Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
File: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft (raw, json)
Hash identifier: cd4U12lxXJcDX7SrWP3QHkMp7MQSr5L9wTC/awSPly8=
Subject key identifier: F3:35:75:CD:AA:B8:8D:76:11:F3:68:E4:70:AD:AA:81:9B:B9:4F:B2
Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
Certificate issuer: /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Certificate serial: 019642C36C93357956A8519A4764239D38BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
Manifest number: 14F4
Signing time: Thu 17 Apr 2025 08:00:25 +0000
Manifest this update: Thu 17 Apr 2025 08:00:25 +0000
Manifest next update: Fri 18 Apr 2025 08:00:25 +0000
Files and hashes: 1: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl (hash: VCgzvaAxQlGY2zhGoIN3d+AgC2gi9V1oDyuq/zPEoYc=)
2: fTo1f8ubRBwfU0xVoHHtzOApYuU.roa (hash: 6qDVE6eG6EbcIMXQ5M9bjDvf2Vx2WIt3k9ZSfVGTUr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:c3:6c:93:35:79:56:a8:51:9a:47:64:23:9d:38:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Validity
Not Before: Apr 17 08:00:25 2025 GMT
Not After : Apr 18 08:00:25 2025 GMT
Subject: CN=f33575cdaab88d7611f368e470adaa819bb94fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:1e:74:d8:3c:e1:e9:3e:37:9f:6a:80:a7:
27:5c:ac:66:5e:9f:d7:6b:72:57:8e:8e:42:49:c2:
ec:f8:19:2d:90:6c:75:d8:33:a7:06:0a:07:1e:cf:
81:43:76:98:6a:90:de:92:ca:fa:df:c4:8a:65:28:
be:a4:0a:b0:eb:b9:f3:c5:4a:ce:a0:60:89:42:6b:
c6:5d:e3:b0:9a:0f:c7:5e:86:a6:65:12:c6:47:fd:
e1:06:6a:ce:3a:ff:fc:2d:84:1f:72:a5:a6:89:a7:
32:fe:b7:59:3a:b4:d9:c6:f7:c8:e4:e0:fc:41:96:
0e:c7:d3:03:70:ed:4a:29:a1:59:7b:2b:c1:15:15:
fd:02:dd:e8:03:07:d5:1b:56:38:09:0d:4a:4f:75:
2c:0b:5b:e4:e1:d1:32:70:d2:2a:ba:9e:b7:46:5e:
a0:ea:c6:f3:bd:aa:aa:2d:e5:ad:33:d9:ce:27:9e:
a5:98:46:d5:53:da:72:da:7b:2a:e8:1f:48:9a:e5:
23:ed:c6:e2:dc:17:98:4e:a8:21:72:9f:7a:14:cd:
1a:ff:f4:7d:3f:04:c1:62:3b:09:fa:91:94:c9:4d:
a8:6a:5a:d6:00:b5:61:58:b9:66:14:d7:2c:fd:05:
a6:9c:db:73:a0:ab:82:b5:74:a2:2e:b0:84:12:25:
26:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:35:75:CD:AA:B8:8D:76:11:F3:68:E4:70:AD:AA:81:9B:B9:4F:B2
X509v3 Authority Key Identifier:
keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4d:c8:1c:51:6c:64:89:67:e2:90:75:0b:36:60:76:b7:85:
19:4a:99:f5:23:0d:31:6d:f3:68:6f:cb:14:87:24:ea:e6:bb:
bb:50:05:ce:34:1a:17:76:af:fe:fe:50:8d:38:8f:6f:ea:39:
3e:bc:0b:2a:d0:62:9f:b3:60:a8:3a:2d:3b:fe:bd:69:29:d3:
ac:83:8e:4c:44:2a:26:24:a3:a7:16:40:84:f9:cb:00:d1:e3:
7d:a8:cd:d0:30:1e:f4:f9:37:ea:6d:f7:1a:44:1a:96:79:cd:
ed:7c:14:59:ca:6b:53:cd:33:51:3f:b7:72:88:e3:c0:a2:f6:
55:85:50:22:41:93:ac:de:d6:98:e1:02:96:1e:b6:10:ad:57:
94:42:4f:91:14:14:41:cf:85:c5:2a:7f:a8:46:a9:5d:1b:6b:
92:ec:e2:30:fc:52:b9:87:e1:18:52:55:34:55:9d:c7:58:52:
44:62:9a:0f:cd:64:d0:89:a9:56:90:03:cc:c5:23:6b:15:9c:
a1:3c:ff:c8:af:97:58:6d:2b:71:c1:0e:25:b0:1f:65:24:be:
8c:b1:a9:37:04:72:eb:31:dd:a4:b1:a3:4a:aa:c9:e1:b0:f3:
09:5d:bc:af:b6:86:f9:0e:6c:e0:7e:49:42:5c:a9:ac:ea:2b:
c0:a1:c3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:32:13 2025 by rpki-client