Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
File: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft (raw, json)
Hash identifier: qvitf58jyFTazC0vMeLrHR2MBNay8HbFvmiG3wrPmEc=
Subject key identifier: B1:62:47:CE:E3:18:76:1F:15:F7:5D:6B:25:38:AC:6E:88:C8:BE:63
Authority key identifier: E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
Certificate issuer: /CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Certificate serial: 01965B03299474ACEEDD94F761715757A8D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
Manifest number: 0114
Signing time: Tue 22 Apr 2025 01:00:55 +0000
Manifest this update: Tue 22 Apr 2025 01:00:55 +0000
Manifest next update: Wed 23 Apr 2025 01:00:55 +0000
Files and hashes: 1: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl (hash: 2Z87csBCza6e7XFkzuxe9rwBrZQrHhJ6gTF7+wzMx2g=)
2: GqkvkcQA2bbgQwHJ2b6jWAleiGg.roa (hash: EGM2nICbqAUwB5CP81F3mXlaWH5q4kAR9J7Mx82LHRQ=)
3: U_pf5mr7mVogKbgEVCSPIKt6P1Q.roa (hash: A+REPWck5DlDgbp9k+f3tR4pBhovVcICYPMhumJUrjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:29:94:74:ac:ee:dd:94:f7:61:71:57:57:a8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Validity
Not Before: Apr 22 01:00:55 2025 GMT
Not After : Apr 23 01:00:55 2025 GMT
Subject: CN=b16247cee318761f15f75d6b2538ac6e88c8be63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:43:62:31:16:b2:cc:2a:94:d2:e9:79:d3:
eb:be:3b:6e:7d:57:be:92:87:49:0f:d6:4e:52:bf:
6e:5c:c5:82:ba:a2:bf:57:3d:76:e3:7e:9c:02:8b:
94:44:20:8a:f9:b6:02:2d:6a:86:71:51:a6:a0:e8:
3f:2c:e0:7f:5c:85:66:a4:b8:c2:0e:92:c5:ea:45:
85:d8:25:2b:57:de:3b:70:b5:ac:f9:44:43:5b:30:
f7:88:ae:ce:5a:55:0d:66:2e:dd:2b:42:4c:69:9b:
b5:66:14:de:96:6b:1c:75:9b:80:2f:e6:17:40:09:
4b:db:4a:69:22:56:59:38:96:ed:49:cd:02:88:fc:
6b:97:6a:8e:10:a2:a4:ec:68:30:1a:99:fa:fd:a3:
b8:5c:94:8c:0d:63:e9:2d:e2:c3:62:e7:5a:c4:dd:
a3:34:29:09:27:5f:71:2e:c5:7c:9d:95:81:c9:d9:
5d:a0:5a:cb:2c:8d:84:30:43:15:f8:d5:d3:44:1b:
78:4d:c6:2d:dd:a2:fa:95:73:0a:91:39:24:d2:ef:
0c:52:d9:06:fe:33:ef:3d:e0:37:77:ac:df:99:d4:
76:10:ad:4b:40:9f:d2:75:6f:f8:16:79:81:5b:4d:
62:4f:6e:40:f0:89:2b:e2:d4:b7:a5:35:46:65:be:
de:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:62:47:CE:E3:18:76:1F:15:F7:5D:6B:25:38:AC:6E:88:C8:BE:63
X509v3 Authority Key Identifier:
keyid:E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5f:48:1f:b2:24:ec:33:37:8c:81:41:f5:48:e6:3b:a4:3a:
50:99:61:c1:ae:a3:d8:07:a3:23:79:b6:72:7e:ef:c7:3e:17:
ab:07:0a:ec:a3:c3:06:f5:70:52:6e:00:34:ff:73:e3:bb:e5:
cc:f2:7c:68:d5:c0:37:28:6f:58:58:45:58:c9:55:35:5b:2c:
45:1e:56:e9:c9:03:31:52:f8:e0:68:31:fe:5d:be:34:a5:53:
dc:41:29:83:59:75:6c:df:1e:9f:93:9f:27:29:8d:49:86:02:
c7:51:db:da:e4:c2:d5:f5:54:c1:4b:b4:aa:ac:57:17:67:98:
dd:5c:17:a9:c0:8b:a0:2b:fb:4a:02:56:1d:57:74:b7:03:d7:
60:41:1c:6b:25:11:fb:c1:2b:46:a2:d0:98:61:a9:06:13:a7:
72:88:5c:52:e7:e7:a2:2b:d4:39:df:7d:00:c9:cf:3b:70:38:
53:a4:e2:74:a0:0e:a3:3d:e7:2f:a7:75:87:fe:cb:bb:51:71:
bc:c4:d0:60:71:8b:0c:0f:f2:76:66:c3:b0:b4:1d:71:db:cc:
bd:05:f9:6a:7e:fe:fb:dc:e5:97:29:67:76:63:a0:78:ee:a0:
ff:1d:13:0e:be:ff:3a:7a:39:39:f1:9f:42:bc:bb:fa:ff:e5:
09:e3:47:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:01:10 2025 by rpki-client