Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
File: 5Q5mktlyjagfXE9J4VB3Phr7yAs.mft (raw, json)
Hash identifier: kxNGKcjLm7SFrqiCq/mG4Q7uOSymsdo516wePA/EMJo=
Subject key identifier: 84:E3:15:BA:9E:B5:C8:4A:82:A8:44:D3:C0:52:F0:F8:03:78:CE:01
Authority key identifier: E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
Certificate issuer: /CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Certificate serial: 01963EE751B33AA017161DCD459BD8F1A55A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
Manifest number: 0D10
Signing time: Wed 16 Apr 2025 14:01:09 +0000
Manifest this update: Wed 16 Apr 2025 14:01:09 +0000
Manifest next update: Thu 17 Apr 2025 14:01:09 +0000
Files and hashes: 1: 5Q5mktlyjagfXE9J4VB3Phr7yAs.crl (hash: MXBPhHpApEob9EHlL38TIofqg9qGkzODgf/4xxlb55w=)
2: h1D7CnT2PY1NPObHiR4r21lOKxw.roa (hash: FFNEtoxBXjniX9r1DmUch9vHzQqa3zr4aAAiKoIwvtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e7:51:b3:3a:a0:17:16:1d:cd:45:9b:d8:f1:a5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Validity
Not Before: Apr 16 14:01:09 2025 GMT
Not After : Apr 17 14:01:09 2025 GMT
Subject: CN=84e315ba9eb5c84a82a844d3c052f0f80378ce01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:89:a3:b5:3c:97:9a:38:a9:8c:df:1f:52:10:
87:d5:d8:0d:6c:47:88:3e:5c:9d:57:1b:8c:0d:95:
5b:5b:a9:03:f7:de:45:f6:69:7a:13:1b:20:7e:13:
60:dc:94:e1:2e:4d:3d:72:04:c6:5b:56:93:e0:a4:
fb:90:13:be:60:6e:0c:97:3f:fc:10:cd:43:56:77:
37:3e:43:a8:ce:18:91:a9:23:df:c4:94:2f:57:7b:
bd:ad:89:f0:62:af:4a:d1:40:2a:45:09:9f:f9:c7:
0c:e9:74:24:8c:27:9b:9c:4b:57:0e:87:ac:cd:c2:
67:fd:72:e1:73:6c:f0:20:7d:54:20:fc:78:b6:13:
c3:4a:0c:d4:d3:c1:fe:3e:c4:27:3c:f7:90:01:46:
20:c2:06:a2:8c:f4:8b:c8:bf:f7:28:ac:f4:50:3f:
f9:bd:eb:79:7a:ca:f4:2b:11:f0:78:aa:3c:2f:38:
94:0d:7a:37:9b:b0:84:97:db:6a:e7:c3:45:0d:05:
6b:34:7f:18:49:20:b5:85:0f:83:1e:f1:34:b9:70:
d4:b7:c8:91:d7:30:05:e3:51:06:79:9a:87:2d:c5:
b1:9b:3d:ee:20:cd:23:ec:32:95:83:56:67:19:0b:
f0:c8:34:76:a7:aa:d6:9d:2a:a5:8b:d4:e3:08:ce:
0e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E3:15:BA:9E:B5:C8:4A:82:A8:44:D3:C0:52:F0:F8:03:78:CE:01
X509v3 Authority Key Identifier:
keyid:E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:dc:ab:f5:2d:20:b9:40:6b:4e:07:87:88:0f:b3:06:b8:e0:
9d:dc:b1:a2:e4:a7:7b:9f:99:b9:24:49:cb:92:76:ac:f7:ca:
93:97:4c:0b:48:c0:99:71:d3:07:26:61:ba:c0:24:35:92:c0:
5e:61:f0:dc:88:20:08:58:75:4d:3e:e6:16:8f:7d:59:77:e0:
76:17:f4:df:42:15:6a:06:02:7d:8d:3a:19:2c:a8:c4:62:fc:
29:bb:92:92:21:99:28:1f:af:61:eb:33:aa:50:63:d1:50:f3:
d8:8a:df:85:ed:6d:5a:5c:1b:cb:ab:22:18:f6:93:d9:73:5c:
60:57:76:c2:9b:a3:e1:94:88:d0:0b:04:63:a3:c6:1c:e4:2c:
9c:1b:01:1d:e5:ce:e2:1d:37:7f:d9:ed:b6:13:dd:1d:5b:84:
60:f9:35:11:96:f0:3d:f4:c0:4f:78:a7:1f:a1:04:b5:3a:08:
84:81:89:06:b2:a6:70:59:bf:c2:66:14:09:6e:5a:b8:d7:f0:
b7:8d:24:95:18:72:22:c1:13:1a:20:c9:6d:ee:fa:69:36:7b:
dc:66:d8:b4:02:c7:ec:2f:e2:6d:60:4f:f0:7c:68:1f:51:00:
d0:2e:d1:09:67:07:b8:12:46:9f:8f:cd:0b:a9:fd:06:aa:4f:
1e:9c:0f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:07:08 2025 by rpki-client