Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft
File: 5v-BaTR_UwcrLRGtGNmiU8r--uc.mft (raw, json)
Hash identifier: FlL6+O4kd4iOCoa6/rcI3JPHLuCZPz6uipWZ98fdrzg=
Subject key identifier: 38:9D:5A:63:C6:35:4D:63:86:16:2E:9D:ED:58:24:74:BD:4A:3A:69
Authority key identifier: E6:FF:81:69:34:7F:53:07:2B:2D:11:AD:18:D9:A2:53:CA:FE:FA:E7
Certificate issuer: /CN=e6ff8169347f53072b2d11ad18d9a253cafefae7
Certificate serial: 01964A0F7FECE6FE8D08EF2F1CB98F0CF72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft
Manifest number: 03CE
Signing time: Fri 18 Apr 2025 18:00:51 +0000
Manifest this update: Fri 18 Apr 2025 18:00:51 +0000
Manifest next update: Sat 19 Apr 2025 18:00:51 +0000
Files and hashes: 1: 5v-BaTR_UwcrLRGtGNmiU8r--uc.crl (hash: 5XajxbIF3DGvBVnaxPWo57alLKEJbPPQuxqff0ccs1I=)
2: wTQvHz6KrEBh22NnZfSVSbP_3L0.roa (hash: FPUhMtrstm1Ac2XI6rl3vCrIvxuS83fDR4A5ahN+U+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:7f:ec:e6:fe:8d:08:ef:2f:1c:b9:8f:0c:f7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ff8169347f53072b2d11ad18d9a253cafefae7
Validity
Not Before: Apr 18 18:00:51 2025 GMT
Not After : Apr 19 18:00:51 2025 GMT
Subject: CN=389d5a63c6354d6386162e9ded582474bd4a3a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:d4:35:a9:72:06:9c:c6:18:b7:e3:4b:2a:
6f:14:ae:af:be:5f:b4:18:e0:9c:98:37:d5:1a:83:
a4:e1:93:a6:64:c6:dc:c0:a5:b5:af:37:c0:b9:7c:
2e:b1:19:eb:4f:4c:d8:9a:a8:cb:c5:0b:19:0e:75:
53:6c:7e:ae:95:c8:5d:83:be:b6:bf:4d:b3:53:ed:
ca:19:ca:53:47:fc:0d:66:82:00:f2:be:e9:06:14:
c9:08:fd:9c:92:89:78:ca:c6:10:99:bc:78:e9:12:
3e:aa:02:68:6b:9a:79:e0:15:f2:dd:0a:27:9b:fc:
d3:7d:38:fa:10:2c:d8:b5:b2:04:c2:3a:c9:c2:86:
5c:a5:be:31:6a:8b:93:30:0a:58:77:4a:0d:90:62:
8a:37:52:33:59:da:91:d6:ac:59:c7:d3:8d:b9:ef:
85:87:c2:32:59:7c:2c:78:e1:fb:4f:c7:4d:51:5b:
2e:83:b1:02:42:2f:f3:d1:81:17:24:b8:bb:fc:5f:
7f:ba:84:e7:eb:f3:5f:62:f6:f3:21:83:a7:32:6e:
4c:d6:95:cb:e9:01:ed:d6:93:41:71:81:96:90:c5:
66:9d:18:30:be:73:4f:07:b9:cb:cc:ab:29:f7:31:
62:f7:c6:00:25:b0:20:64:c2:de:ce:2e:64:99:82:
4c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9D:5A:63:C6:35:4D:63:86:16:2E:9D:ED:58:24:74:BD:4A:3A:69
X509v3 Authority Key Identifier:
keyid:E6:FF:81:69:34:7F:53:07:2B:2D:11:AD:18:D9:A2:53:CA:FE:FA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:94:11:fc:42:f8:d6:d4:27:22:cb:38:85:5f:cd:ee:26:f0:
35:1e:4f:21:02:6a:28:06:94:da:6c:8d:53:a8:4e:50:8b:26:
67:18:02:53:8e:2a:90:64:8d:c8:f1:d8:1f:a5:f7:72:81:22:
ef:0e:b4:ff:4a:a6:4c:9a:dd:ed:c9:77:6d:7e:c6:7e:4c:cc:
48:0b:51:81:46:8c:e9:d6:1e:4a:3b:09:63:4f:18:bd:7e:55:
c3:95:d8:bf:1a:6f:5a:e9:4f:b0:6b:7c:b7:c1:c0:60:de:c5:
f2:57:74:fd:3a:33:32:82:f2:3d:f7:0f:25:54:a3:25:49:8b:
cb:3b:c1:1f:8c:cc:17:f8:3a:a9:fa:c8:b4:93:a8:21:f0:55:
2b:44:11:d5:95:b7:fa:2e:54:bb:dc:cf:39:bf:1c:16:ba:e3:
54:98:3b:09:29:15:86:81:5a:69:14:9b:69:ad:32:3b:ba:0c:
54:96:c4:13:04:54:8c:55:6f:b9:6e:4c:78:d2:9f:93:36:ed:
e3:c3:27:97:6d:66:80:54:77:ac:ad:36:1b:3d:0c:93:05:8d:
f6:a0:e9:20:ad:ce:7c:77:c9:5c:7e:2d:d4:6b:9c:17:9a:eb:
97:75:51:16:e6:ad:87:26:12:8f:d0:8f:9a:1d:a7:6f:36:03:
17:e0:88:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:49:33 2025 by rpki-client