Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
File: 5J2_PERGjlJBHUhhhWvwvceQY-Q.mft (raw, json)
Hash identifier: BtXpB3pWJk5dobSudJEtC9Vd2WmOLk9CR0sBiRq1dVU=
Subject key identifier: 97:C7:FB:25:6E:EA:1E:15:AD:E1:78:A9:46:F2:D6:C8:0C:14:21:04
Authority key identifier: E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
Certificate issuer: /CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Certificate serial: 0196556E77598DA32F437F509BC241BCE4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
Manifest number: 0CD1
Signing time: Sun 20 Apr 2025 23:00:24 +0000
Manifest this update: Sun 20 Apr 2025 23:00:24 +0000
Manifest next update: Mon 21 Apr 2025 23:00:24 +0000
Files and hashes: 1: 5J2_PERGjlJBHUhhhWvwvceQY-Q.crl (hash: 0Z3WDrmfEWSCsjSUmNC1O29Hfjm1x3axpoSAUUGBh7Q=)
2: 7JvOqf8jCijk_scq8k44QE4ZcJg.roa (hash: Zr9qOX5zC6nd7EBM4UVaMfXBvFyKtR8sioHct77HMic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:77:59:8d:a3:2f:43:7f:50:9b:c2:41:bc:e4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Validity
Not Before: Apr 20 23:00:24 2025 GMT
Not After : Apr 21 23:00:24 2025 GMT
Subject: CN=97c7fb256eea1e15ade178a946f2d6c80c142104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:60:b4:00:d5:54:1b:87:63:94:6f:b5:76:
9e:3b:3c:b8:df:0f:0b:c6:ee:15:55:9f:92:17:00:
52:99:2b:0a:16:30:fa:81:f7:c9:f6:ba:a8:d9:07:
73:9b:26:9f:aa:cb:3d:c9:01:b1:e8:c9:3b:ca:98:
bd:28:ec:40:b9:5c:bf:ef:a5:7e:a7:49:97:4d:b2:
d9:cf:16:24:e1:10:4f:99:fb:0f:77:df:05:83:af:
1b:1c:ed:54:0a:38:15:3e:fb:07:17:02:55:b7:8e:
69:b4:9f:5d:8b:02:5e:4e:48:8c:6c:da:05:35:7d:
a9:bf:a1:1f:2a:c5:a5:0b:2e:04:ff:44:2b:7f:c1:
a2:5b:9e:15:b8:09:a1:26:f5:6b:fb:5d:74:3d:69:
dc:f2:3b:52:64:fd:5d:65:1c:cf:de:12:ae:27:de:
86:84:a2:96:2e:21:8f:86:d5:65:63:8e:99:06:e7:
a1:d2:36:95:d2:50:63:89:ff:c2:97:02:00:c2:c2:
1a:6b:59:c5:b6:61:90:77:bc:55:08:81:17:54:68:
ed:d2:df:85:c2:8a:ad:9e:96:cd:c6:45:d3:e1:38:
db:6d:0e:4e:dd:bd:8d:bb:4b:9c:ad:21:d4:53:0e:
7f:ba:80:7c:06:ad:34:fe:2f:54:18:c5:ff:3e:b5:
df:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C7:FB:25:6E:EA:1E:15:AD:E1:78:A9:46:F2:D6:C8:0C:14:21:04
X509v3 Authority Key Identifier:
keyid:E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:29:37:84:2a:59:cd:47:4b:88:7f:a2:02:95:6d:13:95:12:
b2:66:8f:5d:db:17:ec:6c:f6:38:be:82:08:bc:0a:79:48:f9:
11:ac:1e:86:b0:a1:4a:de:9d:dd:b8:80:fe:e7:eb:bb:58:bf:
81:4c:7c:c5:bb:93:e5:39:5d:a9:7d:88:d4:a9:ab:76:a7:0e:
77:ba:a5:71:00:46:85:8a:7e:05:59:fe:a8:32:be:08:cf:a9:
af:fc:f9:e0:68:0c:5b:03:d5:87:94:9f:e1:59:1a:35:d1:99:
5d:c2:51:98:dd:fc:b3:f4:3b:11:15:60:a6:01:a8:7c:bc:c2:
04:07:e5:71:fe:81:8d:16:7d:dc:59:2e:f7:29:f3:21:fc:91:
7a:83:5b:1b:b7:3a:f2:dc:25:10:a8:97:b2:91:78:a9:60:32:
3a:03:e1:85:d2:11:e8:9a:e5:39:ef:89:f4:6d:33:50:72:1f:
67:11:d1:d6:c5:17:a2:83:52:3c:35:17:6f:86:17:3b:b4:0d:
a7:e0:0f:fb:f6:31:ec:92:2d:bb:f8:76:af:c3:99:7a:c6:5b:
4a:a1:66:c7:e1:fe:72:40:ec:14:7c:89:95:e7:04:ce:35:4d:
23:bc:0d:93:35:15:8a:ef:36:57:5e:0c:fe:cd:a2:14:dc:17:
80:a3:30:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:56:28 2025 by rpki-client