Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
File: 5ARKnRChnmsaztrJ_3eNT0CQaMs.mft (raw, json)
Hash identifier: wvsv3UZMmj8jFt4j6au4AlEDz9Lm9BaeUTx0n4uUMn0=
Subject key identifier: 57:20:71:6A:07:E9:7C:FE:6F:A1:E5:0D:C6:C4:D8:A9:EA:87:C8:16
Authority key identifier: E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
Certificate issuer: /CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Certificate serial: 01962C3C8E48601D05B90E0F3709414BCF7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
Manifest number: 0A3B
Signing time: Sat 12 Apr 2025 23:01:28 +0000
Manifest this update: Sat 12 Apr 2025 23:01:28 +0000
Manifest next update: Sun 13 Apr 2025 23:01:28 +0000
Files and hashes: 1: 5ARKnRChnmsaztrJ_3eNT0CQaMs.crl (hash: mZnGQ98L1Qge0p5Bra9l/EoJae+PM3PAyuZcsA9oUh0=)
2: ZEltVn27Wr_tDWWUDsnoIPSexys.roa (hash: nTpT1tYnBssg4bHieTQOF2MWxJ4AkBKr1Y7xxrvK7kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:3c:8e:48:60:1d:05:b9:0e:0f:37:09:41:4b:cf:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Validity
Not Before: Apr 12 23:01:28 2025 GMT
Not After : Apr 13 23:01:28 2025 GMT
Subject: CN=5720716a07e97cfe6fa1e50dc6c4d8a9ea87c816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:a3:df:84:9d:50:01:29:d0:3f:c6:e1:44:
2b:d8:e2:09:73:29:2a:64:38:11:35:a2:ff:62:02:
9a:91:00:14:de:b5:d9:6e:42:18:29:a8:8b:21:04:
28:a7:3f:65:20:a2:4d:3a:03:e0:ee:f7:96:76:d6:
9a:20:5b:8c:d9:70:1b:d8:ba:95:b4:cc:05:4f:f4:
e2:0e:11:d7:52:99:38:22:b3:3a:ca:0b:86:10:1a:
2c:f5:24:62:57:10:7d:4c:82:a3:cc:52:bc:98:38:
b0:87:3b:d3:7d:18:36:48:ee:4b:e2:d5:51:a7:01:
cd:44:b9:68:f1:62:69:c5:20:08:b1:85:66:11:6c:
c5:70:5b:ed:38:36:a8:a8:21:47:96:16:e0:2f:d6:
28:e8:e2:87:c1:12:15:09:fd:b2:15:21:26:4a:f3:
92:7e:d7:a2:64:6a:21:51:40:00:fd:68:2b:ef:46:
76:78:d9:6e:cc:56:99:fc:9e:bb:53:5f:50:6c:f0:
98:f9:c4:ba:e1:04:33:fc:81:27:03:05:3e:d8:6a:
be:ef:ad:5c:fc:13:45:9d:be:6c:0b:0b:b1:c6:a7:
1b:64:9d:59:1f:c8:b6:ec:93:33:62:de:49:ea:0c:
3b:29:3a:e0:0e:57:ae:85:7d:53:ac:7a:42:55:32:
fa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:20:71:6A:07:E9:7C:FE:6F:A1:E5:0D:C6:C4:D8:A9:EA:87:C8:16
X509v3 Authority Key Identifier:
keyid:E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:83:c5:ca:50:94:bd:a6:f6:4f:87:da:ae:d7:c1:f4:c1:dc:
ff:2c:b5:64:4f:94:26:5b:62:d3:3c:1e:68:06:cb:da:82:b2:
01:17:a1:91:2e:fb:f6:a2:7c:b9:ce:5a:94:30:ff:91:eb:26:
cf:ec:c5:ab:54:3d:88:26:7c:98:2f:c9:bc:c0:a8:5e:94:b7:
cf:45:6c:74:15:ce:eb:f5:31:de:7a:72:8a:bc:21:94:85:b3:
d3:e0:ee:42:8f:21:6c:ce:61:11:48:9e:20:49:07:30:1b:b6:
b8:23:ac:20:4e:98:47:25:6b:64:d0:f1:f5:57:94:83:8c:d5:
ec:fa:30:2e:78:b6:02:49:3f:2b:f6:0d:40:43:4a:c0:30:1c:
90:42:e3:f3:28:5d:4f:19:92:ab:88:ec:b7:57:8f:0f:4e:79:
9c:8b:12:ad:0c:d4:14:21:6d:79:2d:e4:e4:dc:da:75:8a:c6:
4a:ad:b9:5f:89:ee:dc:2f:39:02:a3:87:80:f8:b1:04:ba:5a:
de:79:00:ae:c1:9f:6f:78:a2:9c:80:e6:f4:64:4d:e1:f8:e2:
98:8a:56:4f:0e:66:b1:a9:3c:69:e8:d6:a6:e1:f7:6d:83:77:
b6:12:c7:62:ab:5a:ae:d8:b8:b1:f2:5a:7e:1d:32:30:73:c1:
ed:a5:3a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:44:08 2025 by rpki-client