Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.mft
File: K5vsAhH2Hq8RnOstQMWg_jqowqA.mft (raw, json)
Hash identifier: 8xbi5PICVJ4DhmNnrEW1EIxxAYx8flODTeW+EHtmudI=
Subject key identifier: 49:9E:B1:BD:7D:FC:9D:17:19:94:0B:E8:AC:F4:E5:EA:6F:93:31:E2
Authority key identifier: 2B:9B:EC:02:11:F6:1E:AF:11:9C:EB:2D:40:C5:A0:FE:3A:A8:C2:A0
Certificate issuer: /CN=2b9bec0211f61eaf119ceb2d40c5a0fe3aa8c2a0
Certificate serial: 0196458D9F4F66EFDF313DEAF574CA9BF03B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5vsAhH2Hq8RnOstQMWg_jqowqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.mft
Manifest number: 0B5B
Signing time: Thu 17 Apr 2025 21:00:31 +0000
Manifest this update: Thu 17 Apr 2025 21:00:31 +0000
Manifest next update: Fri 18 Apr 2025 21:00:31 +0000
Files and hashes: 1: K5vsAhH2Hq8RnOstQMWg_jqowqA.crl (hash: XwOyoJjR6YxIXIkTMejAdhI2NXfTk2ZzNsM5QNV5UB0=)
2: KkH_R6IQv1u30qAL1KWqZsXbAEI.roa (hash: 04O63RIXPPpD9GmqGsDm2l0jn4ZXl6cAUxlim79VpG4=)
3: _JzEQSr5OZqDWs8nTia735Fx54o.roa (hash: n/vl1VjbI5NvAsfCuLgcPjpEvc0iKrJUQhClyjm4L3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5vsAhH2Hq8RnOstQMWg_jqowqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:9f:4f:66:ef:df:31:3d:ea:f5:74:ca:9b:f0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9bec0211f61eaf119ceb2d40c5a0fe3aa8c2a0
Validity
Not Before: Apr 17 21:00:31 2025 GMT
Not After : Apr 18 21:00:31 2025 GMT
Subject: CN=499eb1bd7dfc9d1719940be8acf4e5ea6f9331e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4e:b3:5c:68:44:55:20:22:86:62:1d:8f:5d:
37:3e:0c:88:5a:23:97:3b:cc:b4:05:27:74:a1:22:
28:ee:50:cc:b3:26:24:5f:55:35:c8:ab:0d:52:99:
0b:41:42:a1:bf:80:1b:8b:ee:a2:6b:09:08:2e:4b:
62:d2:6d:7f:f2:17:69:3d:ce:2b:ed:f1:f5:2b:ac:
22:f8:94:c3:39:20:e1:17:01:fc:4f:d3:d6:7a:bc:
a2:84:c0:a1:ff:de:7e:37:3e:94:22:6e:b6:cd:e1:
57:df:29:15:f1:18:83:a8:f3:5c:ef:35:16:a1:83:
5e:fd:04:a3:10:35:91:43:21:1e:4f:60:5a:f5:91:
6c:cf:90:ac:4c:6f:f7:11:96:81:8b:65:7e:64:42:
b4:c5:39:5b:03:5a:d3:8e:54:7b:3a:c7:b8:da:11:
dc:aa:fa:e5:7c:77:9c:24:1d:53:b3:38:2c:9c:7c:
57:e4:ae:2a:c8:e9:a8:a4:2a:a8:c6:15:7e:96:7b:
47:cf:6b:90:ad:99:30:75:d8:f7:4d:8a:78:c1:34:
14:96:1b:2a:72:08:34:e0:4d:2a:e7:7a:fb:14:3d:
b5:c8:e2:2d:af:d9:27:24:b2:82:01:e6:fb:ee:f8:
d5:f7:98:49:1b:05:a8:8f:84:1d:d5:d9:7b:a3:59:
ed:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9E:B1:BD:7D:FC:9D:17:19:94:0B:E8:AC:F4:E5:EA:6F:93:31:E2
X509v3 Authority Key Identifier:
keyid:2B:9B:EC:02:11:F6:1E:AF:11:9C:EB:2D:40:C5:A0:FE:3A:A8:C2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5vsAhH2Hq8RnOstQMWg_jqowqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ab:df:4e:04:07:0f:db:c1:ee:05:80:18:25:e4:a7:99:2b:
82:fd:f8:3c:fa:89:d0:f3:7c:44:68:c1:d9:6c:ef:59:c3:ee:
32:c9:0b:cc:6d:91:3c:42:d6:06:37:dc:a9:3f:71:83:8e:eb:
3c:c7:92:ed:84:3c:91:34:f6:03:b5:0a:0c:bc:19:49:b5:4a:
ea:b5:56:94:59:c4:9b:fb:f0:30:47:6a:2a:17:ad:cc:07:4a:
3f:0b:30:7e:61:88:95:02:01:e8:7f:23:5d:da:4c:4b:2f:df:
41:e1:85:eb:66:74:3e:2c:27:7c:1b:31:e7:3d:04:bd:7c:87:
56:64:d6:34:e3:c7:98:1b:96:d8:a1:7d:ae:3b:54:10:cc:65:
a6:c8:47:39:42:3c:82:71:d2:d1:8d:87:18:c9:eb:bc:a0:10:
bf:a6:56:6b:b6:de:95:75:d9:c0:88:0a:11:c3:9b:a0:c8:e8:
12:0e:73:63:0d:71:bf:7b:68:a9:28:38:90:19:82:89:96:31:
de:07:b6:26:7f:bc:54:a5:49:aa:10:37:1f:f4:90:37:cc:a0:
a2:da:d3:2c:35:e2:3f:5a:bc:ed:82:6c:5c:61:d5:09:d3:30:
1f:bc:ab:66:d0:df:33:e7:fc:50:6e:09:3e:9d:f4:ed:e1:79:
4e:50:bb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:42:42 2025 by rpki-client