Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
File: 5e_Rhp7q_m-fA8s0GGibywxpE3A.mft (raw, json)
Hash identifier: tBDkXllP2FMWjyEigWFVjdqSpoOFSNijixs5VrDO7zw=
Subject key identifier: 07:DE:41:BC:59:93:E4:75:D0:41:38:3C:C6:F6:3A:CD:7F:F4:7C:52
Authority key identifier: E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70
Certificate issuer: /CN=e5efd1869eeafe6f9f03cb3418689bcb0c691370
Certificate serial: 019643D6A5B286AE9F5F306B832D308E0235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
Manifest number: 0F10
Signing time: Thu 17 Apr 2025 13:01:02 +0000
Manifest this update: Thu 17 Apr 2025 13:01:02 +0000
Manifest next update: Fri 18 Apr 2025 13:01:02 +0000
Files and hashes: 1: 5e_Rhp7q_m-fA8s0GGibywxpE3A.crl (hash: f2GjJlepjIJZ6wXlW9r20IPfR0XPq8h8nkI1ztPPq/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:a5:b2:86:ae:9f:5f:30:6b:83:2d:30:8e:02:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5efd1869eeafe6f9f03cb3418689bcb0c691370
Validity
Not Before: Apr 17 13:01:02 2025 GMT
Not After : Apr 18 13:01:02 2025 GMT
Subject: CN=07de41bc5993e475d041383cc6f63acd7ff47c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:e9:c6:af:ad:b1:19:df:6b:9b:c3:de:f5:
f6:09:71:43:47:81:7e:46:1a:54:5e:f1:9d:39:3d:
7a:1b:33:53:c6:c6:94:fd:79:69:cc:75:eb:6d:52:
dc:15:2e:32:db:38:a2:43:2a:64:0c:66:6b:71:51:
9a:7b:ae:c3:ee:77:13:d2:86:e9:4b:8a:6c:01:04:
b6:ef:5e:f2:05:43:b1:3b:87:29:52:16:79:72:f3:
dc:33:98:e5:86:7e:8b:dd:3c:2d:5a:ab:14:00:4f:
f8:ef:ca:fd:50:40:00:a9:d0:65:1e:db:ee:9a:a0:
bf:ea:e1:89:fe:51:e8:97:5e:58:8d:a5:99:cb:e9:
43:a2:d3:73:8c:8d:f5:ad:ca:de:65:c2:96:14:14:
6a:86:fe:4e:10:ec:1e:74:65:4e:43:20:2d:43:de:
49:ac:91:55:54:76:99:a5:97:52:ff:64:70:26:aa:
23:39:6d:10:0a:6d:94:72:01:b0:c4:b5:1d:64:7a:
0d:4b:c9:15:38:00:65:af:19:06:60:9e:4f:f6:31:
ab:7f:fa:39:eb:35:47:fa:6d:c7:3a:a0:e1:a3:c3:
1c:92:e1:c8:f0:dc:76:d4:f8:ee:5e:fd:34:28:45:
54:64:ac:bd:cb:fb:c6:e5:fc:50:ad:92:c8:d5:af:
41:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DE:41:BC:59:93:E4:75:D0:41:38:3C:C6:F6:3A:CD:7F:F4:7C:52
X509v3 Authority Key Identifier:
keyid:E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f2:9d:79:b6:49:24:68:40:3a:70:83:7f:6d:99:49:79:1b:
9b:32:b9:72:8a:cc:0f:af:87:ec:07:e5:d2:0b:ad:79:89:6e:
0a:a6:db:fd:a6:7e:9d:1c:4e:36:3b:bb:6b:8f:df:7b:8b:f7:
2f:06:04:09:11:bd:a9:61:bb:c4:13:97:42:b0:84:bb:07:13:
3a:5c:ef:b6:9a:22:9a:8d:10:f6:74:2c:da:e0:00:a4:f3:4b:
5a:5f:49:3b:db:95:41:76:aa:35:c1:42:58:ed:98:06:92:8a:
36:88:ab:d8:1d:49:86:78:b1:3b:a0:29:41:7c:07:dc:f5:53:
bb:07:a3:7f:c1:fd:90:57:4a:87:a8:7e:e7:39:c7:44:e5:8b:
9d:f8:4b:39:b8:31:13:1b:23:68:15:75:b0:b5:0a:0e:0f:cd:
56:bb:19:6d:3b:e7:4a:5e:6e:4d:c8:b5:0d:7c:aa:fd:30:b4:
08:bf:ba:38:95:f5:02:15:e3:2e:ef:89:1e:0f:30:7f:ec:e3:
b5:40:80:6d:2b:6c:12:4e:3c:95:55:a8:39:7a:cd:18:7f:f2:
30:e5:ed:3e:42:91:5f:42:a5:62:9d:68:22:9d:c3:ee:d1:dc:
14:ac:d4:1c:a8:ef:00:46:11:6e:33:bb:b0:bc:77:20:7e:4f:
e4:bc:07:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:15:16 2025 by rpki-client