Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
File: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft (raw, json)
Hash identifier: 9FvTddl22XLO/s1x2SC9/iCHKqOE6eAO3RZv7RFuIVM=
Subject key identifier: F3:38:69:38:71:07:D5:75:66:F6:DA:48:06:E7:2F:47:B5:64:C2:58
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial: 01964C3524BCBE983BC0995D77088AA76316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
Manifest number: 1504
Signing time: Sat 19 Apr 2025 04:01:13 +0000
Manifest this update: Sat 19 Apr 2025 04:01:13 +0000
Manifest next update: Sun 20 Apr 2025 04:01:13 +0000
Files and hashes: 1: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl (hash: rANPdfs4jjFk6C6Q29Gt6VR5MBPsCHBKmhbud+ha0vE=)
2: Q5lprEAu1AjZg8eC8e9vCRTQc5c.roa (hash: 1TVaYcq6pwwmReP0rlqvmkebRDkja4y3qu5GJXEAYFk=)
3: ScDiG1bEMg_iYAnwZ5RqZ9iuBfE.roa (hash: M8oZJ8Uj/JF9chZaxOYRuKYLCgT5+KWo335qmSJiUXs=)
4: _jwv_lcEjeP6obJDvR7tAaQUU-k.roa (hash: 5K6HFH8TXSLWVxpMWf5RIreFCOahhdZCzVwIY3yAflg=)
5: a3iaEBF86wbe5VjQTp-OMfHJc1E.roa (hash: nuf4ev5fGHCC4PXZAB5L19yGP986oYjP7JfQB1/fdXU=)
6: a9_bN0F2h_Kug5sgN-Kpf5AuF0Y.roa (hash: f6TkQWvmEWMglWzfpXp6gmToVC7S2f1cCbDqMTnyBzg=)
7: lihzuQoSb7FSiRKzRwb1us4H1SM.roa (hash: KHb+Gcf8LKwRqmsQV3Dwa1dFj1b8D+2+U6h0xyQG13I=)
8: qi8JXs2yo200PkF0ybkWzT5gLbA.roa (hash: rDwlWPK/DQ56zjNjEs53TpTRvG/Y0OQ9Sl2iycPDuH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:35:24:bc:be:98:3b:c0:99:5d:77:08:8a:a7:63:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Validity
Not Before: Apr 19 04:01:13 2025 GMT
Not After : Apr 20 04:01:13 2025 GMT
Subject: CN=f33869387107d57566f6da4806e72f47b564c258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7c:33:56:f7:ed:5a:71:bc:6f:ca:6a:42:40:
f8:f5:a3:63:49:34:a2:91:96:56:f7:a9:20:8c:0d:
0f:8d:8c:15:83:03:b2:cb:c3:2d:2c:c1:67:bb:64:
75:92:dd:dd:9b:05:77:38:38:6d:6d:3d:47:3c:bf:
95:7b:30:3f:3a:13:c1:21:e5:13:f0:79:42:7d:60:
25:f8:4e:a1:3a:15:2d:02:a1:07:3c:4e:6e:1c:da:
6b:2f:01:d3:ea:ed:2d:e7:d2:06:cc:43:fb:0e:bb:
44:d2:49:71:cb:1c:d6:c8:86:11:7e:e3:18:29:24:
cc:c5:22:66:d9:ed:e9:de:b9:5c:67:54:ca:b8:3c:
92:17:ab:53:72:29:85:48:12:b3:93:cf:b9:5b:38:
67:3a:2a:62:e2:62:87:1c:a1:9e:a9:4e:7b:ad:8e:
27:44:40:5c:57:20:8b:a5:13:10:02:32:33:ab:b4:
70:d7:ad:f1:db:d1:2f:38:36:7b:bf:57:ed:3d:b8:
16:85:89:78:4c:3c:c5:70:fe:3a:ca:dd:ff:2b:1b:
4a:08:b7:8d:6e:1e:12:f8:d4:82:8c:ad:47:73:ef:
ce:ee:ff:0b:e2:fa:60:82:95:ea:21:98:0b:5c:dc:
2d:62:62:50:46:2c:f7:9c:44:c3:ac:6e:1d:21:e3:
be:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:38:69:38:71:07:D5:75:66:F6:DA:48:06:E7:2F:47:B5:64:C2:58
X509v3 Authority Key Identifier:
keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:17:0c:a8:af:4e:93:7b:e8:b5:fe:ef:65:cd:c8:b5:23:c5:
2f:3b:b7:21:7d:2b:f3:fd:46:bb:5f:07:2a:b1:cc:a4:44:6d:
eb:36:c8:8f:57:34:d8:80:2c:32:6f:f5:4d:56:4c:b5:cd:f1:
1f:63:46:ba:fb:58:5d:be:4f:63:ad:c6:17:df:e1:9b:05:bd:
7c:b9:cc:2f:21:15:a9:72:e8:ea:cc:4c:2b:58:9e:db:b7:fb:
ca:e1:ff:77:18:f5:c6:9d:77:6b:52:fc:95:18:75:4e:97:bc:
3d:09:02:1f:51:96:2e:91:d9:93:77:6b:fc:c3:af:c0:11:62:
ec:a5:3a:55:07:b6:d1:0d:92:e0:0d:9c:d6:e4:16:ab:af:af:
4e:1c:f0:ca:ca:8b:53:2c:54:64:5f:dd:f1:aa:7d:b7:df:09:
9a:37:04:d4:60:4b:8a:4a:f8:f3:d3:84:fa:f3:f2:99:95:d0:
1e:9c:4d:6d:bb:e9:ef:a4:0e:2c:5d:15:0f:3b:ee:e7:c7:3e:
24:11:16:ea:5a:2b:2c:fa:cb:38:dd:ee:13:e4:7a:8b:78:38:
b0:9c:b9:4b:c2:0f:66:1f:35:68:d2:05:59:68:f4:d1:29:4a:
9c:09:0d:61:8d:61:ed:cd:b9:99:3b:a3:1c:85:d0:2d:c4:20:
92:74:88:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:13:23 2025 by rpki-client