Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
File: 5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft (raw, json)
Hash identifier: mw/XEa2HBNR+pYUVncOP5ObWr44AQ/mzylohdiq5IjM=
Subject key identifier: A9:26:79:7D:4F:03:5D:8F:9F:78:70:02:59:B1:55:0B:5E:D6:6F:72
Authority key identifier: E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA
Certificate issuer: /CN=e6e2575267ff832d979e38ddaf3dd67420162cda
Certificate serial: 019655A63064E16839532865014E1D290017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
Manifest number: 0113
Signing time: Mon 21 Apr 2025 00:01:16 +0000
Manifest this update: Mon 21 Apr 2025 00:01:16 +0000
Manifest next update: Tue 22 Apr 2025 00:01:16 +0000
Files and hashes: 1: 5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl (hash: T/bY7lCFjvMEBbwdb8x4hujOl/RDdWpxk4yQ+0fHh1M=)
2: s5YaS3VA0T52xJ5l5rFauUbFgwE.roa (hash: JV1GN+4WYVJ18P7z6Hwge46vI+gFA8OZrJth5Bdr90Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:30:64:e1:68:39:53:28:65:01:4e:1d:29:00:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e2575267ff832d979e38ddaf3dd67420162cda
Validity
Not Before: Apr 21 00:01:16 2025 GMT
Not After : Apr 22 00:01:16 2025 GMT
Subject: CN=a926797d4f035d8f9f78700259b1550b5ed66f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:87:eb:fb:0a:f0:a7:c7:32:1f:c1:a4:cb:57:
6e:ca:94:0e:e4:43:69:b9:e5:be:38:c7:41:ca:1f:
20:85:35:c6:29:99:c6:e8:5a:87:9f:da:cf:80:b4:
ea:ac:81:b4:92:ba:0c:6b:d9:3c:b2:a5:46:61:0a:
58:fa:f9:1e:91:2f:dd:66:c1:12:b6:00:4a:5b:8d:
a5:38:62:62:b7:b7:eb:0b:37:de:88:25:98:dc:4e:
c0:44:42:9c:bf:88:56:cd:ca:76:11:3a:53:66:15:
b9:ca:8a:29:d0:3d:cf:79:e5:e3:2f:18:b0:87:cd:
19:71:53:5a:21:a9:2a:fc:91:84:2c:66:85:41:5e:
ce:7b:9a:64:68:11:99:03:96:4d:ac:e9:06:60:73:
5b:0e:f0:28:f0:25:5a:0c:2b:49:ec:76:d1:bb:98:
bb:11:12:de:0f:26:2b:86:bb:05:f3:9a:4a:d1:b7:
20:b8:3b:97:f6:df:2d:87:2d:ba:b3:98:c8:76:86:
e8:25:a3:4e:c5:3a:31:7d:ab:af:4a:a4:02:83:b4:
3a:00:dc:75:72:bc:07:d6:80:76:78:55:4d:fe:d4:
0c:ba:4a:4b:e3:c1:8e:6f:62:35:60:16:6e:6f:3a:
77:d4:18:79:11:da:e2:67:4a:c4:27:a6:16:3a:20:
f2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:26:79:7D:4F:03:5D:8F:9F:78:70:02:59:B1:55:0B:5E:D6:6F:72
X509v3 Authority Key Identifier:
keyid:E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:12:48:ba:39:af:f5:d0:25:20:fd:65:58:3c:e7:87:c2:0c:
19:4c:a7:8b:86:7a:f3:71:e5:d6:b1:d3:3c:6d:4b:a6:2d:5e:
70:88:64:26:80:ef:a7:30:45:e7:8f:42:f2:21:3f:7d:09:f7:
0e:a3:09:a7:67:5f:37:f0:63:fd:56:cc:fb:7a:87:d9:2e:61:
f7:cb:cb:57:50:1a:20:77:93:e0:71:11:b3:10:4d:d4:45:25:
6a:94:67:25:7c:28:80:f4:21:a4:09:20:51:73:82:1b:90:31:
0c:a0:fd:8c:81:eb:3e:00:25:34:05:a8:d0:46:81:8d:f4:a3:
7e:22:7d:f9:0e:e9:67:b6:53:de:f7:8f:b9:04:4e:78:4f:1b:
d2:0e:74:ef:1f:46:b6:37:f2:73:ed:58:7b:95:54:36:18:15:
fc:e4:05:57:0d:36:91:7f:32:a6:2a:c2:52:e7:3e:72:fc:06:
e0:20:08:65:97:81:f3:a2:49:2f:89:7a:5c:ba:86:2f:41:34:
53:34:38:6f:5c:eb:a5:48:a5:2f:90:1b:8a:01:ae:b1:13:8f:
9a:28:5d:73:89:7c:2e:02:da:b9:e0:0b:85:b3:f5:3f:b4:be:
58:92:b2:bd:c2:bc:b5:9e:5b:b5:35:c1:1a:ab:b5:60:cc:31:
4d:3c:b2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:32 2025 by rpki-client