Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
File: 5YJfvufEOimDjqvk_IfXlDScDIA.mft (raw, json)
Hash identifier: KuMdgKVIJt/mTb4rH7b2J91ysBVAojfGJrJNjjHcDP4=
Subject key identifier: C0:28:C6:71:D0:75:D2:A8:ED:23:6F:2C:8A:87:90:30:D3:E5:BA:96
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 0196537FFFA42760D9637BE75A0365D65CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
Manifest number: 124E
Signing time: Sun 20 Apr 2025 14:00:19 +0000
Manifest this update: Sun 20 Apr 2025 14:00:19 +0000
Manifest next update: Mon 21 Apr 2025 14:00:19 +0000
Files and hashes: 1: 243IV1WXDUNyw7rjuRN5vP7IoKY.roa (hash: 0O92Hb85YHbJvLZRlVOgE6xTVbqzeKYfm5ftactSgfc=)
2: 5YJfvufEOimDjqvk_IfXlDScDIA.crl (hash: xkIDPrxrhYo+bHVawL+thFhwG8elcHp5ZGoKKznlBKM=)
3: s0mRSNPGzNmp6WQ88QxkbOS9ktc.roa (hash: /+qWzxH2Ky85VShyjzGhO9D2cLW0/sLX7hqo1iX/VWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:7f:ff:a4:27:60:d9:63:7b:e7:5a:03:65:d6:5c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Apr 20 14:00:19 2025 GMT
Not After : Apr 21 14:00:19 2025 GMT
Subject: CN=c028c671d075d2a8ed236f2c8a879030d3e5ba96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:b4:b1:01:8a:d7:dc:65:cc:c5:0c:e1:22:
70:83:c1:0e:05:c5:ed:16:c1:13:9f:0e:78:f1:d8:
fc:db:f1:bc:79:13:92:47:2f:bb:7c:e3:a7:be:4e:
4f:81:14:91:ab:dd:4e:68:3b:1e:6a:2e:d9:a2:2f:
f4:e8:de:45:81:00:f0:a2:8d:65:49:0c:12:15:da:
9b:00:f1:14:0c:71:37:1f:df:fa:78:50:de:79:4f:
4f:bd:d6:df:14:e5:a9:8a:75:c8:63:a2:bb:89:11:
f4:64:56:82:31:21:d9:fd:12:c0:18:5c:e7:0e:98:
e2:6a:15:7c:33:bd:27:1f:3a:cf:79:92:53:1a:75:
f3:78:c4:30:58:c8:93:45:2f:da:12:05:26:b5:8b:
bb:7a:13:12:a7:6b:0c:cd:85:c5:cf:e0:ea:1c:44:
60:86:e2:69:07:d0:3f:73:ee:e1:86:2c:0b:de:9c:
c8:03:cc:3f:c9:07:ae:dc:fc:d0:ee:ae:42:7c:5f:
65:c7:d7:f4:fb:bf:ed:bf:19:34:56:e2:2e:ff:02:
36:6f:c5:95:78:8d:a8:b7:7d:70:94:b7:c7:a3:48:
8e:2a:77:d6:19:e1:6f:e5:51:8e:5f:c8:ea:45:66:
57:b3:fd:65:53:27:92:86:af:fc:c2:7a:5d:dc:8c:
78:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:28:C6:71:D0:75:D2:A8:ED:23:6F:2C:8A:87:90:30:D3:E5:BA:96
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1e:0a:a8:86:01:ad:b7:24:f0:5b:c7:bd:a3:da:7e:05:15:
d7:36:04:45:24:7d:9c:30:39:e7:74:c1:a3:da:40:57:c4:43:
98:69:4e:05:44:ea:38:db:c2:77:ec:e5:f5:22:da:f2:9a:ee:
a8:2a:1a:60:c7:f9:2d:3e:e4:8c:c9:b7:1a:15:1e:ab:00:8a:
67:fd:e4:a0:11:ab:06:77:a9:68:44:29:37:60:78:36:97:73:
6c:fd:8d:2e:ef:04:1f:c3:3c:01:0c:b1:3d:63:58:e1:af:04:
66:e5:c8:70:a2:87:b7:86:d1:91:3c:3d:5f:5d:d7:c9:db:e4:
22:39:ba:03:4b:76:4c:3c:80:37:db:6f:0e:de:21:15:cc:76:
d2:df:c8:25:44:b5:76:ba:e1:10:26:ca:b1:74:98:79:17:15:
d6:8c:49:d3:0a:94:1c:e1:80:06:06:7c:70:63:34:ae:68:dc:
a8:25:7a:0d:dd:a8:19:8a:99:6f:f9:98:ea:28:77:73:98:91:
10:4e:ad:cc:88:4d:a2:22:f0:81:ae:86:8e:75:80:4f:2a:5b:
4f:02:ab:0d:92:45:10:cf:17:bf:f3:a3:36:22:f9:be:67:a5:
9e:44:39:48:ed:4c:cd:ed:7d:2d:a6:be:ec:7b:59:6c:f0:87:
94:7c:14:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:17:27 2025 by rpki-client