Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
File: 5dJyqNwEH1rcer0A1k0_MsIE2rI.mft (raw, json)
Hash identifier: RKSlzyymyZFcpqVLeWQVe7mGgVAAhCpOLTRr99I4VmU=
Subject key identifier: D0:86:E8:36:55:B9:4A:76:F1:7F:EC:1E:14:CA:E0:EF:5C:15:29:D5
Authority key identifier: E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
Certificate issuer: /CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Certificate serial: 019657CAF1FE608A096F317A161E779A62A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
Manifest number: 0BB9
Signing time: Mon 21 Apr 2025 10:00:40 +0000
Manifest this update: Mon 21 Apr 2025 10:00:40 +0000
Manifest next update: Tue 22 Apr 2025 10:00:40 +0000
Files and hashes: 1: 5dJyqNwEH1rcer0A1k0_MsIE2rI.crl (hash: ACkmEQ+4TCidB/ucb/cC8fw4ENj22HwBHYtlEp9I5jk=)
2: BSxB6YJq2jQPtYNgk4RjDz0LLwo.roa (hash: 0H0jQmEDdYcS0G88hDG7z0fv29sDbdsIXn2r0lKdjdI=)
3: DOxLN4SU2YKVe0VPHjqcaGZlpe0.roa (hash: SrolEIibncQUXL/HWDj/0Ei9nEoCbSOrTFYN2mtGMDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:ca:f1:fe:60:8a:09:6f:31:7a:16:1e:77:9a:62:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Validity
Not Before: Apr 21 10:00:40 2025 GMT
Not After : Apr 22 10:00:40 2025 GMT
Subject: CN=d086e83655b94a76f17fec1e14cae0ef5c1529d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:85:57:51:a9:78:17:74:da:1d:64:ec:6a:44:
c7:08:7e:3a:8b:1e:17:b9:24:2b:28:ea:c9:05:22:
0d:2b:86:2c:9c:5a:99:81:a4:7f:15:47:ef:44:6a:
94:53:14:1a:32:86:ce:39:81:ce:88:b7:50:01:c6:
14:52:a9:db:3f:94:bc:69:65:26:ae:d3:35:3b:6d:
15:a7:fe:bb:33:8b:9d:f8:c8:d5:68:47:73:3c:3f:
5f:04:8d:17:30:17:3a:b9:5d:ac:66:b6:6e:c5:f1:
6e:47:75:5a:25:22:c1:1c:6e:33:19:62:b0:b5:a4:
4b:56:58:3e:60:18:a8:b3:45:88:2c:b6:be:38:6d:
cf:9c:1b:75:c8:c4:8a:78:19:5f:c7:df:0d:d3:f5:
20:6f:86:62:0e:f2:69:2d:f4:51:82:b5:e9:72:5c:
53:5e:a2:4d:7f:85:72:a8:02:2c:ab:e0:23:ff:63:
a2:50:77:50:cf:5c:ae:69:5c:04:fb:a4:1f:79:88:
7b:4c:d4:53:2e:56:e7:71:c1:e3:b1:f0:dc:9a:b5:
82:66:70:64:01:e3:75:13:77:22:05:8c:cc:35:6d:
33:9b:14:4d:c5:c9:60:92:05:f6:36:c3:58:68:21:
b8:27:ff:ec:07:c7:01:06:66:68:07:6e:4e:7a:6e:
be:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:86:E8:36:55:B9:4A:76:F1:7F:EC:1E:14:CA:E0:EF:5C:15:29:D5
X509v3 Authority Key Identifier:
keyid:E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4c:ad:52:a0:b6:54:e7:fb:ec:fd:43:e1:67:fe:df:7d:a8:
41:be:61:a8:ba:9b:eb:18:76:b3:3d:73:c1:42:1e:dc:67:e7:
74:09:15:11:eb:bf:16:8e:64:cb:b2:1e:9e:40:5a:36:05:eb:
52:e3:74:23:c6:b3:bf:7c:15:fa:9c:1a:cc:e8:a8:db:cf:f5:
1b:3c:51:60:e5:94:c0:04:61:e8:9e:f3:d4:7c:03:aa:ca:76:
64:b2:a6:89:f8:81:36:a2:c8:92:6b:1d:d9:97:58:c4:cb:14:
29:05:47:fb:ac:8f:05:95:82:6a:5d:ac:45:7c:ca:5d:7e:fe:
f3:90:36:b9:6f:9f:59:92:ba:a2:63:3c:cc:1e:c6:f0:4c:52:
47:85:41:54:cf:e7:71:cc:63:b7:26:03:64:47:9a:9b:22:66:
3c:94:9e:c3:1e:46:49:f4:2a:b0:fb:a8:b7:16:bc:a9:42:18:
e5:6d:ac:41:5c:cd:d2:14:86:40:e5:ec:e0:74:71:55:d0:40:
27:5b:2b:23:92:77:03:c1:6c:73:7f:3d:41:3d:11:a7:4c:17:
0a:cb:25:37:9e:b3:19:68:15:9c:50:e7:dd:e2:56:cc:7a:c3:
3e:10:ae:fe:5a:58:de:f6:78:95:d9:eb:94:50:db:21:03:b1:
5d:04:01:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:06:50 2025 by rpki-client