Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
File: 05EjiA9CdEbV_wfO-WM-htxJGY0.mft (raw, json)
Hash identifier: 220MNriuezwSxWRKztLXn1znt0Dfj5w4HGx91UFzHQU=
Subject key identifier: 96:8A:22:C5:9A:95:85:73:5B:B5:E2:D3:BE:10:59:2C:12:12:EA:0F
Authority key identifier: D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
Certificate issuer: /CN=d39123880f427446d5ff07cef9633e86dc49198d
Certificate serial: 01964A0EDF3F345EC1E8E29BFB7680F6C1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
Manifest number: 05E1
Signing time: Fri 18 Apr 2025 18:00:10 +0000
Manifest this update: Fri 18 Apr 2025 18:00:10 +0000
Manifest next update: Sat 19 Apr 2025 18:00:10 +0000
Files and hashes: 1: 05EjiA9CdEbV_wfO-WM-htxJGY0.crl (hash: zq9D0Kfa96ECtyiYdUcMoziVRAG7hWIbNRPLpT2VWyQ=)
2: 1-HePaXJiClEhHOw237Wa73vaFTc.roa (hash: 4PUKfjaEAzPB9R2XBWxJhNfJbqqZiV/WF7YuGVgHgMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0e:df:3f:34:5e:c1:e8:e2:9b:fb:76:80:f6:c1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39123880f427446d5ff07cef9633e86dc49198d
Validity
Not Before: Apr 18 18:00:10 2025 GMT
Not After : Apr 19 18:00:10 2025 GMT
Subject: CN=968a22c59a9585735bb5e2d3be10592c1212ea0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:ca:e0:5d:07:76:21:4a:f8:46:24:e4:ba:
5d:e4:1b:83:2f:a0:ad:0f:02:7c:31:4a:59:35:e2:
43:79:1c:32:b4:dc:2a:e3:22:85:d8:23:d5:bb:b9:
8d:b8:8c:cd:10:44:2c:6e:dc:a8:f4:51:12:41:a7:
57:80:5b:b9:c0:a3:0e:2a:ec:b1:32:d6:21:9e:84:
65:cc:4a:43:83:01:81:1f:ba:02:7b:a6:ae:98:5e:
2c:3c:c9:a0:70:fd:b9:87:08:8c:20:23:2c:79:7f:
a2:82:39:1a:ff:08:1b:7a:cc:3e:65:3f:4d:b7:5f:
cb:81:59:fd:e7:43:b4:49:72:9b:51:d1:4f:54:e5:
75:50:78:8c:43:c6:eb:45:01:9b:dd:72:de:bb:c0:
c5:5d:cc:99:29:4c:42:f5:c3:91:31:88:3e:c7:e4:
26:d5:8c:b1:ef:38:68:ef:57:5d:e8:f8:66:e2:ab:
ec:69:85:98:05:e0:11:ec:c4:8a:84:fc:52:76:5d:
a5:92:df:6f:94:8e:dc:a8:8a:69:35:bc:c0:13:8a:
ea:9b:a4:e5:36:22:18:4e:7c:2b:a7:c7:e3:92:be:
d5:43:ba:2e:0f:2f:82:a7:06:53:df:19:2f:5d:c0:
4d:84:76:76:dd:0d:71:35:e5:6d:02:0f:da:b1:06:
3f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8A:22:C5:9A:95:85:73:5B:B5:E2:D3:BE:10:59:2C:12:12:EA:0F
X509v3 Authority Key Identifier:
keyid:D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f8:94:be:77:52:ab:96:1e:48:c6:9d:f2:1f:1c:8c:e6:69:
2c:f5:05:fe:b2:e7:ae:0d:0e:e3:cf:b6:49:4c:8e:d4:21:9d:
a2:a7:31:cc:9b:5f:e7:dd:7b:3d:da:bb:eb:88:ce:5c:bc:08:
45:95:55:96:5c:27:bd:dc:40:1f:ec:85:c6:f3:c5:76:2e:7f:
bd:ae:39:34:81:98:7b:76:19:2a:22:d3:6c:27:82:9d:cf:da:
68:63:5c:55:c1:80:c5:d4:68:f3:90:6d:98:fb:36:10:d6:88:
4c:91:4a:7d:46:3e:01:6f:7e:1b:4f:15:08:97:8a:13:23:01:
b3:3c:f7:3c:a4:d5:da:9f:c4:a0:06:4c:45:28:a2:3c:e5:f2:
b7:cd:38:20:ad:08:1c:33:a8:cd:13:af:eb:1e:03:25:74:a7:
7a:9f:49:ac:aa:44:d5:8f:c1:e8:b5:d8:a0:25:ee:02:2d:82:
80:c5:3f:fe:2e:e0:2c:07:00:6f:3c:07:f8:df:8d:89:38:52:
52:f6:e1:93:5e:a4:d7:b0:c1:96:8e:eb:91:19:e6:57:b8:b4:
df:ab:4f:63:a5:1d:dd:74:75:58:d7:cb:6c:af:24:ce:9b:d2:
7d:6c:be:20:3e:48:6f:f1:39:34:a2:48:63:a7:6d:e4:ed:1a:
c3:d7:55:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:18:50 2025 by rpki-client