Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
File: 5QwixmuF-smN6D12HvQkNDerA5M.mft (raw, json)
Hash identifier: FUVICPv0vnyPWEhopTpcASza66941F3fZigApt5HX7g=
Subject key identifier: CC:8D:56:AB:2B:4C:6A:9F:12:C8:90:B1:6A:96:4B:1D:01:5D:4B:CD
Authority key identifier: E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
Certificate issuer: /CN=e50c22c66b85fac98de83d761ef4243437ab0393
Certificate serial: 019655A590C75D4AD1C92E094F3C4DDBDE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
Manifest number: 119A
Signing time: Mon 21 Apr 2025 00:00:35 +0000
Manifest this update: Mon 21 Apr 2025 00:00:35 +0000
Manifest next update: Tue 22 Apr 2025 00:00:35 +0000
Files and hashes: 1: 5QwixmuF-smN6D12HvQkNDerA5M.crl (hash: ux3ZfaHvtJttkDQ9Y6WsUTjBH5dUbD1VPTbcezD4n/M=)
2: 5vvZLFuVzrlfVEjgWVSSvDzWzYc.roa (hash: d36pZwdlPn9b+lfJWHYLiYs9ysvYmjF2/rOLd55l7Go=)
3: yV2QuoCYFVjM2-OTmFDea8Z9hyw.roa (hash: Fm6HaS57Sk5HrIHo3AJdE4/OrtFAnjdqKcrhGRoXq3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:90:c7:5d:4a:d1:c9:2e:09:4f:3c:4d:db:de:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c22c66b85fac98de83d761ef4243437ab0393
Validity
Not Before: Apr 21 00:00:35 2025 GMT
Not After : Apr 22 00:00:35 2025 GMT
Subject: CN=cc8d56ab2b4c6a9f12c890b16a964b1d015d4bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:57:59:a3:2d:06:5a:53:11:66:68:4a:39:da:
08:7b:d1:45:56:9e:4c:4c:30:c8:11:54:d0:52:80:
a0:4d:3a:0b:66:57:5a:bd:e4:be:82:fa:39:b8:ce:
bb:b9:79:e8:3d:62:3a:30:bf:fc:ad:fe:a6:c1:d2:
c6:37:b2:52:24:40:ef:62:1b:92:1c:29:e5:d8:06:
d5:44:77:1e:f7:9d:bb:b4:0a:e6:f0:3a:22:c3:e0:
6e:49:67:52:ac:e4:7d:d5:5f:7d:75:a6:4b:2b:0a:
a1:9c:e4:8a:cb:24:5e:1e:2b:4f:af:72:30:20:6c:
05:cf:fa:a8:55:29:2c:c1:39:70:92:cd:84:df:47:
7b:e3:03:22:94:89:1f:da:e6:d9:a5:93:2a:87:9f:
5f:55:de:0e:05:54:c4:db:10:47:7a:bc:31:19:6a:
7c:55:b6:97:67:73:6f:57:51:3d:18:86:95:87:d8:
d0:69:af:36:f2:48:59:6b:ba:6c:54:72:81:16:49:
d4:e2:1d:75:61:21:e6:ad:31:18:6e:56:f3:37:ec:
11:8f:10:f8:61:2e:b2:63:fe:5d:26:05:00:b0:ed:
e9:ea:49:38:6d:b1:a9:01:39:7e:aa:e0:15:48:bb:
5f:85:26:1d:4b:bd:3a:02:8d:3e:37:30:08:b5:da:
e2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8D:56:AB:2B:4C:6A:9F:12:C8:90:B1:6A:96:4B:1D:01:5D:4B:CD
X509v3 Authority Key Identifier:
keyid:E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b9:91:6c:29:ae:eb:51:62:f3:4d:73:69:aa:f1:33:c4:2b:
d1:b1:30:8f:28:0a:d4:71:db:f0:b6:3a:e5:b3:01:fe:3a:99:
c0:17:96:d8:c9:47:d5:2e:2f:95:bb:f7:d1:b0:80:89:e4:b0:
f5:6b:82:3f:7f:4a:fd:83:74:85:94:8f:a9:55:2d:79:e5:d4:
c4:ab:7f:3b:9d:70:55:2d:f9:d2:33:8c:14:48:46:45:41:54:
c6:45:a2:5e:17:26:38:61:a6:62:5e:62:60:5f:c7:2a:97:8f:
ee:5c:6a:35:30:7d:66:ac:0f:c9:3b:2c:74:81:46:08:80:9c:
5a:5d:90:45:06:b3:aa:76:d3:d9:f1:fd:1f:ee:f0:7a:80:29:
57:dd:e7:5d:e5:ba:e3:00:c8:3a:49:92:34:6f:93:bf:cd:a7:
50:14:31:db:97:a7:fc:37:44:aa:a4:6a:c4:35:fc:20:95:d8:
44:95:47:a3:d1:32:47:b2:b9:9d:74:1c:9d:dd:0c:4d:0a:d4:
7c:0a:19:1a:3f:48:29:f4:34:6d:0c:bf:ba:69:88:a0:25:77:
4f:97:11:68:b8:6c:06:06:a9:aa:6b:77:2d:35:4d:95:64:d9:
36:4a:15:ec:5a:d1:4a:45:ab:39:b5:47:82:cc:4d:39:a9:19:
31:1d:46:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:19:23 2025 by rpki-client