Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
File: 5o9MhddoNjPDOOA92OykR78_Z4U.mft (raw, json)
Hash identifier: +wHUR722nlDD3sjcaKdiFa+Obq7+E1yEWkxdngEXf9Y=
Subject key identifier: 1E:7E:75:C4:81:54:84:A2:79:2D:FD:0F:F8:A4:67:21:F0:16:B3:15
Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
Certificate issuer: /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Certificate serial: 01964B58FC35E9562BBBAEB2A3F860692DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
Manifest number: 0A3C
Signing time: Sat 19 Apr 2025 00:00:44 +0000
Manifest this update: Sat 19 Apr 2025 00:00:44 +0000
Manifest next update: Sun 20 Apr 2025 00:00:44 +0000
Files and hashes: 1: 5o9MhddoNjPDOOA92OykR78_Z4U.crl (hash: KExe40HN/rcBz1mpMilD2o7SbradIV8KIAxFb83LRRg=)
2: n9muJIRBw4eBvZP1hvt-YKWhQ1g.roa (hash: MB5Zeb9aar2OAVcUrab3R1409lEJyOeTnWEExzpIcts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:58:fc:35:e9:56:2b:bb:ae:b2:a3:f8:60:69:2d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Validity
Not Before: Apr 19 00:00:44 2025 GMT
Not After : Apr 20 00:00:44 2025 GMT
Subject: CN=1e7e75c4815484a2792dfd0ff8a46721f016b315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:78:6e:ce:85:dd:98:38:bd:7f:e1:8b:28:46:
85:4b:b8:e3:c7:07:e2:9a:a8:4c:2f:b8:b3:9e:61:
59:8f:f1:71:99:3c:f8:e1:c7:42:df:82:5a:6a:b9:
13:0a:a7:9d:18:84:94:26:d3:dc:39:9d:4b:33:ed:
1e:44:18:13:f9:2e:81:21:4c:ef:b6:5a:62:c8:92:
36:c3:47:92:f1:d3:bb:27:21:eb:37:7e:73:17:43:
c4:05:68:39:7e:bf:bf:09:b3:e9:10:f3:f9:22:8c:
a4:4a:8f:18:d6:e3:d9:86:ff:66:54:82:a0:0f:e5:
14:be:0e:da:6c:82:23:95:ee:a5:0c:ad:5a:36:80:
2a:d1:13:26:9d:91:1a:27:0f:81:1c:90:f4:7d:f9:
d7:c2:b9:65:9e:da:d7:76:4d:49:4c:50:8e:bb:19:
80:34:ac:8b:7e:53:dd:a9:13:59:a6:7d:70:fe:ce:
ce:6f:ef:d9:18:ca:dc:be:9f:c2:9f:e0:af:2e:76:
b9:b2:a0:bf:a2:5c:93:e1:4d:90:7f:cb:8b:2f:ab:
12:65:52:c6:b4:5e:24:e0:af:d9:97:8b:bf:9b:b2:
05:0c:1c:ad:6c:fd:89:47:5c:6d:4f:be:09:8e:cd:
49:8e:61:8b:af:c5:bb:ae:3c:5b:b2:a5:67:d0:b4:
70:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7E:75:C4:81:54:84:A2:79:2D:FD:0F:F8:A4:67:21:F0:16:B3:15
X509v3 Authority Key Identifier:
keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:01:ea:c6:76:54:be:6c:5b:00:60:f8:ac:c0:aa:63:3b:78:
ca:97:85:fa:73:ad:f5:af:76:4e:7c:3d:d0:aa:20:7b:01:75:
ab:57:d5:70:76:cb:5a:10:ed:bf:c1:58:5c:12:ee:30:3a:c0:
11:c7:82:69:87:65:74:db:12:a2:ab:38:29:be:5e:8d:38:12:
e6:69:d5:20:f4:89:e7:9c:97:bb:a4:97:5b:fd:33:68:aa:a3:
9a:83:a8:87:4f:6a:99:54:d6:73:c5:8d:5e:75:40:f3:61:8e:
36:8a:28:85:d7:f0:25:ed:fc:a7:cb:eb:28:18:3c:26:a3:08:
3c:72:5b:2d:32:75:6a:27:2e:98:2c:ef:05:fd:ec:70:69:fe:
a2:27:34:0d:de:b8:c1:4b:3c:73:dd:44:cd:26:be:8d:de:a4:
3e:ed:dc:ba:79:a3:57:3e:8f:f2:cb:9e:65:38:f7:69:6a:aa:
a2:d5:ee:9b:f7:f6:e6:42:a4:e7:ff:e8:65:5b:01:51:41:cc:
10:07:c1:2d:b8:06:d0:fd:5e:90:87:a6:28:fa:0c:b8:df:b8:
27:f6:76:b4:ed:3e:0e:df:65:c8:5c:a9:cb:65:22:1a:43:a1:
00:9a:32:e2:63:4f:c4:8e:2f:18:6b:f0:a0:53:e9:14:ed:75:
72:60:04:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:19:45 2025 by rpki-client