Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
File: 5qTLdM9STBgSHVO1MsA8BvSta-Y.mft (raw, json)
Hash identifier: 1fScJttZdIeUgcGkhNvRYcqwmPuESGQAzYheO7qmHAo=
Subject key identifier: 06:A7:68:6A:68:DA:56:AB:CE:21:E2:24:8A:92:C0:F1:75:29:44:B6
Authority key identifier: E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
Certificate issuer: /CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Certificate serial: 019655A552BF1645146EA786BAB5749DA116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
Manifest number: 0EF8
Signing time: Mon 21 Apr 2025 00:00:19 +0000
Manifest this update: Mon 21 Apr 2025 00:00:19 +0000
Manifest next update: Tue 22 Apr 2025 00:00:19 +0000
Files and hashes: 1: 5qTLdM9STBgSHVO1MsA8BvSta-Y.crl (hash: 5NgoKvcIACI+2AwQSrowbdsm2iBlIUS4DqqmC6VVvrA=)
2: FXr_S2B4fxLM9qAbLsO0vh-M550.roa (hash: XI0iDABL8ODtA8iq4rY+TAYyWpnlmsL+6qt8rzYOd/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:52:bf:16:45:14:6e:a7:86:ba:b5:74:9d:a1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Validity
Not Before: Apr 21 00:00:19 2025 GMT
Not After : Apr 22 00:00:19 2025 GMT
Subject: CN=06a7686a68da56abce21e2248a92c0f1752944b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:9e:c9:8b:93:bf:dc:1a:33:a8:dd:78:d6:
98:cf:6d:cc:26:f0:88:4f:2c:f1:ee:02:8c:2f:b7:
e7:d9:80:8c:20:9b:20:24:46:37:7c:dd:12:aa:13:
2b:15:96:4b:b4:98:f0:dd:ca:5a:eb:1b:7d:44:a1:
85:33:f7:79:6e:35:c5:c1:ca:e6:36:11:b4:cc:3a:
1b:ae:bd:ae:e9:57:1a:cb:58:63:0a:0d:ef:d7:bf:
03:7d:81:03:95:1b:ed:e1:b5:79:9c:90:0f:8c:19:
1b:71:63:a6:c5:b5:dd:92:53:4d:83:72:37:27:2e:
00:70:85:2c:74:80:0d:1d:8b:84:96:bd:3a:64:ad:
4e:ea:e6:93:97:ef:8e:41:3b:04:36:56:83:85:bc:
53:89:cc:47:95:fd:26:31:15:5b:2f:99:7f:0f:db:
7e:0c:f3:10:2f:11:34:2a:ee:b5:f4:6b:db:60:84:
b3:98:f3:4d:59:65:69:56:4a:87:0a:55:31:65:df:
3b:51:0b:ee:20:7c:10:e9:08:f9:eb:35:b3:0a:ea:
25:17:b1:58:30:8e:7d:28:64:21:96:e8:40:ca:74:
90:49:b8:12:6e:f6:ae:bd:16:45:e4:45:30:f5:29:
22:9d:66:46:ed:9a:6b:1a:9c:89:95:45:36:69:f3:
31:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A7:68:6A:68:DA:56:AB:CE:21:E2:24:8A:92:C0:F1:75:29:44:B6
X509v3 Authority Key Identifier:
keyid:E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:11:6b:c4:b3:78:a9:4a:c3:1f:0a:bb:b1:b5:7d:4e:10:11:
e5:7f:9b:9b:75:45:b9:c8:df:66:6e:03:e1:74:15:12:2a:75:
84:a5:41:6d:a8:17:ac:ca:88:7f:74:83:c1:5b:25:ce:e6:3d:
47:c1:4c:7a:00:6d:bd:fe:25:e4:e8:a4:c8:45:6e:4f:31:6d:
0b:05:f4:cd:1f:f0:3d:bf:eb:aa:2b:20:d8:61:e2:a0:b8:31:
a2:7c:77:06:e9:51:bc:b3:42:7f:48:38:9a:a5:17:b6:6b:64:
e0:d4:17:1a:8b:2a:35:f9:7f:90:c4:c6:23:80:a4:6f:6e:04:
5e:e9:9e:b3:89:6c:73:d9:9b:31:fc:62:18:5d:6f:80:12:1f:
6d:f3:e2:28:c6:da:51:56:38:ae:0a:b7:2d:e8:b2:68:dd:8c:
87:75:ab:34:98:7a:18:34:d3:4f:fe:ed:44:ef:2e:1f:88:d9:
e4:8f:91:07:5d:de:51:4d:72:c2:87:93:df:b0:7f:59:a1:d7:
44:40:48:0a:a3:a7:98:bb:85:b4:46:97:26:23:c1:0d:ba:f5:
5b:7b:37:b6:d7:fc:5e:11:50:b6:25:b2:d4:1c:c7:8b:b8:94:
cb:ab:fc:0b:9a:11:ba:5c:b2:41:1b:bf:b4:fe:1f:b9:db:02:
fd:5e:42:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:47:00 2025 by rpki-client