Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
File: N5FWc7KL362ywgGaxo0EZP0htxo.mft (raw, json)
Hash identifier: 5vIxfzIoNt2HabqXIvzkE9k0VUGv6nM1FBLZ7yJcJHI=
Subject key identifier: 5B:C6:FA:08:B0:FF:EC:B2:F3:50:65:12:11:58:0C:54:6E:1F:39:CB
Authority key identifier: 37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A
Certificate issuer: /CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
Certificate serial: 019615EAF9A41BD20A545ABA9583B4BB7659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
Manifest number: 1471
Signing time: Tue 08 Apr 2025 15:00:42 +0000
Manifest this update: Tue 08 Apr 2025 15:00:42 +0000
Manifest next update: Wed 09 Apr 2025 15:00:42 +0000
Files and hashes: 1: DH9htlq0hiwldp4q07DNTkVZOf8.roa (hash: J0KU22uieTNYBq4unRpzKgHyqTQbyJRKS4kqQcbzVVo=)
2: N5FWc7KL362ywgGaxo0EZP0htxo.crl (hash: zZpVj6j1Z448tWj/U+YhFArmWziqXOugU0iHpz1Pios=)
3: jeU3xqGrcmxdIS4lfaliQojmUd4.roa (hash: WoVvfzkH0PYO9V3NP53Pv15mZRXcsOzFbw+RGpI6V54=)
4: mbXBHvnDkr71szR1uqXUf3o_CNU.roa (hash: gBt+bTGYlOGXiT5DEgI8/fzoH444V5sSGRbb6v+iHAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:ea:f9:a4:1b:d2:0a:54:5a:ba:95:83:b4:bb:76:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
Validity
Not Before: Apr 8 15:00:42 2025 GMT
Not After : Apr 9 15:00:42 2025 GMT
Subject: CN=5bc6fa08b0ffecb2f350651211580c546e1f39cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1b:b0:11:b1:14:63:f5:61:d3:ee:89:a8:a1:
2f:49:5d:74:73:79:8d:ec:ce:91:6f:37:48:56:95:
ca:a9:f1:53:51:0a:70:3e:68:65:0a:48:1f:1e:cf:
32:47:01:d1:a7:6d:fc:98:a7:f1:62:94:71:d6:ce:
6b:24:f4:76:11:67:f3:13:2f:a2:da:38:dc:60:4f:
c5:f6:c3:b7:05:55:f1:ee:fc:00:31:e6:1a:8b:1b:
cc:97:65:64:6b:d0:1f:63:e4:98:90:76:96:a5:f1:
67:20:6f:34:9d:cd:99:22:53:ec:a5:d0:35:d2:3f:
4a:9d:5f:c7:f8:20:b8:92:66:b3:75:f5:07:f6:ea:
79:8b:00:80:e3:94:b4:df:03:6f:8f:85:55:74:dc:
9e:80:4b:96:2c:26:d0:a3:03:79:3b:e2:b4:ee:9a:
fb:ef:b5:1b:6f:04:9e:57:f3:b9:3d:37:83:12:03:
44:29:e6:e7:6a:e5:28:46:a1:72:d2:c3:de:29:bf:
78:26:15:a0:bb:8c:a2:4d:34:3b:0b:0b:eb:d5:91:
fc:52:b9:cb:5d:c4:7c:fa:a2:c9:ca:89:94:70:b8:
65:2d:14:c2:c5:ee:bc:a7:07:25:a6:82:28:de:30:
db:ff:f9:4e:cd:70:1e:bf:4d:d0:b5:95:33:5a:e1:
37:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C6:FA:08:B0:FF:EC:B2:F3:50:65:12:11:58:0C:54:6E:1F:39:CB
X509v3 Authority Key Identifier:
keyid:37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:cd:b6:fc:a2:c0:e0:b6:3f:2a:94:78:06:27:24:3a:12:d3:
9a:94:1a:f6:75:2f:72:b1:d6:94:7a:ec:0e:73:db:5a:e1:bf:
3a:ba:3a:30:a3:ee:d5:04:a4:a8:8d:2b:50:88:cf:e5:6e:4b:
57:d7:ec:64:69:4a:a6:86:dd:ec:af:93:fc:a8:e5:45:98:67:
96:d4:62:aa:2f:de:53:fb:02:08:fc:9e:63:9f:6a:87:20:22:
84:cc:f8:a5:15:f6:59:8d:5e:bb:ae:18:8c:95:5d:71:ed:ca:
59:33:3f:4e:38:5f:a1:62:9b:98:87:01:67:49:32:e0:9f:94:
88:91:5e:5d:2e:57:f8:be:f1:64:5f:0e:a5:15:85:fe:58:12:
71:08:40:2e:4e:ae:f2:e7:1c:ee:81:d5:83:ef:c8:dd:90:c6:
29:9d:63:27:b1:04:89:78:ab:9b:dc:59:58:38:b4:a6:ba:fd:
26:9a:db:f5:de:cc:71:94:02:6d:cd:1b:54:46:d8:17:c3:ef:
90:ab:90:1f:3a:ee:ec:9c:cf:82:6e:84:45:69:d5:fb:97:c2:
db:1b:66:88:53:22:5a:b3:8d:47:5c:c2:f2:2a:c6:70:08:03:
36:51:ff:bc:1d:1f:7b:59:c2:95:e1:28:8e:de:e7:84:3e:0c:
fb:a8:a6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:28:34 2025 by rpki-client