Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
File: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft (raw, json)
Hash identifier: U6AWUm8uAR6gCv1DyemfSMDWfOg8Q2DykvGQifwRSBY=
Subject key identifier: 55:1A:6D:C2:71:B2:A7:F1:C1:2D:46:9A:D9:A2:AE:83:BF:63:E1:7A
Authority key identifier: E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
Certificate issuer: /CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Certificate serial: 01965380807AD5E228C253B1F0C18BE5CF11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 14:00:52 +0000
Manifest this update: Sun 20 Apr 2025 14:00:52 +0000
Manifest next update: Mon 21 Apr 2025 14:00:52 +0000
Files and hashes: 1: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl (hash: 2WbHVdZh9Pizyp00SEG41NRA/a0gg7Aa9VYSpSXAob0=)
2: TmGH7yXkMz-v6gHvCr9qE37nKcA.roa (hash: n1u54C/BtvIrlKmaScJ2jkmbHT4HONn1UuTucKaDW6g=)
3: k7UwqFFBmprxDA56kDwgmZFvA3g.roa (hash: oLwFA32V9FgAocZGOyNmCc1klUCv8GcjZUVDNdla0Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:80:80:7a:d5:e2:28:c2:53:b1:f0:c1:8b:e5:cf:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Validity
Not Before: Apr 20 14:00:52 2025 GMT
Not After : Apr 21 14:00:52 2025 GMT
Subject: CN=551a6dc271b2a7f1c12d469ad9a2ae83bf63e17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6e:19:7e:fc:f4:9e:1d:d8:32:84:86:ad:8f:
4b:3a:74:66:ce:66:2b:5c:5c:a1:f6:fa:8f:9e:ad:
2e:50:6a:ea:66:19:63:92:78:42:a2:2c:46:57:e4:
e4:15:11:19:0c:ac:0f:7b:31:ff:bf:c5:50:83:f3:
31:18:eb:91:5d:6c:57:ee:ce:d4:5b:bd:aa:ec:0e:
5f:62:05:ed:b7:5d:55:53:31:00:2a:9a:72:4a:cb:
e2:36:bd:05:2f:cf:18:52:34:a4:07:9b:a5:c8:3c:
47:72:63:2f:56:68:72:9c:35:99:14:24:9f:16:38:
d5:97:18:1c:5c:2f:a7:f1:03:99:2e:ca:07:b1:33:
c9:0c:a7:e0:c3:98:82:8f:30:b1:72:1c:5a:f2:5c:
dd:80:ea:26:f4:36:3f:5b:fc:81:1a:a7:67:2f:bd:
e3:30:a9:85:66:3f:17:3e:ad:d7:78:60:03:59:6c:
8e:85:1b:f8:f0:8c:fe:cb:e1:ff:fc:fb:3d:7d:a3:
b5:ba:fb:67:62:dc:b8:aa:2d:4c:39:7c:d5:c9:ac:
c9:de:a0:61:59:81:36:06:3e:70:b2:78:3f:5b:4e:
2c:11:ba:59:d7:2b:aa:c7:4b:ba:dc:f9:ab:a4:0a:
4e:2d:6b:1e:74:a7:37:ac:e7:b5:65:a9:24:40:54:
e6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1A:6D:C2:71:B2:A7:F1:C1:2D:46:9A:D9:A2:AE:83:BF:63:E1:7A
X509v3 Authority Key Identifier:
keyid:E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b3:97:5e:e2:47:45:0e:73:ff:3f:f5:4f:9e:7e:c5:ba:b5:
94:3e:0b:c9:c3:63:0e:d9:85:a0:54:cf:09:80:a8:36:d0:46:
0c:9c:79:74:cd:fa:3f:3d:29:b7:f1:56:df:0a:4c:37:f8:6a:
cc:e1:57:2c:b5:83:e1:0f:6d:fa:37:84:d7:8e:62:88:6c:21:
63:6d:7f:d9:6e:3a:71:35:94:76:ab:74:f0:e8:b7:87:d6:91:
50:d8:3e:27:08:6e:63:dc:93:79:7f:e1:aa:32:e8:8d:8e:2d:
b4:76:01:72:26:df:77:54:8e:0f:6c:97:38:c4:57:e7:e8:ca:
d9:61:03:0a:d4:e4:82:e3:cc:01:0d:29:7d:17:42:ba:b2:a8:
1a:97:9a:26:95:d8:37:11:8c:85:b0:8a:9b:e8:a8:0e:61:fe:
54:de:2e:57:08:0a:df:7f:43:22:74:08:94:4c:81:81:48:1b:
a6:77:35:64:ad:cc:f4:cf:34:c7:52:93:d5:b9:f0:8e:bf:5e:
bc:af:8f:1b:3c:c1:75:c9:f2:d0:69:cf:61:a0:b0:43:bb:e8:
85:28:f5:1a:af:d2:32:c6:45:34:66:29:cb:cd:00:13:f8:1b:
7a:18:a0:83:4d:f5:24:15:ac:ab:58:69:56:b7:41:2c:a3:8f:
66:2e:47:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:38:09 2025 by rpki-client