Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
File: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft (raw, json)
Hash identifier: ylJAk2pafpkwh2W08BSJ6Ut1tkAuOILSExwNG+9qfys=
Subject key identifier: EE:AB:87:E6:D6:DC:37:3B:B6:B0:92:D8:91:B1:28:49:51:EF:43:24
Authority key identifier: E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
Certificate issuer: /CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Certificate serial: 019628291D85A8160B4D2F0E8E8FE6B5DB19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
Manifest number: 0FAA
Signing time: Sat 12 Apr 2025 04:01:44 +0000
Manifest this update: Sat 12 Apr 2025 04:01:44 +0000
Manifest next update: Sun 13 Apr 2025 04:01:44 +0000
Files and hashes: 1: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl (hash: 2fBf4IT/KJ3ZVr1Pt4Z/k4iPJrpHmoJDTC4q2OaOH84=)
2: hYFp2PLalLwxzZhV7wbRQcfYlV8.roa (hash: LW/5pSb1sTjsNP1WLARXiewkehoBnSZqbhX0D/WoNvA=)
3: kRaJhPTv6AA3evpLDRDPj-DpMRE.roa (hash: 7JRuwVtlOrNDlLTW+rHW8uN2fSnzcu7/YmU6Ma1CHpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:28:29:1d:85:a8:16:0b:4d:2f:0e:8e:8f:e6:b5:db:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Validity
Not Before: Apr 12 04:01:44 2025 GMT
Not After : Apr 13 04:01:44 2025 GMT
Subject: CN=eeab87e6d6dc373bb6b092d891b1284951ef4324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:10:f2:fb:2a:02:93:fa:66:9e:8e:cb:6d:05:
84:29:41:0d:58:87:b1:44:aa:27:83:24:73:fe:90:
9e:b3:33:3c:82:5d:d6:05:13:41:06:72:46:86:c4:
fe:cc:1d:ee:a8:8e:4a:4f:67:5e:0b:f5:00:ad:aa:
39:ee:8a:df:58:90:a5:99:66:fb:91:c7:3d:90:61:
b8:17:28:ba:a4:f1:32:a3:64:96:b7:3d:75:12:39:
e6:e5:6f:49:19:bd:e0:08:67:c9:b0:ef:07:bc:12:
61:04:2a:dd:d3:59:59:94:d5:87:ca:63:e8:60:72:
a6:5d:c7:05:71:86:d7:a6:3e:9e:22:30:f6:e7:5b:
f1:ec:ff:d8:35:e9:a4:d0:fb:da:b4:e1:44:56:f7:
f8:f0:e4:ad:eb:da:19:22:d8:28:70:7a:b2:88:2d:
75:28:f9:2d:24:5f:10:0c:98:db:dc:f7:87:7a:d5:
55:9a:19:ea:67:4a:d9:8d:90:47:d8:db:17:b9:59:
fe:19:6c:11:8c:cf:1d:43:59:a5:1c:6a:f0:a0:1a:
af:aa:b7:53:bf:0d:81:df:af:55:a2:80:a9:6f:14:
82:29:75:32:01:27:2b:25:b6:45:38:83:09:a4:5b:
7c:bf:30:49:b0:2c:b1:04:41:f4:29:b2:be:69:4f:
3a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AB:87:E6:D6:DC:37:3B:B6:B0:92:D8:91:B1:28:49:51:EF:43:24
X509v3 Authority Key Identifier:
keyid:E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:48:54:d7:7c:3b:6a:f5:ee:54:c7:58:a5:06:87:15:66:1b:
dc:45:bf:46:e5:b9:56:51:da:fd:d9:01:fd:1c:04:a4:ac:b7:
db:1d:08:56:0f:22:57:b2:2e:08:ae:56:da:2c:36:e3:44:62:
34:32:b8:0e:67:aa:09:21:89:ba:ae:b1:b8:f4:b1:b4:72:48:
44:42:4b:78:31:02:5e:b9:7d:65:13:c2:a4:7c:df:e1:9b:49:
99:77:ea:5a:ec:b7:14:61:10:fe:bc:4d:b5:ef:f0:d0:79:02:
bd:b3:e3:28:51:1f:03:bc:aa:e7:27:e4:a7:df:a0:7c:17:5f:
48:43:a4:6e:70:d9:c4:d3:02:db:50:9d:13:1a:2c:88:80:91:
9d:04:b3:f0:0e:2e:fd:52:7f:1e:73:74:da:cc:ec:5f:33:39:
81:17:11:55:c9:90:ef:cd:af:7d:e8:44:00:7a:19:52:de:2e:
5c:a4:d7:44:75:98:ba:8d:a9:35:6f:75:45:1f:27:a9:3e:0c:
4e:cb:e1:12:94:a9:80:bc:b6:e5:14:b3:57:56:96:ef:23:1c:
17:4f:3f:a2:86:44:f9:d2:94:32:a3:06:56:d7:29:76:aa:fb:
1d:92:63:7a:d6:36:15:59:61:f3:7d:7f:4e:61:bc:41:5e:6b:
d6:6e:73:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:16:45 2025 by rpki-client