Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
File: 5UGkwVK194bWI9hcQUZSmc3aM4k.mft (raw, json)
Hash identifier: FgWl3p1NzArEIpCkvL5ADMo2ZlmNfnXVxCbGGcKvgdQ=
Subject key identifier: 5C:01:96:0C:C3:00:84:28:88:8A:9D:79:5A:33:92:53:C2:2E:22:80
Authority key identifier: E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
Certificate issuer: /CN=e541a4c152b5f786d623d85c41465299cdda3389
Certificate serial: 019652A4C5ED16DCE0295B816B5717B4FA57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 10:00:52 +0000
Manifest this update: Sun 20 Apr 2025 10:00:52 +0000
Manifest next update: Mon 21 Apr 2025 10:00:52 +0000
Files and hashes: 1: 5UGkwVK194bWI9hcQUZSmc3aM4k.crl (hash: LVVVVxB8irVFKgw/Pwd9qBm/oxR/DHJDWwxzBm3KEpw=)
2: kenow9ooVwL0t4IuHSVvvQIsN8M.roa (hash: tJkXtVd1TBPTWkBnhiKcyLiHlQeoQgvy5+UbWV83vUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:c5:ed:16:dc:e0:29:5b:81:6b:57:17:b4:fa:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e541a4c152b5f786d623d85c41465299cdda3389
Validity
Not Before: Apr 20 10:00:52 2025 GMT
Not After : Apr 21 10:00:52 2025 GMT
Subject: CN=5c01960cc3008428888a9d795a339253c22e2280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cf:ae:2c:b7:54:ef:7c:af:c4:06:48:d1:4e:
4a:53:77:1b:e3:5c:cb:aa:95:c2:0b:e0:e7:db:84:
d7:ff:6c:29:46:20:4c:66:86:fc:4c:21:de:44:28:
f4:79:c1:72:e5:20:9c:ad:ef:71:e4:bf:c7:93:52:
d9:3c:b5:ed:db:47:12:3a:30:9e:9a:7a:f9:72:cb:
27:41:49:cc:01:4d:58:1c:9a:4b:99:54:91:15:bb:
00:0b:be:ee:a4:43:a6:b7:21:24:5d:8a:7f:61:c1:
ba:cf:22:88:15:c4:2d:31:9b:01:77:f5:ad:5d:12:
d3:2a:52:b1:19:b5:c9:9f:c3:5b:4a:e4:e1:51:ef:
20:9f:22:7d:90:d5:5a:04:a7:82:e2:1b:a7:f9:2f:
c0:d5:c1:c6:b0:c2:64:fd:3c:09:86:61:d4:0f:5a:
c3:d7:c4:c8:a7:7e:ec:84:1b:0b:1a:2d:61:72:1a:
ba:e3:b3:a0:a5:f4:c8:d8:33:9e:07:2a:b5:fd:47:
87:b8:b0:86:b8:10:0b:c2:d1:00:0d:ee:7b:7b:ac:
d1:bb:b1:77:9f:67:42:e8:96:06:71:92:c5:67:11:
05:04:24:69:b6:c9:4b:ce:18:77:fa:8f:c5:93:e2:
4d:4b:0c:60:8d:c2:4c:94:51:d3:76:ea:25:92:cb:
83:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:01:96:0C:C3:00:84:28:88:8A:9D:79:5A:33:92:53:C2:2E:22:80
X509v3 Authority Key Identifier:
keyid:E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a6:19:ce:a9:70:91:b5:4b:8b:3f:f2:29:cf:e9:d4:63:fe:
ce:25:60:dc:80:f7:a9:c7:9a:84:4e:bd:f5:c2:21:50:67:a4:
51:b8:1d:9b:54:31:7d:5b:bf:61:5a:70:d6:65:83:4f:d6:94:
b7:47:9e:e9:26:5d:71:42:53:55:4b:64:77:5f:e6:7e:01:9d:
e7:1e:32:d6:aa:1e:2a:9b:1b:6c:bb:3d:a1:9a:cc:48:5b:76:
0c:eb:a8:d9:55:03:b4:ce:b9:c6:71:6e:f6:48:b8:24:6a:6d:
99:d1:bd:5f:e8:92:0d:5d:a4:18:94:c6:e0:09:0e:68:c4:ed:
88:c7:4d:18:36:db:cc:b2:03:b0:d1:54:0e:d5:6f:56:dd:56:
0f:b8:c3:a3:76:47:fa:b7:bd:96:ea:72:a4:be:85:ae:52:df:
7d:03:bf:8c:2f:8f:3e:00:41:3d:53:32:82:19:2b:5b:5d:49:
31:9e:70:3b:66:f5:dc:ad:ed:a3:07:09:b8:06:26:0f:36:8e:
9e:0d:0a:84:62:0a:c6:0c:75:19:92:d6:ed:ad:cd:ef:a9:b9:
d4:85:13:6e:0f:45:d7:04:2e:8a:1e:10:d1:ae:cb:c3:26:78:
d1:a3:2a:b5:9a:dc:20:14:ee:32:1e:5f:3a:b1:50:67:3b:36:
6f:75:b5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:49:31 2025 by rpki-client