Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
File: 5Icdjywm6nGuXBPIRUp70xhxkYQ.mft (raw, json)
Hash identifier: pfvKwz+CFPjGBnRRTOphtdeDGEf9rZqi0bN1BHoF66g=
Subject key identifier: 58:0F:13:39:61:E4:D9:66:60:6B:3F:D9:C9:3F:20:B4:DB:69:C2:5B
Authority key identifier: E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
Certificate issuer: /CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Certificate serial: 01965D9670C0123C4B092A0296B0E8C8449E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
Manifest number: 0C82
Signing time: Tue 22 Apr 2025 13:01:02 +0000
Manifest this update: Tue 22 Apr 2025 13:01:02 +0000
Manifest next update: Wed 23 Apr 2025 13:01:02 +0000
Files and hashes: 1: 5Icdjywm6nGuXBPIRUp70xhxkYQ.crl (hash: XqmICBiw46NYZ1GbUXXOIAfxIXskPjZxuRbrUi8Io/g=)
2: ook9uIQAuCcVv2Fg0PJ5r3IwiNU.roa (hash: Y/wn2KIY7krXyisLSYMbczx5AjYDM8sXL4TRFNZpN6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:96:70:c0:12:3c:4b:09:2a:02:96:b0:e8:c8:44:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Validity
Not Before: Apr 22 13:01:02 2025 GMT
Not After : Apr 23 13:01:02 2025 GMT
Subject: CN=580f133961e4d966606b3fd9c93f20b4db69c25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7b:73:6d:90:ef:a1:42:66:a0:22:de:e4:35:
ef:1b:34:ab:40:ce:9d:8c:ab:71:77:70:9b:f7:ee:
3c:51:b5:6c:86:4d:6a:67:ea:b4:dc:92:27:c2:16:
d9:21:8d:5d:e4:b1:01:47:08:b2:ea:db:e0:d1:2e:
96:cc:b8:0c:46:a2:9d:aa:9f:5f:52:6b:37:72:14:
9e:8a:85:25:97:c2:9e:70:51:59:f3:92:5d:84:ff:
cd:85:3e:cc:65:f3:53:09:2d:6b:59:0c:9a:ca:c1:
76:33:3e:4c:81:d0:e1:c0:6b:d5:64:29:8a:37:23:
6f:6c:06:4f:b4:95:71:db:46:59:28:1b:91:ab:26:
b8:df:a6:eb:d1:78:24:82:7b:2b:28:dc:e3:3a:d9:
35:1f:d9:2f:00:24:18:96:5d:bf:86:ba:1f:8a:ae:
52:6a:23:98:c1:e9:b7:73:57:1a:9d:72:cb:9f:12:
a2:47:80:1c:4b:26:f8:e1:cc:13:be:44:e0:7c:2c:
c7:f2:73:2b:a3:4a:7f:29:1b:fb:c6:85:86:c7:0d:
0e:b3:72:07:05:de:3a:a5:27:01:92:42:11:12:1f:
c6:39:ae:d1:70:b9:8f:e2:3e:52:fb:1c:9e:46:d9:
e3:fb:c4:d6:95:55:3e:62:d2:5d:d0:d1:38:98:a2:
94:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0F:13:39:61:E4:D9:66:60:6B:3F:D9:C9:3F:20:B4:DB:69:C2:5B
X509v3 Authority Key Identifier:
keyid:E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2d:b5:c1:ea:b8:a8:b9:fe:be:84:4d:92:50:c9:8b:88:94:
09:26:7b:ec:65:90:d5:71:54:d8:d1:40:bd:a3:e6:78:d8:ee:
4a:c0:39:eb:a8:14:65:c7:7a:77:fe:7b:db:2d:28:b0:57:4a:
58:19:48:5a:87:0d:6c:eb:f8:e8:dc:8a:f0:27:89:e5:4a:cb:
81:79:fc:e7:a4:1d:5c:81:7a:dc:2c:9d:9b:1e:55:d1:0a:ab:
00:6c:21:a8:29:79:88:ab:4b:9c:68:e3:17:3a:bc:99:e3:0c:
00:f5:ea:32:06:c1:69:4e:0b:38:22:6b:e3:7f:ef:da:cb:4c:
6a:d7:e8:22:ba:2a:63:92:ae:a8:58:d1:98:e8:41:1e:6c:7a:
aa:8b:d6:0a:c8:67:78:8e:4c:a8:0c:83:55:1f:dd:2a:be:0e:
13:25:4c:ec:e1:e3:85:b2:c9:76:ca:ff:91:e0:fe:06:6a:8f:
1f:be:28:2d:2d:28:02:64:56:82:ee:69:27:5c:0f:9f:09:3e:
2b:16:0d:87:90:13:d8:65:c0:60:bc:a5:9d:20:6e:db:7e:ef:
9c:49:75:f7:09:48:19:ea:0d:03:2e:04:f4:18:25:67:28:3b:
f1:a8:51:a8:fd:b0:81:92:79:4d:c3:d3:01:f1:f3:e0:d4:82:
ff:d3:db:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:04:36 2025 by rpki-client