Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
File: 5Lqtn19putkQB1-OHYBetB0N98s.mft (raw, json)
Hash identifier: kK2pn+KcMXqVigFFH/QrbrBgNuE7S5lIcUEsgdlq3ZQ=
Subject key identifier: 98:22:86:AC:0F:26:03:4E:AA:F7:38:7C:1C:C6:6D:17:94:8D:3E:35
Authority key identifier: E4:BA:AD:9F:5F:69:BA:D9:10:07:5F:8E:1D:80:5E:B4:1D:0D:F7:CB
Certificate issuer: /CN=e4baad9f5f69bad910075f8e1d805eb41d0df7cb
Certificate serial: 019655DCD8A6DF529D01D235D99A201E6C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
Manifest number: 0DE7
Signing time: Mon 21 Apr 2025 01:00:58 +0000
Manifest this update: Mon 21 Apr 2025 01:00:58 +0000
Manifest next update: Tue 22 Apr 2025 01:00:58 +0000
Files and hashes: 1: 5Lqtn19putkQB1-OHYBetB0N98s.crl (hash: h+YxP8/FWn+iT8+LELDUSn7n0djA57f4bi2N4G/FAAk=)
2: Q49WFQb687C-dROudfCZNH5xgk0.roa (hash: 6gTPlVN38oZH6TKqFrihOGk/Y67bvVr39M4N4cXiKUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:d8:a6:df:52:9d:01:d2:35:d9:9a:20:1e:6c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4baad9f5f69bad910075f8e1d805eb41d0df7cb
Validity
Not Before: Apr 21 01:00:58 2025 GMT
Not After : Apr 22 01:00:58 2025 GMT
Subject: CN=982286ac0f26034eaaf7387c1cc66d17948d3e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:e4:47:df:8e:8a:a1:b1:0b:0b:0f:ef:2a:
da:24:42:21:cd:8e:ce:18:53:71:4f:05:e9:f3:aa:
e2:4c:69:18:f7:c0:fc:17:0c:d2:d9:96:6e:16:76:
ba:5f:e5:a4:75:09:b0:48:91:37:91:e5:9e:45:9d:
15:4c:57:9d:a7:c0:cf:53:cd:94:05:45:02:c1:b8:
10:3c:de:2a:f7:74:e4:b5:7f:fe:68:44:53:05:31:
39:2f:cf:37:32:6c:f8:cd:24:0e:38:84:d1:f7:0a:
f6:f5:1b:ff:5b:f9:03:5a:98:95:20:41:29:bc:b5:
82:f0:59:f8:55:af:21:be:4b:ef:ae:08:16:ea:2f:
e8:e2:e5:fb:dc:9e:66:3c:b9:5a:cd:b4:2b:0f:8c:
70:d3:a9:24:f9:c7:3c:b8:a2:d6:72:2a:cc:d0:3b:
f4:e8:a9:87:e0:7e:3b:f5:55:c4:20:dc:1c:d0:2f:
43:12:c8:c5:8a:66:eb:62:4f:ab:f7:fc:e1:80:36:
88:bc:d6:b5:dd:13:a6:8e:f7:93:27:e4:ed:74:f0:
d1:92:33:62:da:41:51:71:b6:16:11:bd:ed:12:ee:
9c:51:b4:ca:eb:13:a9:6a:88:58:ec:a2:43:3f:17:
90:5a:48:48:a0:6d:3f:f4:9b:c5:f7:c3:78:4d:15:
62:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:22:86:AC:0F:26:03:4E:AA:F7:38:7C:1C:C6:6D:17:94:8D:3E:35
X509v3 Authority Key Identifier:
keyid:E4:BA:AD:9F:5F:69:BA:D9:10:07:5F:8E:1D:80:5E:B4:1D:0D:F7:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:89:16:80:65:fb:9a:ae:9f:1b:d1:e5:bb:05:06:eb:31:60:
f5:14:43:5d:9d:1d:50:43:16:d0:33:b8:83:eb:03:1f:99:27:
9f:5c:de:03:41:26:e6:19:ba:3e:7f:1a:f6:1b:35:89:09:75:
da:9b:2f:c2:aa:3f:ef:00:2a:70:37:64:1d:b5:0a:f6:46:35:
22:1a:1d:ab:19:a3:d5:d6:e0:39:70:48:04:2f:f3:3a:bd:38:
94:5b:02:55:ae:8e:e6:a0:a5:9e:18:53:9c:93:1a:5a:5e:f1:
c7:55:a0:42:d2:2c:ef:9f:f8:70:8b:ef:f0:c0:42:8f:ab:2b:
32:e5:67:51:90:05:e4:c5:91:1f:c0:50:d6:43:a7:20:1d:ff:
e7:1c:ce:f8:4a:7e:24:3c:c8:fb:fa:c5:25:ef:67:e6:60:7e:
39:83:48:0b:db:0a:e2:39:11:0f:99:06:45:02:3b:e0:ab:b6:
33:6d:ce:93:1e:19:f9:0e:b6:55:a8:00:21:fe:21:c4:ef:3e:
43:c3:6f:b9:da:0a:97:cb:7c:7c:91:6f:92:3f:98:6a:68:9e:
d1:da:95:d9:37:57:81:68:8f:aa:e2:17:07:84:cc:e5:ff:db:
5a:3a:83:88:df:5a:d2:83:09:68:4a:e6:fb:27:1f:d7:ef:51:
ed:51:66:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:57:54 2025 by rpki-client