Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
File: 53OduQwc6YQx3zSKE3blOsbgUjw.mft (raw, json)
Hash identifier: yFTt0JJlm1LdUjfQuFnfJPQAPrVy/VtW2234K3FEfao=
Subject key identifier: E5:4E:D1:1B:0C:80:E3:85:0C:C3:2F:9D:E7:40:C5:D6:B3:43:2A:1E
Authority key identifier: E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
Certificate issuer: /CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Certificate serial: 01963CF8A903C50A65A4A0DAA5A1C5C619F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
Manifest number: 0A0F
Signing time: Wed 16 Apr 2025 05:00:51 +0000
Manifest this update: Wed 16 Apr 2025 05:00:51 +0000
Manifest next update: Thu 17 Apr 2025 05:00:51 +0000
Files and hashes: 1: 53OduQwc6YQx3zSKE3blOsbgUjw.crl (hash: wFIw+y3UXkfTQSx04sfGqTNz2w3mwi0XRomAKm7UI7Y=)
2: 5lxNCVmtG-eGQDzqS31HH90R7gQ.roa (hash: UMFun1XpckbWJBcsjucwYOiUnMjxn3AfVM2MpuImkbQ=)
3: J7gZFbpwbQ3l58heUCupO_rw9SI.roa (hash: 3O3YSRLT+CEf3bqQzHcFcD73p8jJc1vMJRrl8kOmCOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:f8:a9:03:c5:0a:65:a4:a0:da:a5:a1:c5:c6:19:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Validity
Not Before: Apr 16 05:00:51 2025 GMT
Not After : Apr 17 05:00:51 2025 GMT
Subject: CN=e54ed11b0c80e3850cc32f9de740c5d6b3432a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:55:51:e9:9c:c4:87:93:51:86:70:6c:15:23:
e3:4b:ed:d1:cd:c9:41:38:99:97:3f:e6:76:21:3b:
97:15:60:24:4d:d6:12:60:3c:cf:d8:05:9c:62:fb:
f0:c4:8c:9c:a2:92:3f:74:5b:7b:bc:d4:a8:30:4b:
d5:2d:6e:d7:b3:3f:df:bc:ba:1d:5c:f6:08:9a:85:
e7:9e:34:43:a2:5e:57:9e:63:59:18:95:79:02:b0:
d7:d7:f0:8b:43:7c:8b:7a:32:89:d7:f7:13:39:31:
6c:3e:d1:e5:7a:28:9e:42:88:20:97:86:86:6d:f5:
e8:87:a3:3e:12:e6:c9:38:a8:88:36:ab:2f:5c:be:
54:75:83:ff:5b:4c:92:b0:87:a5:1c:aa:dd:c4:19:
6c:61:21:00:0d:37:4b:3b:eb:91:46:8c:80:f0:05:
46:c6:cc:24:0d:ab:33:4a:9e:bf:3b:b7:53:5c:34:
b8:2e:49:d0:47:34:c7:cf:e7:b9:db:d2:26:14:3a:
df:fe:fd:21:63:93:c1:05:9f:49:7b:c5:94:c1:c3:
bf:2e:cb:cb:70:a5:a2:c7:df:83:b6:97:aa:d1:4c:
1c:a0:9e:50:e1:2c:4d:4d:82:d3:f5:e8:0e:de:f4:
91:99:81:b1:8c:49:f3:f8:c8:c2:b4:ed:99:3b:ba:
22:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4E:D1:1B:0C:80:E3:85:0C:C3:2F:9D:E7:40:C5:D6:B3:43:2A:1E
X509v3 Authority Key Identifier:
keyid:E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9b:50:f5:fb:44:8a:19:f3:05:e5:fb:73:e2:61:ed:b2:0d:
be:b8:3e:80:0b:03:9a:67:4d:4a:ab:b6:b9:88:93:4e:50:51:
37:39:f3:a2:7a:df:7d:ed:53:e2:bb:f9:52:a1:e0:2b:05:81:
be:f0:6e:0f:9f:be:72:6e:70:b3:f2:67:8e:7d:97:fe:38:e0:
b0:e0:53:73:b8:b3:19:07:85:58:e2:00:7d:77:28:35:d6:c9:
cc:8c:66:d9:d7:08:e1:f2:3a:a7:9f:3d:a1:73:e9:fa:3a:d6:
4b:7e:e3:2b:a0:72:ad:19:96:86:7d:fe:dc:42:f7:c7:a1:a3:
2d:a5:52:ff:30:b4:4e:11:e5:5b:88:79:8f:3e:e5:32:8f:14:
01:35:a6:87:48:fe:13:e0:3e:c1:bd:90:ca:60:e6:48:01:bb:
4a:6c:4c:cf:13:d5:cb:c5:94:67:31:02:30:d6:dd:91:db:fc:
01:63:f7:e9:5f:c0:40:15:08:ad:b3:a8:cf:37:cb:c7:09:99:
60:37:70:9d:87:4c:7f:dd:cb:08:69:25:5d:35:af:e0:99:5f:
27:5f:0a:2d:41:08:91:72:0c:10:40:5c:bd:be:1b:a5:f0:9a:
d1:24:40:0e:71:6e:b9:6f:a2:06:a3:72:b4:c4:d9:4d:c9:fc:
cc:c9:69:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:03:04 2025 by rpki-client