Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
File: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json)
Hash identifier: 1/cd7dEWQMsyAjtIRPF9yZSNyJvgzQBXLqplSxXl830=
Subject key identifier: B4:A4:93:DA:9B:C7:DF:21:D7:59:2A:CC:DF:FC:CD:D1:9B:15:AF:30
Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Certificate serial: 0196293BCB4A2451A7156C548D0753916D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
Manifest number: 14E9
Signing time: Sat 12 Apr 2025 09:01:46 +0000
Manifest this update: Sat 12 Apr 2025 09:01:46 +0000
Manifest next update: Sun 13 Apr 2025 09:01:46 +0000
Files and hashes: 1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: 0YDrOe5JhdBbWOAkhRNp49wBdaNWGJ2Vgn69jP3bIfA=)
2: dq4NGDrJihdpAYEQ3owreA6iQU4.roa (hash: 1bpSRQ6nEHSR6H3DF+6pLQte0es+3qQ4qeng8ZdjLzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:3b:cb:4a:24:51:a7:15:6c:54:8d:07:53:91:6d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Validity
Not Before: Apr 12 09:01:46 2025 GMT
Not After : Apr 13 09:01:46 2025 GMT
Subject: CN=b4a493da9bc7df21d7592accdffccdd19b15af30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:c6:4e:3c:36:e3:e9:6b:2d:13:65:f6:f0:
95:0a:74:83:6e:49:6c:bc:4d:22:5b:66:df:aa:3f:
cb:09:f6:d3:30:98:83:80:11:e5:37:ad:af:b9:07:
41:c6:a7:d5:cf:0b:e4:26:ae:b5:7b:78:8a:04:d0:
da:33:ef:1b:15:6e:f9:2e:c4:a6:f5:e9:4a:73:5a:
fd:40:8f:0d:04:7b:27:51:45:13:f9:23:2f:8c:49:
75:dd:93:22:8f:5c:f3:52:ec:b0:11:9d:ae:e4:e4:
93:b2:64:58:f6:6c:fd:25:20:b6:18:d3:37:fb:cb:
e0:f6:bd:82:c9:30:82:c5:02:2b:23:43:de:60:52:
0b:7e:14:59:cb:dc:26:2a:5c:37:62:84:b7:35:67:
1b:0a:b9:b2:5c:f8:09:c4:bd:b8:dc:62:81:a5:a2:
23:13:7e:a1:26:48:d4:a3:27:a3:40:41:80:4e:24:
20:37:9a:e2:47:b4:c8:e8:b3:c5:39:2b:6a:bd:b2:
39:ec:cc:89:b7:ce:c3:9b:11:37:b3:1d:5b:7c:af:
50:62:a9:6f:f7:a1:22:68:0a:8a:29:a3:1e:d6:5b:
47:c8:6b:fa:ff:aa:21:94:08:23:ea:78:4c:71:76:
10:68:ab:ea:81:6d:34:da:d8:db:ea:15:a2:bc:d8:
b1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A4:93:DA:9B:C7:DF:21:D7:59:2A:CC:DF:FC:CD:D1:9B:15:AF:30
X509v3 Authority Key Identifier:
keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9e:03:23:1b:d6:61:aa:09:07:b7:34:06:e6:14:7e:34:d9:
f7:ad:2b:d6:f3:ed:5d:67:2c:4a:26:b5:88:1a:d5:bb:ce:94:
52:dd:fe:09:5a:0b:5a:00:75:9e:3e:c9:47:db:2f:d4:fd:92:
41:af:9f:04:33:3d:31:ef:d0:d1:8e:33:d3:8d:89:64:b4:c8:
8d:5c:42:f2:94:a8:af:08:f0:ec:b2:51:69:fd:23:12:91:86:
49:db:d2:e2:a5:c5:02:d6:2d:83:60:e5:b9:74:f8:23:c3:16:
92:fd:ec:ac:92:2d:97:de:96:2f:9c:f8:8c:5d:d3:c9:e0:a7:
b0:13:44:a9:86:98:32:44:d7:d3:b8:5c:2a:9b:c1:db:77:8a:
57:a3:6e:7d:69:a7:b8:85:11:4c:2c:bb:48:fb:dc:3a:a7:71:
2d:2b:d5:0a:af:03:fd:15:e9:8c:3e:c5:1e:1f:80:7c:f8:6a:
32:aa:1a:16:a2:b6:37:de:b6:0f:97:af:b0:58:fe:60:47:c0:
18:a7:16:aa:d2:b4:8f:91:8c:f2:1d:8d:93:e9:40:41:d5:05:
ea:cd:c3:56:d7:70:2f:5f:53:ff:6c:f9:3e:49:81:8f:e5:0d:
f4:b0:5f:ea:14:cd:28:86:63:34:09:1c:f5:27:b0:6b:50:f8:
d0:a8:2f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:46:58 2025 by rpki-client