Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.mft
File: 5XFody33TCeZnVM4leGr7c6XJjw.mft (raw, json)
Hash identifier: H5vWb70XpVcyxRpBlDD4h/Md3cUu8JIXxgPi+2pieRQ=
Subject key identifier: 8B:CB:A5:62:D0:29:5E:F3:E9:57:00:15:34:1E:DA:56:2D:4B:D6:77
Authority key identifier: E5:71:68:77:2D:F7:4C:27:99:9D:53:38:95:E1:AB:ED:CE:97:26:3C
Certificate issuer: /CN=e57168772df74c27999d533895e1abedce97263c
Certificate serial: 01964FDAC537AE838927FA703E81E5C3A24B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XFody33TCeZnVM4leGr7c6XJjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.mft
Manifest number: 53
Signing time: Sat 19 Apr 2025 21:00:59 +0000
Manifest this update: Sat 19 Apr 2025 21:00:59 +0000
Manifest next update: Sun 20 Apr 2025 21:00:59 +0000
Files and hashes: 1: 5XFody33TCeZnVM4leGr7c6XJjw.crl (hash: 5voxXkfGMFmqobBx2Y9kJddq3QOO+JyjQDY5NHp/6YE=)
2: O3bnjDPRR3LrGEnM4sKqgBKSZIg.roa (hash: rlXDUrdTVRzlXfFa/VppQ/JwyMwu/FNANchTVmv+fxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XFody33TCeZnVM4leGr7c6XJjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:c5:37:ae:83:89:27:fa:70:3e:81:e5:c3:a2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57168772df74c27999d533895e1abedce97263c
Validity
Not Before: Apr 19 21:00:59 2025 GMT
Not After : Apr 20 21:00:59 2025 GMT
Subject: CN=8bcba562d0295ef3e9570015341eda562d4bd677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bf:df:2f:8e:3f:41:b8:8c:63:c6:3b:99:c9:
49:c9:85:ed:a1:9c:94:77:6e:3a:a6:b1:5a:14:3d:
1a:df:b0:9c:42:e4:25:d0:d7:49:ce:17:92:88:41:
3d:8b:5a:e1:87:ef:8c:4c:6a:22:86:42:29:e1:ba:
92:15:d4:a4:2e:6c:4d:1d:da:4b:ad:30:72:b2:e2:
83:00:c7:2c:31:0c:31:2a:7b:84:d9:ee:6f:41:db:
bf:7b:28:c0:66:90:4c:56:3e:c2:75:12:03:b7:0a:
6c:0a:16:bc:ff:96:ce:63:d3:48:fd:29:34:aa:78:
ea:e8:1f:d0:7a:09:95:0b:00:3b:a2:67:ff:bc:f2:
82:a9:40:ca:b1:ca:2b:03:20:95:d9:42:79:b6:a4:
72:52:f9:e6:0a:68:59:a9:cb:0f:a1:66:7d:27:85:
f3:09:11:7b:9f:b3:30:a2:ea:88:d9:2d:af:5f:fc:
c1:07:72:17:f8:d8:7b:01:cc:2a:e0:f8:43:c2:35:
e5:c5:61:08:dd:75:c6:d9:e2:d8:aa:dd:a7:c0:ad:
cd:79:9f:7b:1f:43:83:87:6d:61:7e:0e:77:50:b6:
f6:0e:10:a4:3d:b0:12:0e:1a:28:22:bc:76:ea:a6:
37:70:a2:ca:bf:20:b4:65:06:c9:6d:e8:5d:97:b1:
aa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CB:A5:62:D0:29:5E:F3:E9:57:00:15:34:1E:DA:56:2D:4B:D6:77
X509v3 Authority Key Identifier:
keyid:E5:71:68:77:2D:F7:4C:27:99:9D:53:38:95:E1:AB:ED:CE:97:26:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XFody33TCeZnVM4leGr7c6XJjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c6:d3:ec:ba:8f:83:84:0b:31:c5:a2:2b:b8:e4:cf:35:36:
fd:a4:73:96:8e:ac:74:4e:81:21:5d:fa:eb:90:b7:44:cf:07:
0d:59:be:47:83:f4:96:32:1e:0a:51:f5:8c:99:fc:38:a2:62:
40:8b:de:7e:ba:67:07:31:76:72:ad:e2:ce:b7:49:16:1c:5e:
3d:fd:f1:83:b9:6f:21:00:2b:5a:ea:af:1a:93:16:2a:6b:02:
ef:3b:16:c4:43:1d:e6:a6:ee:81:2a:62:d9:ff:0a:7c:69:81:
6d:be:c2:52:06:9e:f5:cf:f1:5d:03:b7:15:4b:c1:d5:55:ed:
23:c3:fc:88:a8:af:e3:f7:2e:b5:55:e2:d5:fd:d7:97:82:60:
d5:72:e6:2d:66:86:7e:1c:d6:24:c7:07:51:35:2d:5a:6f:6a:
5b:b2:39:90:a3:cd:56:19:35:8b:cf:de:dd:f9:87:5c:1e:1a:
16:d2:b9:70:e9:e9:7a:f5:d9:b5:2a:c4:70:69:7e:99:e2:81:
99:ed:ef:c2:3b:a4:8c:05:a1:d2:7e:70:22:d3:21:60:c8:e4:
05:4f:e2:a3:a9:55:3e:0c:49:dd:e4:95:3a:81:c8:8e:0d:87:
a6:11:af:07:81:6a:5b:93:12:ec:42:e2:57:ca:74:95:f5:6e:
0c:79:3e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:40 2025 by rpki-client