Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
File: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft (raw, json)
Hash identifier: GdOvvokDly4koyTShNmY2m5NjCP6KwUpRK2QJJyi3mU=
Subject key identifier: 18:73:7C:51:D4:5E:F9:7C:4F:FF:8A:E6:3C:EC:D8:4D:32:38:BF:DE
Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
Certificate issuer: /CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Certificate serial: 019644B260219F9577C1FBC3DC95E31B8BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
Manifest number: 14F6
Signing time: Thu 17 Apr 2025 17:01:02 +0000
Manifest this update: Thu 17 Apr 2025 17:01:02 +0000
Manifest next update: Fri 18 Apr 2025 17:01:02 +0000
Files and hashes: 1: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl (hash: M+B1HpUvv6LrtS9R0oJ/PA9x2CGUzROYVBj6ZJGXO6w=)
2: qvfFT1waDERLpkfbuL979IFfQzo.roa (hash: paMjx2cHD10xNMb2RegQEWwQPemRR0QtwqJzV/kovDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:60:21:9f:95:77:c1:fb:c3:dc:95:e3:1b:8b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Validity
Not Before: Apr 17 17:01:02 2025 GMT
Not After : Apr 18 17:01:02 2025 GMT
Subject: CN=18737c51d45ef97c4fff8ae63cecd84d3238bfde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:56:2f:b8:e6:03:64:c7:be:1c:f0:08:c9:
2a:f1:15:98:f8:80:3d:02:58:d0:14:73:9b:50:f5:
45:77:a2:1d:f8:8a:1c:32:cd:ef:9d:04:3f:7c:42:
82:6e:56:51:4b:66:95:b4:8f:db:9c:ad:e5:1f:c0:
5e:85:02:5a:8e:2d:24:44:26:ed:ea:25:31:5a:01:
ab:33:9c:f7:22:28:6f:85:6a:37:41:95:ea:17:5b:
8e:96:ed:54:0f:16:94:1d:a4:f7:bc:83:aa:78:2c:
91:7f:42:25:65:9a:ef:df:ab:fc:eb:37:3b:c3:3b:
fa:c3:43:e4:1e:46:21:c1:d3:60:61:9d:09:c8:47:
d4:65:54:52:f2:56:3b:de:11:c8:5e:00:53:c0:3d:
be:ce:6b:57:b0:35:c0:a8:25:9c:96:19:35:f9:82:
89:b4:0c:4b:7b:78:05:e9:c7:49:6f:08:d1:27:ae:
c6:ad:9f:ff:ca:a7:f9:85:80:6d:19:e4:d7:df:4d:
0e:0a:ee:eb:a2:ed:4a:be:7c:ec:c1:5f:ed:66:3d:
5b:9f:92:f8:93:24:51:a6:fc:ac:0f:27:23:fe:fc:
67:b7:c6:8a:78:81:8a:2e:0b:d2:8d:69:4e:c0:e8:
64:86:f8:db:af:e5:89:36:d8:14:52:e2:05:ab:f5:
95:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:73:7C:51:D4:5E:F9:7C:4F:FF:8A:E6:3C:EC:D8:4D:32:38:BF:DE
X509v3 Authority Key Identifier:
keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:63:5c:f0:20:a9:e8:47:cb:a0:6b:da:a2:ad:f4:cd:30:d7:
9b:cb:62:40:7d:e1:92:89:b1:83:dd:c2:dd:86:8f:37:b3:e5:
7f:71:d0:b0:fb:64:5a:78:70:00:91:36:0b:e3:58:65:9d:bb:
82:83:bb:3e:ce:a0:36:98:03:44:55:51:61:dd:62:50:dd:d6:
34:8a:50:0d:08:c8:19:e6:20:11:07:f4:33:a0:43:64:ed:02:
5e:18:49:52:24:c3:3d:43:5a:b3:50:23:09:30:6f:f5:d1:16:
df:6d:58:70:2c:c4:83:c0:c2:e7:fc:6b:90:5f:0f:9e:28:bb:
a1:b1:35:d1:b8:53:6d:65:81:cb:52:d4:b4:e8:3e:3e:22:46:
2b:f1:8c:2b:96:f5:46:e0:e7:57:ee:d1:58:ea:9e:50:e8:8e:
79:b2:51:d2:69:78:25:a6:8f:fd:95:b7:5f:d5:3b:f4:a8:1f:
67:21:73:4c:05:c1:fd:5e:f6:13:cc:f6:ad:c8:99:83:d3:7a:
31:18:4e:a4:fc:87:ee:25:05:e8:95:ca:db:f4:57:42:3e:85:
91:63:a8:3b:2c:01:ff:f9:1e:73:67:72:13:6c:37:22:37:b2:
d3:70:5c:a7:f4:5f:b9:48:fe:47:2e:ea:11:58:b9:98:99:4d:
66:49:fb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:00:11 2025 by rpki-client