Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
File: 5nXaCc0660yTfGP1NfM_1X0MIZE.mft (raw, json)
Hash identifier: OiBqRmGXfStTtl4h6uMLHwGsQAcVT+iDQ7Of/pSpVlg=
Subject key identifier: 2A:04:44:FF:F8:05:62:B6:71:C8:35:E1:BE:1F:3C:6A:DE:FA:7C:76
Authority key identifier: E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
Certificate issuer: /CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Certificate serial: 019651920DBE8B371D42F8D7AB087C1E71E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
Manifest number: 1328
Signing time: Sun 20 Apr 2025 05:00:48 +0000
Manifest this update: Sun 20 Apr 2025 05:00:48 +0000
Manifest next update: Mon 21 Apr 2025 05:00:48 +0000
Files and hashes: 1: 5nXaCc0660yTfGP1NfM_1X0MIZE.crl (hash: c0E0D83fLv67M2xDi+Vcp1PCrYxeMdOmeXqmoNeNPO4=)
2: oxEuvUfcJ-buwPGzC9O9kYsePss.roa (hash: CDgIKWYLWk0SZTYTZrPpXT0JXuPlKzi9XhIJznqGoHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:92:0d:be:8b:37:1d:42:f8:d7:ab:08:7c:1e:71:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Validity
Not Before: Apr 20 05:00:48 2025 GMT
Not After : Apr 21 05:00:48 2025 GMT
Subject: CN=2a0444fff80562b671c835e1be1f3c6adefa7c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:8a:61:dd:bb:1c:f9:93:87:56:0e:77:a4:
c5:07:43:b7:b1:5a:36:d1:6c:1b:41:c6:e7:b5:64:
67:7a:1d:d1:cb:41:b3:f5:91:29:f6:83:9e:23:24:
c7:10:c5:e4:aa:d8:f7:ef:09:70:b4:ee:99:37:a2:
ec:b5:cf:99:0f:36:a6:06:9f:97:cc:ca:e7:e5:43:
04:2a:f5:26:c7:c3:7c:50:0c:9c:4f:a9:61:70:13:
9e:91:80:e0:ed:4d:70:6b:2d:75:b1:e7:84:d9:77:
bb:a6:36:90:72:9a:f9:f9:88:59:14:9a:a4:70:63:
1d:93:44:70:ca:9a:6c:4c:83:e9:46:de:9f:dc:ad:
e6:ae:44:2c:0b:65:f7:f5:eb:c8:20:1a:af:04:51:
c7:dc:24:f4:7b:bc:61:26:59:8d:e3:dc:d5:d6:4c:
d3:fa:26:e6:03:f7:13:8c:d7:3d:67:10:0d:f6:92:
74:e7:53:9a:22:6f:dd:5b:2c:77:25:93:78:e6:f7:
b6:7d:f5:55:5d:01:d6:26:c9:7e:ef:d1:fa:ed:09:
c3:e2:54:fd:68:97:4f:f8:a1:82:b3:aa:b5:d6:01:
a1:fe:21:8d:8d:77:66:07:6a:24:f6:b1:fd:55:66:
d6:2d:a9:f6:37:4c:a0:3e:44:dc:1c:e1:ad:2c:2f:
83:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:04:44:FF:F8:05:62:B6:71:C8:35:E1:BE:1F:3C:6A:DE:FA:7C:76
X509v3 Authority Key Identifier:
keyid:E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ed:c2:cf:1e:d9:00:9a:e3:b3:71:ba:57:a4:af:34:d1:60:
be:3c:63:c9:97:bb:43:55:6c:d7:7e:1b:ec:fb:5d:a7:02:28:
a8:33:d4:72:69:ec:d1:14:b3:a2:9e:eb:df:c4:49:08:49:de:
8b:ad:b3:54:19:ae:17:e7:0b:33:04:9f:bc:ad:7c:18:a0:2d:
52:1a:3c:a9:22:94:4e:3f:16:0e:3a:13:83:0f:66:2b:76:f1:
39:8f:9d:b0:20:3c:ee:8a:e6:d3:b3:ad:a8:63:ed:60:cb:29:
98:e4:cf:d9:0a:29:23:9e:15:1a:34:a1:85:76:ef:12:87:8d:
ef:d4:95:c7:8f:77:24:fd:0b:c6:cf:3e:4e:cd:e4:c3:54:45:
3b:f1:ac:00:69:d0:a1:24:50:90:0d:ff:1d:ba:3f:43:ba:e5:
c0:0e:e1:4c:4e:13:80:29:8a:70:20:21:c1:ff:94:b3:1a:ec:
f7:a1:d3:f0:d4:c5:5a:57:07:bb:19:03:26:bc:1a:93:5a:2e:
3b:11:d0:1a:5b:c0:f5:0a:90:38:93:7a:40:10:7f:9d:b4:ba:
a5:ac:85:f5:51:4f:4b:73:d6:39:c9:e2:57:8f:9a:bc:e1:04:
2a:9b:ec:14:71:4f:9a:7f:c5:cf:a9:55:70:05:9d:6d:f0:d7:
57:56:17:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:54 2025 by rpki-client