Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
File: _5lGMPx0VWzlCAJocJAVRft7BM0.mft (raw, json)
Hash identifier: KoY78Ext6buiK3YBKlDi19au61UMSdehQOb2MY7w4Io=
Subject key identifier: 75:F9:8F:38:9C:8D:F1:C4:37:B6:53:34:90:23:45:21:87:BA:B3:92
Authority key identifier: FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD
Certificate issuer: /CN=ff994630fc74556ce508026870901545fb7b04cd
Certificate serial: 0196515AD8B550C1A9C0BC9D2B02DCFB379E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
Manifest number: 14F9
Signing time: Sun 20 Apr 2025 04:00:29 +0000
Manifest this update: Sun 20 Apr 2025 04:00:29 +0000
Manifest next update: Mon 21 Apr 2025 04:00:29 +0000
Files and hashes: 1: _5lGMPx0VWzlCAJocJAVRft7BM0.crl (hash: Jm0McsGGCHgIC3ythC4dvjZGV4pS0REqFxwmRJuVDzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5a:d8:b5:50:c1:a9:c0:bc:9d:2b:02:dc:fb:37:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff994630fc74556ce508026870901545fb7b04cd
Validity
Not Before: Apr 20 04:00:29 2025 GMT
Not After : Apr 21 04:00:29 2025 GMT
Subject: CN=75f98f389c8df1c437b653349023452187bab392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:f2:21:cc:4f:cc:f4:67:dc:7c:41:56:be:
e2:42:ec:b4:eb:06:9d:5d:7b:47:f4:16:44:c3:09:
b3:c3:59:62:e9:71:34:3a:1c:38:f9:0f:7b:a2:76:
c2:25:8a:f3:ab:c0:d2:bb:a5:d2:49:60:d0:4d:5e:
dd:91:c0:1c:66:e4:3a:b5:04:e9:4a:8f:d7:73:91:
15:54:6e:da:9f:49:b2:ac:9a:a6:a6:18:13:8b:e5:
a2:c0:06:65:31:0b:92:30:f9:db:d5:f0:69:40:ea:
8e:70:63:f4:73:ce:c9:62:b2:ed:bf:7b:c4:98:f6:
52:b0:20:db:02:af:2a:d1:fd:07:c7:15:86:ea:62:
d7:a0:2c:70:45:43:10:e3:d9:34:ea:5f:49:ee:d2:
26:06:a6:e6:7b:0b:9d:f0:73:bf:2c:88:06:bd:65:
e0:c8:91:4a:4d:bb:53:ab:03:f9:fb:f9:15:b9:50:
f4:54:4d:f5:14:af:7b:a4:25:b3:db:45:1d:8a:01:
de:4a:7c:84:c3:87:fc:85:56:7a:a9:19:42:35:a4:
30:d0:af:02:17:a4:a8:a1:49:67:48:79:68:70:6b:
02:81:70:86:d3:87:af:02:e9:b6:41:fd:7f:21:26:
0f:43:e3:e2:47:40:00:95:ee:e1:89:ee:9c:ce:b3:
0e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F9:8F:38:9C:8D:F1:C4:37:B6:53:34:90:23:45:21:87:BA:B3:92
X509v3 Authority Key Identifier:
keyid:FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:cf:3e:c6:bf:4f:20:de:54:30:fc:c9:ea:05:01:1d:ed:4d:
1b:9e:5d:1c:cd:f6:84:81:39:7b:57:29:78:31:01:92:5c:47:
8e:02:d7:d5:6d:d2:46:46:90:0c:15:c2:eb:8d:9a:5f:e3:a1:
5e:16:6d:78:59:6d:c1:1a:0e:30:15:74:db:58:9a:1c:59:4a:
af:bd:69:9b:8a:3c:9f:40:39:c1:31:2d:46:5d:8b:79:16:e2:
3c:c5:78:0a:cf:40:f8:fd:19:5a:b3:54:81:36:89:04:1a:9c:
46:d4:01:70:91:f3:74:97:4c:2c:c5:7d:bb:ed:c5:a1:10:30:
4b:f0:14:a7:98:fc:d7:75:1f:ab:91:0a:6e:e7:8a:35:ce:b9:
c2:87:39:cf:4f:95:19:7d:ad:8a:60:84:6e:6d:36:bd:31:1c:
f6:40:e0:bd:d6:67:8f:01:b5:71:08:a1:3d:44:d2:b2:0e:4f:
7c:6e:fd:65:ba:78:e6:42:d4:c8:21:b8:be:55:a2:05:dc:6a:
36:5a:51:e6:d7:a3:0f:1c:44:ca:b2:62:e5:a9:9e:12:b0:15:
3d:f9:b3:b9:0d:12:9c:82:e8:21:d8:90:fb:80:f9:e4:8a:96:
8c:1a:38:10:41:73:5a:78:b2:17:aa:ba:29:d9:ad:11:dc:b5:
25:c6:d5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:14:34 2025 by rpki-client