Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
File: R5govcbQWedVFZLePuKetBv3vaU.mft (raw, json)
Hash identifier: X3aNYLqVqwdKUOgkQU9+bvCn7eQKpfBARhtc9hnG02o=
Subject key identifier: 9D:03:A8:2D:3E:20:29:BB:66:31:A3:63:D2:83:80:7C:6D:7C:F6:E5
Authority key identifier: 47:98:28:BD:C6:D0:59:E7:55:15:92:DE:3E:E2:9E:B4:1B:F7:BD:A5
Certificate issuer: /CN=479828bdc6d059e7551592de3ee29eb41bf7bda5
Certificate serial: 0196556E8675D766C1BC71C41FC85D1FBCBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
Manifest number: 1236
Signing time: Sun 20 Apr 2025 23:00:28 +0000
Manifest this update: Sun 20 Apr 2025 23:00:28 +0000
Manifest next update: Mon 21 Apr 2025 23:00:28 +0000
Files and hashes: 1: 6tr1rrCgjeuxrkgAXDLatxAPpWk.roa (hash: A5u3qVfZdPKR2rtZPYyIhEzH3krbvs2KLzMm8FE26Yo=)
2: R5govcbQWedVFZLePuKetBv3vaU.crl (hash: FdVaemTjuRICjSmaEx3PZ4w1XF1Y0YnridgqBZFvIvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:86:75:d7:66:c1:bc:71:c4:1f:c8:5d:1f:bc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=479828bdc6d059e7551592de3ee29eb41bf7bda5
Validity
Not Before: Apr 20 23:00:28 2025 GMT
Not After : Apr 21 23:00:28 2025 GMT
Subject: CN=9d03a82d3e2029bb6631a363d283807c6d7cf6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:f1:c4:87:a6:30:13:3d:ec:ec:2a:f3:0c:
e0:71:c0:da:d8:f1:78:2c:7a:fe:c4:28:5e:57:67:
90:fa:ab:f8:e6:ad:cc:e6:cb:53:0a:39:05:fd:c7:
69:f6:dc:fa:75:34:a3:9a:87:83:1e:eb:d7:43:06:
19:f9:44:99:66:1d:4f:18:4f:92:30:3d:b9:5b:87:
f5:d0:48:93:90:00:71:1a:22:7f:6e:8f:07:ad:03:
8f:29:3f:92:b0:85:67:b3:5b:ce:58:54:45:64:4c:
16:26:24:71:6c:39:19:3c:2c:23:54:74:4e:dc:24:
67:b4:21:1c:29:4a:c4:f0:d7:30:ae:b3:26:8b:06:
4d:60:98:dd:91:ca:ec:c4:72:59:18:d8:97:bb:43:
bc:36:d8:f0:2e:62:4d:5d:10:aa:13:fe:18:f4:e6:
92:be:a6:6d:72:b1:cc:3d:ac:f0:3a:82:1a:28:1e:
07:d6:6c:41:70:1e:1b:84:90:40:cc:38:60:20:8e:
f2:91:2b:39:ba:3d:89:23:24:15:d7:d0:d8:c8:71:
1b:48:67:af:38:20:54:18:bd:52:bd:16:82:33:29:
8b:e5:de:34:52:db:9b:06:7b:ca:0c:05:31:dc:d5:
de:15:d6:e4:05:7a:f8:3b:1d:2c:c0:ba:6c:99:b1:
3b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:03:A8:2D:3E:20:29:BB:66:31:A3:63:D2:83:80:7C:6D:7C:F6:E5
X509v3 Authority Key Identifier:
keyid:47:98:28:BD:C6:D0:59:E7:55:15:92:DE:3E:E2:9E:B4:1B:F7:BD:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:22:48:4d:9d:c6:ed:b0:71:a8:d6:ca:cc:70:70:9b:36:95:
ef:4b:d4:31:bf:79:7c:ad:62:9c:21:f5:a6:1f:2b:99:0d:ca:
64:92:fb:e4:34:a8:9c:4a:45:d8:f3:1c:01:60:00:33:90:fa:
77:68:e3:6f:ec:83:48:7b:28:6e:e0:00:33:1c:80:0e:ed:d9:
a4:11:b3:81:1c:97:a5:7d:76:45:cc:4d:c5:b4:89:40:8a:ea:
1e:ff:43:fb:ec:8e:ed:c2:49:0c:ce:d5:f9:13:e5:ee:51:c6:
09:f4:a9:12:c7:8a:4d:55:e7:71:18:97:b8:31:b1:a4:06:39:
b1:fd:6e:44:3e:c6:2f:2d:fa:d1:1f:51:b9:1b:31:b7:3b:2e:
53:52:2c:94:f3:1e:a9:7f:48:30:7e:5c:52:bc:6d:c4:fb:06:
af:d4:71:89:f1:0f:da:5e:80:26:2b:20:31:7e:91:5f:90:08:
40:a8:09:23:70:4d:8c:72:a8:25:0d:b6:36:01:0e:ae:3f:fb:
99:46:eb:d3:f4:ab:d3:c5:ba:07:cb:b4:73:8b:27:61:96:39:
f1:0a:e3:07:8c:f4:3b:3d:da:1f:f6:f6:b2:d3:85:48:33:8e:
7b:12:85:a2:ac:d9:78:40:b5:11:2e:c9:13:16:36:ab:af:e7:
a2:94:26:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:59:41 2025 by rpki-client