Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
File: 5Mx247VHf_1CoP5LjHg6rS-W_nA.mft (raw, json)
Hash identifier: jalZ0BPVWdRS++ZTWgsm9+HyIactFfRJ25Xm4158XwM=
Subject key identifier: 86:1A:91:09:39:ED:DC:71:0C:D3:9E:7C:12:E1:8E:21:EE:2B:3D:E0
Authority key identifier: E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70
Certificate issuer: /CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
Certificate serial: 01963E0C0BDF52A7E6557E9A9B6F2A45E0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
Manifest number: 0814
Signing time: Wed 16 Apr 2025 10:01:38 +0000
Manifest this update: Wed 16 Apr 2025 10:01:38 +0000
Manifest next update: Thu 17 Apr 2025 10:01:38 +0000
Files and hashes: 1: 1tTKxE7bwQfchkwslQXxnYbzsJg.roa (hash: 5+EJxKuD23N+Q8WaFwzZJ+wyeA6DdNR0OHPQg7+6ADs=)
2: 5Mx247VHf_1CoP5LjHg6rS-W_nA.crl (hash: bXxmrLKeRk1j6KVuG9pNZmMrEHdSU3+gn2Lp/fzdVdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:0c:0b:df:52:a7:e6:55:7e:9a:9b:6f:2a:45:e0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
Validity
Not Before: Apr 16 10:01:38 2025 GMT
Not After : Apr 17 10:01:38 2025 GMT
Subject: CN=861a910939eddc710cd39e7c12e18e21ee2b3de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ac:64:80:a3:9b:f0:eb:3f:87:a1:3a:d9:bc:
85:45:60:a9:c7:5d:32:14:83:cf:da:28:c4:d6:f1:
26:40:2d:b0:a6:4f:f2:22:84:1f:71:61:33:85:d2:
30:92:99:3e:1d:21:17:79:b0:54:63:0e:d3:bb:0c:
16:df:f7:aa:51:a3:0e:d1:0f:e7:4a:c8:b3:e0:63:
5b:22:11:3d:8b:0d:90:16:d0:97:1b:70:c3:a3:85:
b7:e2:c5:8d:89:25:59:41:ed:ba:37:6e:31:d2:e1:
55:b4:01:7f:ba:69:a2:28:de:f2:81:2d:f6:a6:72:
bd:1a:23:cb:57:43:6e:02:1a:e7:83:b4:6b:68:0f:
a8:ea:a5:94:bc:44:1e:61:ac:8a:9c:5a:67:96:54:
0f:41:fa:9e:a3:64:8f:f1:3e:72:21:a6:da:24:28:
cb:57:23:c9:ad:53:6d:67:19:0a:12:5a:56:e7:84:
a4:87:ce:09:14:ba:57:cd:fc:bd:65:41:d6:51:0e:
54:7f:51:f3:3a:39:d3:12:20:03:31:fa:a6:5f:ab:
49:1d:29:83:1b:7a:71:63:a3:ea:48:a0:72:27:a7:
38:af:69:1f:f1:68:a3:77:05:66:aa:a5:af:d0:59:
35:5f:84:dd:0e:5e:77:c3:14:97:d0:e9:de:e4:c4:
75:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1A:91:09:39:ED:DC:71:0C:D3:9E:7C:12:E1:8E:21:EE:2B:3D:E0
X509v3 Authority Key Identifier:
keyid:E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:03:19:79:66:20:46:58:5f:d2:c1:8b:db:cf:28:54:e3:cd:
97:47:35:e0:3b:71:b5:ba:59:81:4c:a9:71:62:72:66:75:01:
3b:44:67:0a:5d:25:d7:d0:84:c4:43:ce:13:d7:01:c7:c2:32:
4c:24:35:b3:da:9a:d7:b4:1b:ff:d1:08:e2:be:70:2f:a3:1f:
5a:1f:7e:a6:35:c7:e4:3d:54:9d:8c:6f:e1:e7:99:3e:d2:10:
b9:95:fd:0b:bc:38:7a:8d:4f:ba:29:da:58:52:6f:a1:9b:e7:
4d:57:27:a0:75:e9:7f:ad:3a:d0:8c:72:a8:0d:64:e1:53:e5:
a9:e9:e3:77:d2:2f:1a:a3:a3:7a:5f:40:1e:5f:cb:be:f1:24:
6e:52:cc:a6:2f:23:58:08:97:91:5a:e1:44:de:de:db:a9:70:
86:fd:63:91:39:a6:65:62:c6:c4:af:a5:9d:9e:7c:4c:71:e3:
03:cb:b4:c6:82:6c:7a:cd:2b:53:91:a7:4e:9c:0f:6b:e7:2b:
c7:0d:0c:38:43:8b:9a:ac:30:90:86:16:9d:eb:a5:a9:c5:73:
54:ab:78:fc:04:76:0f:bb:60:6e:22:96:28:1c:5d:66:5c:d4:
3e:c7:43:ee:9c:42:0d:c4:68:d3:cc:2c:d2:88:bc:4e:2c:17:
d2:64:60:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:52:57 2025 by rpki-client