c5:9f:19:dc:19:6d:8b:53:0f:76:da:
26:c4:e3:bf:b5:42:4b:eb:2c:fc:df:66:3a:d0:95:0a:ee:99:
34:55:b0:38:6f:b0:ea:c1:f7:cc:07:1a:e1:96:b5:49:15:52:
12:3e:33:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:13 2025 by rpki-client