Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
File: r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft (raw, json)
Hash identifier: c8vc/gAaKMtfIlF++2hZpYFtn1vggHt3s6X2XvwB5No=
Subject key identifier: 50:7B:88:2F:DA:61:86:AA:3F:A5:F1:F4:29:CD:D3:8D:F8:64:B2:62
Authority key identifier: AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38
Certificate issuer: /CN=af934ec694af68134b7514c10dcd13857b459e38
Certificate serial: 01964A7D747C71148CCC8E75B19C2B948A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
Manifest number: 0EF5
Signing time: Fri 18 Apr 2025 20:00:57 +0000
Manifest this update: Fri 18 Apr 2025 20:00:57 +0000
Manifest next update: Sat 19 Apr 2025 20:00:57 +0000
Files and hashes: 1: 3KVjDh6tV6LcIk6BDE6xPuXzBDM.roa (hash: bQvllPBonHjb5qHCFeaDeGABQpp//k5Dnzxk+0td390=)
2: r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl (hash: LOtBSAfNiS2Ua4X/5JyRpDHuoN7/YgIUnaVrRRfBY/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7d:74:7c:71:14:8c:cc:8e:75:b1:9c:2b:94:8a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af934ec694af68134b7514c10dcd13857b459e38
Validity
Not Before: Apr 18 20:00:57 2025 GMT
Not After : Apr 19 20:00:57 2025 GMT
Subject: CN=507b882fda6186aa3fa5f1f429cdd38df864b262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e2:5e:68:92:d5:d1:53:38:c9:84:83:61:c3:
37:53:cf:3b:bd:f9:56:97:4b:d5:5e:37:fb:17:9f:
88:b3:00:ad:3a:da:79:3b:20:9c:22:7f:3a:f6:c6:
fd:b4:17:c1:66:eb:55:85:1f:99:07:fc:f4:48:b1:
0d:db:46:32:ca:cc:ed:b1:9e:87:cd:96:11:f7:19:
e6:a3:81:f3:1d:72:df:04:d7:17:4a:80:4a:97:f1:
de:56:5f:b2:3a:0a:75:35:a3:8f:6c:2b:44:07:0d:
2e:e0:f6:a2:1c:cf:ab:c7:bc:93:38:74:bb:22:5d:
47:88:51:86:79:3d:51:25:5a:7c:00:26:9c:a9:68:
8b:c0:6f:5a:c9:d5:16:c4:17:4f:94:35:21:ea:88:
59:99:3d:b0:81:1a:95:a7:ea:87:19:8a:d8:4d:c0:
15:1a:1f:bf:c0:af:0c:4d:8b:10:95:c5:fe:81:07:
31:1b:6e:7c:cd:89:b0:3f:04:ff:40:39:3d:1b:1c:
2d:bf:b1:97:35:9d:ae:d8:df:a9:b0:b6:3a:6f:62:
ad:1b:2a:7d:5a:55:20:8a:43:23:29:2a:d8:73:9c:
d7:cf:ca:1f:8f:28:c5:49:c1:6f:36:19:59:5a:29:
2d:e7:a7:31:00:9e:2b:af:81:32:d1:0b:b7:df:ac:
55:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7B:88:2F:DA:61:86:AA:3F:A5:F1:F4:29:CD:D3:8D:F8:64:B2:62
X509v3 Authority Key Identifier:
keyid:AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:93:79:82:df:d8:e3:1a:59:35:c8:a1:98:7c:ce:48:22:44:
cf:31:a5:9e:af:01:2e:c8:26:9c:bd:1f:b9:37:79:85:9d:07:
83:59:cf:f7:ca:9f:e2:aa:b0:84:5b:b7:6d:78:9e:b9:ee:83:
3d:3c:76:e5:ce:b1:99:ec:da:83:e6:d4:67:c1:e1:2b:13:a5:
8e:6f:94:50:90:9a:be:32:60:6e:73:31:b5:d3:f5:7c:df:8b:
8a:be:06:cf:6a:ca:af:4d:a1:09:07:c7:8e:20:eb:59:d9:97:
c0:8f:91:be:9d:f4:8e:9b:8f:d1:64:4e:ec:f6:0e:6b:b1:3c:
b2:0c:52:8c:b8:63:56:d2:bd:8e:b3:d0:b7:5a:d1:dd:00:0d:
b3:df:ea:f3:d2:f6:d3:63:40:8f:18:14:08:f2:d2:11:7e:d7:
2d:bf:00:39:1b:1f:f0:b0:2e:91:52:5f:dd:b4:7f:fb:5d:31:
d6:da:57:c0:21:05:67:df:c9:e9:75:fe:a2:6d:6a:63:52:bb:
cb:ff:88:02:5e:bd:e6:66:bf:9c:ea:35:06:7b:31:ed:02:57:
b7:10:58:2f:07:68:e8:b5:75:f8:28:1c:02:52:f9:b4:89:05:
af:e4:c1:a4:70:77:75:d1:0d:ad:96:21:65:ea:99:36:f0:ef:
cc:fb:02:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:48:02 2025 by rpki-client