Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File: 5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier: A0p4o/7YyssuQ/zgDhj634DDwqglXQFcXrNKDyp+nL4=
Subject key identifier: 70:19:B8:CE:81:88:8C:FE:4E:57:AA:AB:5E:0E:3A:99:6D:D2:F3:8D
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial: 0196439F10CCBCE23AFF722C0C22ECF1A95B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 12:00:19 +0000
Manifest this update: Thu 17 Apr 2025 12:00:19 +0000
Manifest next update: Fri 18 Apr 2025 12:00:19 +0000
Files and hashes: 1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: 9akg2DxxhmhVtHBOv0eNzFpvPPvZfp7TYUvS+8RbYLs=)
2: HK-o-7NfDvPjOf99JzJL3ciySc8.roa (hash: DfwAR936JyRgw/jNJGOSmvyuLlvSXJeaVAPRyL2njSw=)
3: HMayfNdgxzPgTIksbOz-A7oqLCk.roa (hash: 3k2Q130datVFrgfiHucYcHqZP3tKnpk1Z1BK3tttEV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:9f:10:cc:bc:e2:3a:ff:72:2c:0c:22:ec:f1:a9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Validity
Not Before: Apr 17 12:00:19 2025 GMT
Not After : Apr 18 12:00:19 2025 GMT
Subject: CN=7019b8ce81888cfe4e57aaab5e0e3a996dd2f38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:69:cc:9d:28:38:f6:1a:17:25:71:71:86:
cb:a2:f8:2f:4d:6f:f2:60:61:4b:80:f3:78:a2:8d:
e1:b9:c6:79:43:3b:f0:3e:48:17:e6:24:c2:08:e2:
4c:7c:71:10:c8:56:fe:42:ea:d0:7a:d1:73:43:67:
d7:e4:75:5b:34:c2:09:e0:59:4a:6d:53:11:49:44:
c0:e1:de:53:4b:5b:80:0e:0e:76:89:67:2d:27:69:
ec:b6:3b:d3:47:3e:29:45:c5:8b:6c:04:3a:10:45:
c2:0d:8d:d9:c3:71:95:4c:d1:c6:87:65:d7:b7:a3:
b4:1e:24:f3:f4:de:78:4c:2b:a1:d2:e6:0d:a8:74:
58:64:53:bc:8f:6f:eb:df:aa:4c:d2:68:93:17:69:
20:b7:7a:82:a5:6d:64:d8:58:5a:5d:c3:8e:2e:05:
1b:7c:61:e8:e2:2b:49:21:41:b2:da:35:c7:bd:64:
81:85:6e:8d:97:c3:8f:ed:9e:22:6f:6e:89:fd:96:
fe:63:e8:46:d7:56:14:5d:0f:d5:51:82:25:7c:10:
27:12:da:8b:75:4c:06:1d:fd:74:55:fe:b8:57:b1:
36:56:95:20:88:5c:04:94:22:fa:c7:35:7a:61:0f:
5b:88:25:d0:2b:ec:41:b0:f4:4a:4b:7a:67:34:b3:
6a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:19:B8:CE:81:88:8C:FE:4E:57:AA:AB:5E:0E:3A:99:6D:D2:F3:8D
X509v3 Authority Key Identifier:
keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:bb:99:6f:e4:65:f6:4b:a5:dd:95:37:8a:b1:99:f4:dc:36:
d6:48:f6:38:9a:de:8b:3c:7b:4c:07:b2:29:f9:9e:30:50:27:
b0:c1:bd:1c:fd:86:70:52:3f:03:d9:ca:dd:11:28:de:03:50:
f6:f2:16:b9:bf:bf:70:68:2e:9e:66:83:04:c3:32:19:f8:2b:
b6:c8:c2:8c:b2:2d:09:c1:a4:53:87:89:14:78:6c:e6:61:bf:
56:6c:ec:d4:f4:42:2d:96:a5:8c:14:70:e0:03:d3:34:78:c9:
9c:21:9f:15:3a:dd:e4:47:ad:9b:7f:b3:af:73:eb:9a:2a:2b:
2a:6d:8f:86:b1:1d:24:13:ab:53:8d:ae:d2:41:d2:f9:43:24:
d1:46:bb:05:f6:66:ba:b9:a3:1e:c4:62:79:25:fa:e1:a5:c2:
72:b9:6d:1f:cc:18:da:34:22:84:ed:6e:f7:54:ae:de:84:bb:
bd:0d:aa:ef:c1:58:1c:5a:79:7b:a2:bc:a8:35:26:7e:8a:72:
f0:4a:e9:ae:5d:e6:d9:87:8a:cb:ba:0a:19:93:7b:dc:d8:e1:
63:1c:a7:6d:2d:6e:3e:00:03:9f:6c:4c:90:8a:d3:a9:37:2b:
7e:5d:bb:b6:02:48:86:5c:b8:ef:6e:18:4e:e9:a0:e6:00:04:
bf:80:cc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:57:11 2025 by rpki-client