Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
File: 5gRDG1VUd8GaP0xcttEHNljVs-M.mft (raw, json)
Hash identifier: 75ejO62BThxXAjIZiaaJkgcCyEkEXRCgq4mBcSUbDHQ=
Subject key identifier: 52:85:D6:EB:68:FA:AD:78:F7:18:9A:73:A9:39:CC:46:4E:88:CA:95
Authority key identifier: E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
Certificate issuer: /CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Certificate serial: 019655DD3D70D53E24B68787FE21A20124B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
Manifest number: 0B40
Signing time: Mon 21 Apr 2025 01:01:24 +0000
Manifest this update: Mon 21 Apr 2025 01:01:24 +0000
Manifest next update: Tue 22 Apr 2025 01:01:24 +0000
Files and hashes: 1: 5gRDG1VUd8GaP0xcttEHNljVs-M.crl (hash: Bo6cWD6lpydX2q0HRsahccbET1jVihh5ElJjXWRSC2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:3d:70:d5:3e:24:b6:87:87:fe:21:a2:01:24:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Validity
Not Before: Apr 21 01:01:24 2025 GMT
Not After : Apr 22 01:01:24 2025 GMT
Subject: CN=5285d6eb68faad78f7189a73a939cc464e88ca95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:83:3a:09:30:fd:da:5a:db:49:dd:6d:ef:d3:
7f:c4:61:fc:a7:37:66:26:5c:a9:a8:15:53:99:4d:
e3:9b:4a:3d:50:82:71:53:4c:60:6e:14:37:7a:de:
c5:70:52:0b:cc:b5:a2:c8:e5:2e:a6:0c:7d:9f:ea:
9e:d5:db:4b:4d:2a:cc:7a:4f:b9:e6:d3:27:0c:52:
33:a4:11:c3:b6:fd:f7:3a:59:df:fc:52:61:80:0d:
c2:04:44:b0:49:71:c5:81:df:e6:2a:61:17:2d:97:
ff:a6:8b:2a:a7:dd:09:78:f7:5d:5e:ab:e1:6b:65:
22:54:b2:16:29:9a:78:f2:35:2e:3c:c7:66:b0:1f:
fc:bb:0f:46:d0:e0:65:6a:e0:d7:1a:25:b4:2d:7e:
2e:31:07:ea:e2:05:24:b6:49:c0:0a:24:4c:02:6f:
c6:8c:04:b4:b9:fb:0d:82:81:2e:d1:c1:aa:c6:29:
a0:d7:4c:c5:a8:3a:97:f8:9a:35:5d:45:53:4a:91:
a2:58:8f:70:9f:51:96:7d:15:f2:64:48:fc:2e:6c:
3d:ed:76:b4:8a:6e:a6:ed:dd:59:aa:67:bd:23:aa:
0e:ff:7b:bf:e6:c6:03:90:78:f6:c7:97:ad:e2:0e:
60:87:10:23:27:e2:65:de:82:49:44:e8:9c:45:d6:
70:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:85:D6:EB:68:FA:AD:78:F7:18:9A:73:A9:39:CC:46:4E:88:CA:95
X509v3 Authority Key Identifier:
keyid:E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:38:ae:a7:a1:ba:e0:be:81:8c:ca:86:11:07:f8:21:b3:54:
d4:d2:c3:e0:39:e6:2c:47:cb:d2:f0:a4:72:28:4c:ee:10:53:
3d:54:63:46:bb:7e:ec:f0:d4:bd:82:67:d2:ac:0f:1a:ef:28:
43:61:48:fa:f7:f9:c6:b7:0c:92:b8:86:33:f1:16:6f:36:a3:
c9:fe:ce:75:3d:ab:d6:2f:2f:8f:37:93:07:b8:1a:1d:0c:61:
cc:37:ea:fc:76:5b:a0:48:d9:f7:da:43:42:0e:fc:42:00:75:
d3:11:28:13:e3:9d:b1:97:32:67:8c:90:ca:8c:49:b6:0a:cd:
f9:ab:c2:dd:e6:57:71:c5:b2:40:3c:32:d6:24:38:56:de:5d:
39:36:dc:b2:93:fd:6b:a3:64:5f:bd:2e:22:2e:eb:87:fa:6d:
51:e2:12:9e:e6:c2:d6:24:cb:f9:5b:3e:12:9d:40:5c:dd:cc:
ea:87:06:bb:df:af:e1:3f:27:c9:17:55:5d:37:68:14:29:33:
b6:cf:92:93:e2:51:94:3b:fe:19:fe:75:a6:33:de:a7:6c:d1:
75:6d:a4:48:20:60:93:40:2a:d7:f6:b5:95:db:f4:b8:84:6c:
f6:f4:74:52:c9:f0:67:d6:28:b3:ef:fa:ff:80:ee:52:01:b9:
51:cc:6e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:39 2025 by rpki-client