Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
File: 5xHIkR7brjbfGoC76BSyWg-UOfo.mft (raw, json)
Hash identifier: WKTIJ92MCPlJcI2UaMaY22h7hziMAyarVVWyUoV5Pgc=
Subject key identifier: F7:55:63:2A:69:A3:02:AD:87:B9:E0:7B:D9:8D:BF:FE:A0:EB:D5:6F
Authority key identifier: E7:11:C8:91:1E:DB:AE:36:DF:1A:80:BB:E8:14:B2:5A:0F:94:39:FA
Certificate issuer: /CN=e711c8911edbae36df1a80bbe814b25a0f9439fa
Certificate serial: 01965CF220262C4A29DAF25D70C2ED451DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
Manifest number: 081F
Signing time: Tue 22 Apr 2025 10:01:33 +0000
Manifest this update: Tue 22 Apr 2025 10:01:33 +0000
Manifest next update: Wed 23 Apr 2025 10:01:33 +0000
Files and hashes: 1: 5xHIkR7brjbfGoC76BSyWg-UOfo.crl (hash: 1iGXTnf+lrAY70i4TnsHMD4PU8WicQw3/9OAYL+OPXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f2:20:26:2c:4a:29:da:f2:5d:70:c2:ed:45:1d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e711c8911edbae36df1a80bbe814b25a0f9439fa
Validity
Not Before: Apr 22 10:01:33 2025 GMT
Not After : Apr 23 10:01:33 2025 GMT
Subject: CN=f755632a69a302ad87b9e07bd98dbffea0ebd56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fb:1b:b9:28:8a:d4:fd:22:f0:bc:d8:ad:fe:
af:52:28:5a:60:d5:60:71:8f:e4:77:61:e3:95:b5:
84:35:b7:6c:a8:69:7a:f0:ba:75:4e:8c:ab:bc:d5:
12:61:4a:97:07:d8:75:f2:d2:6c:3f:30:54:e6:8f:
e7:2a:6a:d5:a4:ca:42:45:96:0c:b3:d7:af:5d:29:
5b:13:42:d9:73:c3:78:8b:3a:14:17:de:16:be:36:
71:c5:09:ac:39:df:4e:9c:86:fc:21:d0:03:7d:8e:
d6:7a:12:d9:bc:bb:bf:32:82:78:17:02:30:54:2b:
ff:92:2f:1f:4d:53:3c:78:00:ea:55:62:08:a7:e8:
66:c1:16:d9:62:7f:b3:76:8c:5f:42:b1:f9:97:c3:
13:06:e3:88:40:91:83:65:10:84:82:03:99:65:0c:
31:ea:90:05:8a:e0:17:6f:af:fc:f5:c2:a3:5a:cb:
04:f5:27:df:08:05:ba:3c:68:2f:d1:e3:4e:f8:bf:
9f:a2:28:b8:4d:b1:f0:f3:b3:bc:65:3e:63:a9:ed:
72:fb:62:d2:dc:92:6a:f9:63:24:c3:23:a7:6d:23:
ff:f0:ef:b5:ce:90:89:82:e9:4d:72:a7:c2:c3:fe:
de:0a:6c:41:c2:bc:f0:16:be:16:5c:25:e9:2f:38:
38:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:55:63:2A:69:A3:02:AD:87:B9:E0:7B:D9:8D:BF:FE:A0:EB:D5:6F
X509v3 Authority Key Identifier:
keyid:E7:11:C8:91:1E:DB:AE:36:DF:1A:80:BB:E8:14:B2:5A:0F:94:39:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b2:5a:de:3f:75:e0:ae:1e:a2:0d:92:62:f4:ec:f4:10:80:
4d:91:c3:53:37:c7:b7:c2:b0:78:a0:e2:89:a4:d5:54:46:c5:
f7:4b:c4:1d:ca:15:52:df:0a:c7:7f:cb:bc:be:e4:43:93:e6:
cf:b9:93:a7:2f:28:ee:cb:57:d3:ce:eb:41:1d:2d:2a:05:8d:
02:95:3e:e4:f6:fe:dd:f1:ab:3f:f5:08:2e:9e:d3:b2:2e:93:
7c:ab:88:c8:c1:56:ad:62:fd:94:1d:39:6b:bc:b1:fc:fd:37:
0e:16:de:46:fd:0d:4a:45:d0:96:8c:0a:84:41:d4:16:17:6f:
90:fa:50:68:dc:55:e9:9e:4b:55:f9:94:93:9a:6b:2d:aa:a7:
48:7d:45:6b:e0:44:8d:f5:81:f8:a9:82:dd:5e:75:7c:0f:94:
77:71:5e:fd:61:58:b2:2f:23:84:8a:fd:61:54:71:4c:1b:0d:
bc:b8:36:23:a1:19:a4:26:54:81:67:36:60:9a:51:26:8c:0c:
c3:d1:8d:5c:80:fc:97:89:11:75:fc:bf:20:32:56:12:bd:06:
95:7a:1a:30:9a:d5:70:ea:ca:64:47:c8:23:5d:e2:f5:4e:93:
71:5c:14:46:3a:bb:e5:51:9c:7d:3a:d7:a9:2b:79:36:fe:c2:
38:70:e5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:06 2025 by rpki-client