Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
File: 5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json)
Hash identifier: oq8VgCAPuprnHI2H3IHcU3QAbL3pDrp/uC3do2zAsE4=
Subject key identifier: 85:8D:B6:DD:31:1F:E6:05:8D:97:ED:40:22:E6:07:10:E4:A9:A4:45
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial: 01961D3720B41D139BBE08BFDB94D9FCB14F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
Manifest number: 14E1
Signing time: Thu 10 Apr 2025 01:01:14 +0000
Manifest this update: Thu 10 Apr 2025 01:01:14 +0000
Manifest next update: Fri 11 Apr 2025 01:01:14 +0000
Files and hashes: 1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: Xxx2kI2qIKY6B4FE20NnKziZCh3pmb5slgi5khwyauc=)
2: O7xkMgYDWmT39_oyZPNETli4dGo.roa (hash: BJVxC4UljGsK/BbuRqwBk8+Scbbux5UgI7xaPeJbQCA=)
3: mTHF4xRS849mOw36faqzyw4dbV0.roa (hash: wG6gmT9BywW9Amqbl4suJT23ZQUJGIpmhCizynoZqms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1d:37:20:b4:1d:13:9b:be:08:bf:db:94:d9:fc:b1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Validity
Not Before: Apr 10 01:01:14 2025 GMT
Not After : Apr 11 01:01:14 2025 GMT
Subject: CN=858db6dd311fe6058d97ed4022e60710e4a9a445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4d:66:16:fd:1c:57:85:05:b3:89:06:17:77:
b4:db:0e:34:8f:c0:8f:85:24:32:26:30:dd:9a:44:
26:47:18:82:9b:fb:2f:7f:18:b9:c3:c4:c1:7c:f3:
92:31:68:82:c7:3e:5e:11:75:c4:f7:f8:30:da:07:
b6:99:c8:47:47:6b:7a:50:9a:ec:72:2b:62:3a:0c:
f7:00:7b:d1:f3:9c:72:0d:f8:cd:33:dc:15:68:69:
5f:6e:88:f2:46:b5:6c:af:63:7f:17:ba:6b:ac:ed:
b4:5b:2a:a5:7d:d7:9a:6c:6b:42:0a:37:31:0f:9a:
5c:19:c2:fb:bd:af:a1:63:5b:fb:19:1b:04:02:6e:
4a:ae:25:96:57:2c:03:3e:81:36:a8:1b:2b:59:67:
b1:9c:5d:10:ce:b0:88:a8:78:9e:b9:62:90:a1:17:
a9:84:69:3b:fe:ac:ae:fd:36:3f:cb:45:be:82:8d:
b9:93:27:3e:d6:c9:ae:3c:9f:03:b7:96:65:fc:3a:
fa:13:18:91:ea:b1:d6:bc:ba:62:4a:0c:0d:0c:ba:
d5:fa:49:95:8c:5a:3d:9d:d4:ec:8a:f3:b7:5c:02:
fc:13:c4:fa:36:fa:6d:f2:ae:0d:0b:6d:07:0a:e1:
b1:04:ad:e2:d0:31:2d:12:84:a5:91:c6:57:d4:f4:
48:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8D:B6:DD:31:1F:E6:05:8D:97:ED:40:22:E6:07:10:E4:A9:A4:45
X509v3 Authority Key Identifier:
keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c7:85:d3:b9:da:48:47:5a:55:b0:16:f1:9e:0b:9b:ca:8f:
42:ea:a9:1e:46:b0:b0:20:63:4a:9a:ee:4b:a1:63:52:22:35:
9b:7a:6a:0b:82:87:45:f4:de:ac:2f:94:7e:a8:0d:7d:24:80:
8e:e6:f5:a6:9a:d3:d9:f1:49:44:9d:53:ae:36:80:56:ab:7d:
df:34:a0:cb:4a:dd:e2:23:a4:79:81:54:72:ec:8c:e2:3b:c5:
4b:06:53:87:04:5c:6c:cb:82:bd:df:cd:68:7b:f4:09:19:cc:
16:71:77:17:7a:d4:fa:af:41:3f:55:77:7c:a1:1c:d7:ed:b5:
95:59:ae:d8:c6:38:71:ec:b9:bb:6f:75:df:15:07:0d:88:aa:
67:f2:06:c9:ba:10:29:af:b9:f9:b1:d9:bd:3e:f7:29:36:9a:
cf:92:56:ee:9d:e3:90:12:f1:ca:19:41:f1:53:24:81:25:90:
60:ff:0d:37:9c:d9:08:19:05:c9:3e:fb:7c:2f:2b:26:b5:81:
5b:36:f3:7f:48:87:e8:4d:18:f3:85:87:3f:07:0b:b3:0a:13:
f5:e0:ca:fd:06:98:b1:9a:2f:2a:a9:fd:6c:62:aa:0b:a3:43:
2e:af:08:f4:9a:1a:8b:5b:83:d1:49:40:d4:fd:f2:42:1d:cc:
57:49:f5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:54:26 2025 by rpki-client