Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
File: 5saSR1gKSIv0YbhL97iyrBN01cU.mft (raw, json)
Hash identifier: VyKaUs2Nmp/fqzpYS3njlAN7Iw90VlLZeKu3/aivFXc=
Subject key identifier: 1B:34:BE:9C:1B:9A:36:3F:B0:53:BB:40:95:66:DF:21:F0:9E:63:4B
Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
Certificate issuer: /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Certificate serial: 01965237041400B382BCCF250E75ACA033FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 08:00:59 +0000
Manifest this update: Sun 20 Apr 2025 08:00:59 +0000
Manifest next update: Mon 21 Apr 2025 08:00:59 +0000
Files and hashes: 1: 5saSR1gKSIv0YbhL97iyrBN01cU.crl (hash: FJOQlB8pBFwLSANZIsleLSe6I0JkPrsDhL3YE/DbM9Y=)
2: l7WjKJBoi3ZOMaBwpHnPjLLele8.roa (hash: VuHVVXaHP8BDF2HI+1C+9vRLPuu0QKmIZQUwhxNEcWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:37:04:14:00:b3:82:bc:cf:25:0e:75:ac:a0:33:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Validity
Not Before: Apr 20 08:00:59 2025 GMT
Not After : Apr 21 08:00:59 2025 GMT
Subject: CN=1b34be9c1b9a363fb053bb409566df21f09e634b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:ca:2b:cb:07:89:58:d6:c6:11:3d:9c:71:
17:26:fa:d5:d7:e9:f0:d7:dd:2d:3e:33:38:ec:4a:
ad:4b:60:0a:28:31:ce:7a:c1:83:aa:7d:27:ee:15:
f8:24:85:d6:a6:97:85:37:b0:d3:f4:cf:c6:7a:e6:
74:2d:f8:93:bb:57:01:4c:b3:74:2b:34:55:1d:fc:
f3:26:98:f6:bc:f9:eb:d8:c3:b4:28:8b:2f:ab:c4:
c1:0c:1e:eb:52:48:8e:45:b6:b8:e6:4a:2a:14:b4:
c9:6d:2d:7d:de:13:f8:bf:1e:ed:39:10:c5:10:db:
71:29:b4:23:0f:06:06:89:b9:d8:e0:a4:b3:45:22:
ef:16:43:48:2d:42:1d:61:3f:16:76:02:9c:1b:c0:
2d:50:3e:58:0c:0c:66:9c:ca:c3:18:26:fb:f5:b4:
5a:86:3a:4d:c9:f1:3c:fd:be:3c:f3:0f:a7:d5:71:
87:56:80:8e:af:e8:db:da:b1:25:0d:5c:0a:94:e8:
ad:f5:46:37:10:f7:98:72:db:cb:3e:e2:32:bb:a0:
4f:3f:b6:65:5c:88:ef:26:45:f9:50:8d:eb:99:74:
a9:3b:61:bc:8a:9b:7e:07:93:3f:16:70:f5:63:42:
a1:00:5b:c0:4f:b8:8a:4e:50:4c:5d:78:b3:36:59:
39:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:34:BE:9C:1B:9A:36:3F:B0:53:BB:40:95:66:DF:21:F0:9E:63:4B
X509v3 Authority Key Identifier:
keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ae:df:8e:d2:02:24:5f:41:b0:85:d6:e0:31:49:99:8f:93:
c8:91:96:d6:fa:a5:e4:6e:b9:00:85:1f:11:18:c6:55:fd:ed:
46:60:97:86:d0:bd:92:ce:4c:8a:b2:75:16:b8:b6:8a:e5:3f:
5c:1b:b0:19:43:2c:f6:9d:f1:6b:b3:3b:b4:2b:8c:fb:65:fd:
d5:e2:39:c5:44:16:e7:0f:f9:3b:5a:3b:a0:9f:50:7b:eb:33:
a4:31:a3:75:64:46:04:17:76:63:ba:66:9e:a5:72:75:ec:3c:
ed:8a:80:1b:78:16:05:61:3b:a8:31:ea:6f:ae:b4:f5:a6:d6:
c9:42:5a:44:26:34:cf:9b:04:fb:df:48:fb:4a:49:64:b4:03:
a0:ee:c8:7f:2b:f0:2e:69:b0:aa:1f:61:ba:61:16:84:cc:1a:
1f:58:50:c8:17:ac:0f:12:03:87:7f:d5:fc:27:56:82:0d:7e:
b9:04:18:e0:15:b2:9a:f6:4c:ca:df:37:0e:8d:8b:9f:18:fc:
1a:e2:1e:b1:73:e6:45:06:75:29:87:d8:9e:25:62:7b:13:61:
3e:01:a9:72:2e:71:9a:b1:ac:64:b8:1f:82:70:f0:47:44:18:
fe:6e:68:d7:ad:b9:24:c2:b3:52:e2:0c:cf:2f:04:8c:d4:99:
e3:0c:d4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:57:38 2025 by rpki-client