Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
File: v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft (raw, json)
Hash identifier: 0YFUqKr+JH1YkfD+TOkyRLtvnIt4KM1UvUYUOXHfU7M=
Subject key identifier: 84:30:78:18:06:AB:6B:48:1B:0F:69:17:DE:1A:00:B6:42:B6:F8:D3
Authority key identifier: BF:EE:53:11:55:60:71:46:30:4D:C6:5D:D5:76:FB:EE:9F:0D:6E:4E
Certificate issuer: /CN=bfee531155607146304dc65dd576fbee9f0d6e4e
Certificate serial: 01964DB51D0B71A43093B8337CB96815C211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
Manifest number: 031C
Signing time: Sat 19 Apr 2025 11:00:37 +0000
Manifest this update: Sat 19 Apr 2025 11:00:37 +0000
Manifest next update: Sun 20 Apr 2025 11:00:37 +0000
Files and hashes: 1: v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl (hash: QJdCtArvQQsE8bz/feEICDZGcJzuPUCwfOgSbyiJyJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b5:1d:0b:71:a4:30:93:b8:33:7c:b9:68:15:c2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfee531155607146304dc65dd576fbee9f0d6e4e
Validity
Not Before: Apr 19 11:00:37 2025 GMT
Not After : Apr 20 11:00:37 2025 GMT
Subject: CN=8430781806ab6b481b0f6917de1a00b642b6f8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cc:1f:87:83:64:ec:5b:3c:ef:eb:cc:77:a6:
01:85:a1:cb:0e:d1:c4:89:82:a4:e1:f3:11:06:da:
ea:1a:70:4f:8a:37:9f:05:5d:30:f0:e6:5a:c3:e8:
e3:2e:c9:1b:66:d2:c1:61:f2:cb:de:7c:fb:40:1c:
04:5e:39:09:c9:51:11:2f:46:59:0a:ce:db:15:2f:
70:96:26:89:af:eb:e4:e5:dd:f6:2a:9f:cf:3c:28:
2f:1d:72:44:bb:00:b0:b7:89:f8:cd:82:77:6e:a5:
b5:a0:a7:e7:b8:fb:34:25:5d:f5:a1:ec:07:87:3e:
b1:d1:09:7f:6e:58:6c:ab:a9:49:2c:8f:59:49:04:
b4:41:37:7e:78:7a:50:95:d2:14:dd:11:64:b2:dc:
e1:8c:a2:cf:64:6d:46:22:70:3f:ce:d6:b1:96:08:
60:9e:34:17:d8:70:9f:7a:e0:a5:8d:f0:6f:82:28:
38:97:d7:bb:76:1e:62:f6:59:17:0a:28:a9:c8:99:
01:38:a1:a5:0a:2f:9c:87:7c:b8:6f:d2:e7:d5:57:
86:87:39:a3:89:1d:5e:a3:05:b9:6d:d9:f7:7f:b1:
13:1e:ab:ec:43:60:aa:28:1b:f8:28:66:99:93:f3:
0a:4e:6f:c1:59:da:5f:e5:e3:2b:2f:76:9a:90:73:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:30:78:18:06:AB:6B:48:1B:0F:69:17:DE:1A:00:B6:42:B6:F8:D3
X509v3 Authority Key Identifier:
keyid:BF:EE:53:11:55:60:71:46:30:4D:C6:5D:D5:76:FB:EE:9F:0D:6E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5f:5e:ef:fb:db:59:8b:3b:70:b6:8f:eb:38:2e:8a:60:d0:
c6:aa:fd:c1:49:61:36:66:d6:c2:f9:d4:b7:d4:b2:3b:6c:a2:
4a:ee:57:87:7e:fc:7a:97:ea:1a:e4:0d:9e:7e:ed:8e:a0:9a:
28:1d:bf:93:ee:32:14:60:7f:82:14:61:96:20:2b:da:b9:be:
00:5c:bc:61:6c:24:26:1f:23:71:ec:ee:34:75:7b:33:04:ef:
60:40:8f:a2:96:7d:ee:47:7f:29:d0:6e:a9:c8:e4:38:b0:92:
9a:f6:04:1a:0e:f0:1f:56:a8:93:3e:cd:48:cc:58:49:42:10:
a8:36:7d:7e:ac:25:2f:8a:d3:8e:6a:5e:2a:e3:03:4d:e5:71:
39:9a:2a:00:b3:96:46:59:8a:3f:14:70:95:a1:a0:b5:43:32:
9b:42:b7:47:1a:27:41:ba:cc:90:8d:cc:7c:ee:43:45:89:cb:
a4:ab:f9:cc:9a:4e:76:25:3d:26:db:eb:c5:48:cf:b2:03:88:
16:ba:ac:2c:1d:5f:de:55:22:26:d0:1a:f5:19:8e:50:04:73:
58:cd:d0:28:45:8b:0d:5e:f0:53:76:a2:e8:36:90:d9:aa:ed:
29:69:9a:7b:f7:53:42:d4:67:26:4f:9e:94:0e:ae:de:95:52:
bf:31:17:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:27:57 2025 by rpki-client