Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
File: 5q1QzkYdtcs3pYPnKbcVSZjssRc.mft (raw, json)
Hash identifier: N8yqKfsjgJUZp7J2pMb/E/Buguc9cDn9RM4WmrvTHnI=
Subject key identifier: 1D:0F:CC:8C:FB:26:A1:AC:01:0C:A4:BB:B8:90:4E:4D:C4:F2:40:1E
Authority key identifier: E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17
Certificate issuer: /CN=e6ad50ce461db5cb37a583e729b7154998ecb117
Certificate serial: 019645C5B01E0F9E9585DF8C5E6CFC2DDC98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
Manifest number: 02AA
Signing time: Thu 17 Apr 2025 22:01:45 +0000
Manifest this update: Thu 17 Apr 2025 22:01:45 +0000
Manifest next update: Fri 18 Apr 2025 22:01:45 +0000
Files and hashes: 1: 5q1QzkYdtcs3pYPnKbcVSZjssRc.crl (hash: jMCYlMV92vujmWJTC0O3F4r54T5fHc63YQtx7VfphyI=)
2: IGFfOsfuRBLRoDQXZrvrXPV6GDg.roa (hash: GBdaIeCW55nvw4wNP3jzu/1bBBTCqNE/C3I0UV/65Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c5:b0:1e:0f:9e:95:85:df:8c:5e:6c:fc:2d:dc:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ad50ce461db5cb37a583e729b7154998ecb117
Validity
Not Before: Apr 17 22:01:45 2025 GMT
Not After : Apr 18 22:01:45 2025 GMT
Subject: CN=1d0fcc8cfb26a1ac010ca4bbb8904e4dc4f2401e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cf:c1:bd:d3:85:30:e0:b8:61:55:86:cb:22:
9c:00:09:55:e6:e2:cb:69:ed:85:80:aa:29:7b:1a:
ed:15:47:5e:79:ee:d1:f0:55:04:02:68:87:9b:78:
af:cd:49:20:c8:a6:28:8f:2d:b4:85:c7:4b:92:1a:
c6:36:56:a9:7b:7c:3c:48:d2:ec:61:c5:0b:d5:7c:
65:45:0b:fd:07:80:55:43:77:f1:81:3d:f7:63:29:
64:b9:b2:11:aa:8a:a3:22:86:45:a8:11:e7:33:cd:
4f:25:72:82:7e:6a:cc:fd:c2:fb:ab:b6:a6:53:0a:
df:7f:a6:cb:f0:58:94:8b:2e:23:f2:a2:ad:ce:91:
6f:93:b7:01:ba:b6:b7:20:e9:6d:22:ed:4a:4c:ac:
6e:a8:7d:60:49:21:c4:c0:0a:3f:71:c1:91:e8:6d:
07:f7:39:96:8a:fa:5a:be:47:62:79:1e:f7:8b:68:
ee:94:ed:92:92:52:cf:97:28:aa:9b:19:6d:eb:01:
38:eb:39:f2:32:16:37:08:9c:c0:1c:9d:80:03:bb:
35:ac:09:ab:d8:7d:9b:81:fa:fa:19:a9:11:a5:c4:
27:5b:aa:98:67:e7:f2:80:a4:89:f2:a7:bd:06:3c:
1e:95:0f:af:63:ef:38:8c:4d:79:74:2b:12:5d:c3:
d6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0F:CC:8C:FB:26:A1:AC:01:0C:A4:BB:B8:90:4E:4D:C4:F2:40:1E
X509v3 Authority Key Identifier:
keyid:E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d7:13:af:bf:ce:d5:8f:7d:fd:38:44:b6:7b:01:38:8a:24:
6b:0f:bb:37:54:c9:cd:41:f1:0b:46:a4:05:72:88:59:71:79:
52:8f:9f:f1:76:ef:f7:a4:6d:2e:68:a7:ef:60:d0:7b:2c:90:
f0:a2:91:b6:12:2f:45:2b:83:04:a0:c5:9a:dd:f0:8c:08:6d:
d7:9d:fd:61:3f:9b:81:2d:ac:04:11:a7:2a:66:bf:93:c7:81:
bc:35:bf:04:e6:88:2e:d9:40:79:f5:67:5d:c9:77:86:9f:95:
f5:18:7e:f4:80:01:b5:d6:70:b4:9b:30:59:65:32:54:85:c4:
4e:20:20:df:95:ee:24:19:81:54:ec:87:3e:bc:89:41:ae:b2:
bc:59:68:1b:17:e9:e3:7a:c8:67:3f:ab:d8:e2:3d:28:73:12:
ac:db:26:51:df:96:3b:8a:2e:7d:29:5e:ec:6a:3d:34:6f:4a:
c3:9c:34:d4:6a:2d:76:10:2d:67:ef:24:91:62:ce:07:cd:b5:
3f:bf:d2:25:a0:c2:e6:69:50:1d:7e:b3:6c:f4:2b:a5:fd:52:
0a:e6:71:21:34:8d:aa:59:a8:57:d5:36:5e:f9:6a:7f:37:b8:
3c:03:75:9d:0b:03:23:d4:9c:d9:a0:f4:09:75:31:e8:04:ad:
e9:f4:39:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:43:38 2025 by rpki-client