Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
File: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft (raw, json)
Hash identifier: BC+TxnlTLxkJBvTgek2/+ITFgCxEtbP4G9NvALJ8fbo=
Subject key identifier: CD:57:B6:47:43:07:43:16:1E:8A:7A:5A:BF:94:BA:C0:4C:AE:5C:CA
Authority key identifier: E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
Certificate issuer: /CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Certificate serial: 019654C9E1FA9FFECA9DC7E1891625D5D2DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
Manifest number: 1056
Signing time: Sun 20 Apr 2025 20:00:38 +0000
Manifest this update: Sun 20 Apr 2025 20:00:38 +0000
Manifest next update: Mon 21 Apr 2025 20:00:38 +0000
Files and hashes: 1: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl (hash: EJgKryXIIxF5qvtW+RbTq/bOgkrVM+U3D4N+zDsyJzs=)
2: n3Rb7e4leVAV_P84v_-RNrezbUU.roa (hash: nU0WMWHhxMdmntA6B1n8DiXNUPiYR3E/XJsxM+pnKTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:e1:fa:9f:fe:ca:9d:c7:e1:89:16:25:d5:d2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Validity
Not Before: Apr 20 20:00:38 2025 GMT
Not After : Apr 21 20:00:38 2025 GMT
Subject: CN=cd57b647430743161e8a7a5abf94bac04cae5cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:70:c3:3f:2f:b1:27:5b:c4:85:91:97:6e:46:
db:eb:2b:03:26:c3:5d:44:30:a1:30:f2:d9:f3:00:
82:49:1b:9c:b7:78:f1:2d:d9:bd:14:2c:db:06:20:
23:50:13:34:fc:2f:23:75:f3:2c:db:76:01:0d:ef:
31:d8:84:d9:0d:6e:f5:49:9d:e9:d6:89:ed:a6:6b:
4d:48:65:7f:41:be:2e:91:a8:84:d3:1b:7c:ba:ed:
30:d1:89:55:99:9d:da:8e:68:03:3d:e9:df:88:ec:
dd:df:3e:f1:9f:31:d9:33:76:a4:bf:0e:4d:5b:cc:
ce:87:3a:a8:43:bb:ee:16:01:ec:db:24:ac:f6:85:
43:0e:65:08:0d:34:d7:6a:5a:87:25:46:56:3d:e4:
25:bb:93:a5:55:9b:e2:5d:f5:ab:69:dc:a8:ec:5b:
25:1a:a2:6b:af:a0:ff:f3:4d:1c:07:97:46:97:ed:
de:bb:b9:49:d9:09:39:5a:4c:db:88:3d:0c:eb:69:
71:4b:ac:bd:4c:41:87:37:2d:00:15:cf:df:3a:13:
f5:5a:a2:da:63:fc:fd:93:09:77:8b:f8:59:2d:d6:
08:6d:ba:9a:d4:a8:f5:31:20:53:b0:5d:c8:3b:f7:
e7:73:c2:ac:e2:b3:95:0c:d5:00:9c:03:65:5b:9d:
85:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:57:B6:47:43:07:43:16:1E:8A:7A:5A:BF:94:BA:C0:4C:AE:5C:CA
X509v3 Authority Key Identifier:
keyid:E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:85:9f:b9:6e:9e:79:10:d7:d9:e1:d5:68:0a:00:bc:8a:4c:
8e:0f:19:5c:53:0d:a3:0d:ef:42:2b:2e:99:15:07:fe:f2:b5:
4d:f8:34:ea:98:42:93:e0:55:9d:71:6c:e7:db:eb:aa:65:f5:
90:81:d3:6f:84:a3:19:da:f6:bc:41:f4:82:02:57:aa:60:ca:
e1:9d:7d:d3:91:d9:14:92:9a:13:e3:9d:54:68:bd:e9:43:45:
d7:31:9e:17:bf:23:36:29:24:ff:21:43:2f:aa:21:c9:b4:35:
00:e7:4c:77:de:2c:de:23:77:88:e4:72:08:14:67:78:ac:89:
84:f7:d9:9b:70:81:6d:ff:d3:50:16:1e:b8:9e:a6:c9:81:da:
87:34:a2:1e:cb:1f:3c:97:c5:06:33:f1:4b:3b:a6:17:4e:0c:
48:2e:3f:6c:6d:a5:41:33:44:0f:f0:f8:37:26:a4:1b:62:41:
44:66:82:60:99:e1:60:4e:86:42:06:c6:4f:b8:b7:d7:66:a9:
0c:aa:49:3b:a2:cd:a5:90:3e:d1:4f:6e:f4:24:86:00:77:01:
11:80:ce:34:8e:76:65:ab:57:74:de:49:0d:98:60:ff:8a:1f:
57:cb:cf:45:1b:ec:04:84:1b:28:b0:65:8d:5b:2a:15:c1:2f:
bf:42:22:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:00 2025 by rpki-client