Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: T7rqhxTg8iDVch50lkV7rzIdV5mQEKpibiw1FBoqz4Y=
Subject key identifier: 88:44:3E:73:6E:15:B7:05:B2:D2:63:B4:69:B2:3C:31:3F:98:D9:B6
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 019651C93C79D6D798435D7D2EFE466142E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 058F
Signing time: Sun 20 Apr 2025 06:01:04 +0000
Manifest this update: Sun 20 Apr 2025 06:01:04 +0000
Manifest next update: Mon 21 Apr 2025 06:01:04 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: YuV1Ax5ahfzhm5g40MfJarBjYpMfdEBGlxn2E/k9LTM=)
2: FUn2t9ppYu0Wn0pkoCRZ-HiUy7U.roa (hash: IgKhBAHaInAK8D+wEDHgOoVh2qEqWhDFRzWVOdnNaSE=)
3: H4hpUNA2nrrRur4Tk2W8HjJVqu4.roa (hash: oa7awxP7blKcpEGQ8hgbpBoX6kUOq34Ta41x1XECaFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c9:3c:79:d6:d7:98:43:5d:7d:2e:fe:46:61:42:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Apr 20 06:01:04 2025 GMT
Not After : Apr 21 06:01:04 2025 GMT
Subject: CN=88443e736e15b705b2d263b469b23c313f98d9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7a:b7:2d:a7:0c:b0:8b:0f:e3:ee:b1:f0:ed:
5c:15:b8:ea:b7:8b:d8:c4:29:30:79:1a:93:cb:bc:
58:42:01:08:45:da:cd:9b:d7:e5:ea:e0:2f:c8:37:
07:ed:df:6f:9d:da:86:0e:43:d2:6b:99:a9:4a:09:
31:07:22:ad:89:28:0a:32:d8:f4:fc:a3:79:11:b9:
46:22:ac:90:d3:5d:b5:8f:d7:0b:83:1d:01:8b:f4:
8f:55:18:ff:0e:d1:3b:59:c0:e0:ed:69:01:0a:70:
69:d3:b5:43:80:24:89:88:74:09:65:2f:e8:46:2f:
6c:84:43:47:e9:f9:3c:3f:c6:bc:ca:5d:50:bf:79:
31:52:83:0e:15:b5:7b:dc:07:d0:12:86:69:21:9a:
ec:a1:e2:e4:e2:b2:ac:2d:2b:20:cc:c2:d7:e0:64:
a8:10:26:8b:bf:a9:f4:50:b1:86:2e:0b:29:a9:dc:
de:0f:63:4e:e5:89:02:e8:74:ad:2c:8a:5a:4b:de:
59:a9:3f:d0:e5:d4:87:c4:99:c8:5f:4c:7c:4e:1d:
b0:98:f6:40:e8:90:82:48:be:4e:be:9f:8c:06:cf:
7f:e6:21:bd:20:63:f8:7a:83:f4:b3:b0:1f:db:8d:
2a:f3:bd:94:b0:d7:a4:b7:a6:bb:c6:53:6b:71:b0:
3e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:44:3E:73:6E:15:B7:05:B2:D2:63:B4:69:B2:3C:31:3F:98:D9:B6
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:61:f8:2a:16:45:3e:d0:d7:e9:a8:61:50:12:ea:08:35:16:
31:3b:14:0b:60:f9:7d:e6:53:89:36:e1:f7:9a:09:99:b5:57:
f8:19:6f:f5:03:3f:90:c9:75:e7:31:ab:33:f8:db:c6:f0:f3:
6c:5f:d7:49:8d:14:2e:b5:23:c1:53:36:94:9d:1d:31:28:c6:
41:26:69:fa:8c:38:92:75:10:ab:a5:ed:16:1e:60:fe:b0:9e:
f8:ff:92:85:59:3d:0d:f9:97:1d:56:f5:92:5a:5e:9f:a2:17:
ee:1c:2a:f1:d6:6f:9f:61:63:dc:19:34:91:b3:05:ca:f7:e3:
b7:e3:9f:1b:65:5a:03:96:ba:fa:68:e2:85:a3:c2:58:2b:e6:
8c:1e:1e:91:31:ca:2b:8d:a8:37:64:f2:85:8e:76:bb:54:e6:
3b:f2:d5:f0:06:8e:d5:a4:76:92:7d:27:bb:44:c2:58:59:f0:
46:d3:cb:61:e4:64:4e:83:5b:e5:23:16:22:73:51:63:54:a1:
6e:f8:e2:61:90:52:52:30:df:cf:39:a0:98:d6:8a:d2:59:57:
74:1e:eb:40:67:ef:62:a3:82:10:58:8e:af:25:01:d9:66:80:
22:f9:16:fd:3a:bf:be:0a:06:01:47:51:0b:ee:7b:73:a8:68:
22:be:96:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:26:48 2025 by rpki-client