Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
File: 5z_jNRpeYmSh-BKcECUdnolugGI.mft (raw, json)
Hash identifier: WveMvZzXMyGlh7L83U5g0q/fQuyZ+U4uZNpgKmcOG0g=
Subject key identifier: 11:4B:C4:CA:FF:76:47:69:75:2D:3D:F7:37:75:34:69:79:5A:00:3D
Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
Certificate issuer: /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Certificate serial: 01964E2347986EF46AFCEF3703B9F497CFDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
Manifest number: 14F6
Signing time: Sat 19 Apr 2025 13:00:57 +0000
Manifest this update: Sat 19 Apr 2025 13:00:57 +0000
Manifest next update: Sun 20 Apr 2025 13:00:57 +0000
Files and hashes: 1: 5z_jNRpeYmSh-BKcECUdnolugGI.crl (hash: eAWnyDVcSslyfgN+rxpaP88oR+SnFvRvkY56+5LviG4=)
2: mjZQqpBxq3tzElUxwYWj6w8CYqw.roa (hash: xWY5CwFTzA7VILUdMDaL5WQ8VyRltqo8AcwsKQ6Bk2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:23:47:98:6e:f4:6a:fc:ef:37:03:b9:f4:97:cf:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Validity
Not Before: Apr 19 13:00:57 2025 GMT
Not After : Apr 20 13:00:57 2025 GMT
Subject: CN=114bc4caff764769752d3df737753469795a003d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:fe:43:4d:bb:c3:17:d4:37:03:ed:d8:c8:
2f:3f:3d:3e:3a:7c:ae:dd:d4:d8:34:7c:5e:71:ef:
09:8e:21:bc:6f:12:f9:b8:5e:c4:e5:e0:1d:48:7f:
47:c7:5a:55:6e:29:15:31:21:9e:6b:fe:97:af:bf:
3e:f4:46:df:54:c9:64:ee:e6:10:ce:74:cf:e0:8a:
3f:c6:4b:30:35:0f:e5:e4:60:37:1a:62:1b:30:0c:
a6:b3:cf:f3:97:5b:11:c5:09:ec:f1:63:2c:0c:24:
47:68:1e:a0:eb:aa:82:dc:ec:29:94:b5:5f:33:20:
9c:78:ae:7e:92:37:47:89:19:a9:1f:75:83:15:7f:
6c:a7:9a:35:f9:73:79:8e:5e:d4:16:e3:fc:91:38:
b2:58:8a:91:dd:44:04:2e:df:88:6c:b4:fe:c5:62:
0d:62:ce:1f:f7:3c:29:f7:d0:41:61:f9:02:70:02:
32:51:0a:b0:ce:d9:88:3b:9b:69:81:74:f5:f1:49:
91:c7:b4:a5:89:bf:37:3f:c9:31:42:b4:92:19:63:
3c:36:9c:8f:3e:09:7a:d4:8e:ab:fa:f8:0a:e7:58:
51:8c:7c:1d:8b:42:46:6d:b7:86:22:1b:20:33:2c:
69:11:39:3e:7b:d3:ab:de:76:fa:f9:61:10:f6:ae:
f9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4B:C4:CA:FF:76:47:69:75:2D:3D:F7:37:75:34:69:79:5A:00:3D
X509v3 Authority Key Identifier:
keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:79:77:b5:f7:ba:bf:48:9c:b4:f1:df:fb:49:f5:a3:16:c1:
71:5e:0e:3e:f4:fa:eb:f0:b8:72:d9:bb:04:7c:03:08:d3:32:
d5:d8:c6:0b:f6:c8:90:fd:7d:7b:f6:46:cd:e5:f2:4c:38:7c:
0b:75:9b:02:47:77:c9:89:41:c5:d2:fc:03:85:08:4f:ee:75:
1d:ef:ef:1e:b8:73:3e:08:98:10:c3:11:b5:f8:cc:d0:b7:5a:
91:18:8c:06:d2:be:e0:ab:a2:dc:bd:11:91:59:c1:80:bf:60:
2e:1e:0a:c1:ee:a3:fe:d9:ad:f5:bc:47:c5:3a:a7:f5:a8:43:
af:79:4f:22:20:73:67:00:e4:dc:f6:89:52:86:0b:ba:ad:8a:
7c:a1:61:c4:fc:8b:e0:05:a3:90:35:14:5b:5f:ee:81:73:61:
a0:67:0b:c1:c6:f3:8c:a4:b3:cf:13:3e:ce:4f:fc:0c:19:8a:
2d:94:a6:ac:ae:21:f7:36:8c:94:55:d4:72:0d:bc:09:91:2a:
b0:72:33:fd:b1:10:fc:1a:4e:72:9e:66:99:60:3a:6f:3b:f0:
c3:f1:f1:e9:9f:27:66:83:c9:6d:8e:86:8a:dd:f4:b9:ff:f3:
74:f1:5a:98:ef:4a:8c:72:2b:65:ca:bf:57:5d:13:7d:79:c9:
7f:03:52:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:45 2025 by rpki-client