Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
File: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json)
Hash identifier: qqC51L1hMOCcrLGre0arvQIICJjv6O55tZeQlUsQAyk=
Subject key identifier: 67:D9:5E:79:94:D0:27:BE:D1:4E:D2:D9:02:B6:CA:EF:C6:76:DF:CB
Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Certificate issuer: /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Certificate serial: 01958F97EB4C0D04992BFB88EFCB1BC089B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
Manifest number: 09BA
Signing time: Thu 13 Mar 2025 13:00:52 +0000
Manifest this update: Thu 13 Mar 2025 13:00:52 +0000
Manifest next update: Fri 14 Mar 2025 13:00:52 +0000
Files and hashes: 1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: b2g6qL3s+O3QsqDLy6y8bJUVNF9nI/sXtZb7aJNEDsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:97:eb:4c:0d:04:99:2b:fb:88:ef:cb:1b:c0:89:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=67d95e7994d027bed14ed2d902b6caefc676dfcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:a1:04:de:e0:de:23:19:e5:63:c8:70:0b:
27:c0:c3:ec:6d:61:03:b2:46:e1:b9:f2:fa:ca:bd:
7a:43:5f:e0:89:94:a3:3a:27:87:81:07:df:de:72:
28:a6:82:ba:ce:b1:8d:ac:34:ab:30:28:20:a2:52:
e3:79:d7:4a:91:26:68:c0:fe:08:d0:da:f4:b5:14:
da:84:b8:e7:69:f2:d0:06:bd:fe:a5:8e:61:71:91:
6b:e1:79:45:a4:6b:2c:25:72:92:fb:94:13:f4:39:
11:85:10:82:ea:f1:d3:c0:3b:59:74:97:59:6f:59:
36:6b:41:5c:c4:f7:3a:ad:af:ea:3a:cb:f8:0f:be:
38:61:0a:46:2f:d5:f9:b2:00:c5:d6:b5:b5:94:23:
05:19:a3:34:9b:0d:39:ba:c9:c8:7a:56:89:87:ae:
ee:c3:9a:8f:a5:5e:fb:07:58:9b:f4:56:2c:a0:be:
1d:1d:fe:c8:8a:bd:67:42:f2:32:01:16:48:49:29:
fa:25:7a:d8:d6:cb:f7:ca:b1:a1:a5:10:16:28:2e:
76:e4:e3:7b:b2:d6:72:d5:27:cf:f0:8d:15:68:15:
cf:ad:ea:9f:7b:68:00:98:e1:e6:f3:31:9e:40:5f:
5a:41:0f:b2:2f:c1:60:07:eb:be:9b:08:6a:bb:21:
bc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D9:5E:79:94:D0:27:BE:D1:4E:D2:D9:02:B6:CA:EF:C6:76:DF:CB
X509v3 Authority Key Identifier:
keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:fa:b0:68:a8:67:19:ff:f2:6d:41:23:28:fa:77:aa:a1:a5:
7d:1a:c1:3f:84:b9:3c:26:11:56:e5:9d:d5:5c:f6:62:1e:d8:
e4:d7:fc:e5:f9:1f:28:d6:c3:de:2a:d4:a9:d1:05:13:ce:8f:
ef:0a:37:2a:14:1b:09:6f:2e:03:ec:f6:74:4b:a9:b7:f8:00:
b8:33:d6:ee:c9:8b:83:36:87:62:d7:5c:ad:60:46:f2:e4:3b:
cd:50:01:2b:b4:06:f9:69:c7:1e:99:47:29:d1:05:17:4b:af:
44:fe:1f:89:55:c6:cf:7f:f5:90:02:76:56:ca:0d:46:04:c0:
fd:2a:14:b2:0a:e5:7e:d0:0a:d1:b0:81:a9:65:40:f2:10:bb:
df:b0:4a:f6:df:67:15:68:91:e4:33:eb:1e:d2:4b:0e:eb:62:
0b:46:48:bc:f6:bf:01:c4:a9:8b:b6:7a:8a:98:f9:88:4c:b9:
d4:63:a4:72:17:25:3c:d5:01:ec:6c:24:fa:e9:e7:2d:76:b5:
9b:d2:5c:e6:97:57:ba:4f:34:b5:33:3f:9b:fe:c2:cb:05:b0:
9a:7e:da:81:63:cb:6f:11:df:8b:57:af:88:0b:4e:1f:c0:5d:
4b:57:a7:aa:ae:f9:79:09:c1:5f:85:6e:6e:4d:77:fc:45:c7:
be:d9:cc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:50:36 2025 by rpki-client