Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
File: 5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft (raw, json)
Hash identifier: nr00uzSamVFEVeUmcBtl4XWBZZc6bWrq9Kto4oxbFD8=
Subject key identifier: B6:05:5A:5C:DE:E8:A1:E4:7B:91:EA:67:F5:CD:65:FE:FA:65:3D:28
Authority key identifier: E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
Certificate issuer: /CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Certificate serial: 019652DB693A80669821D0BB1BEA991F9DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
Manifest number: 0FE0
Signing time: Sun 20 Apr 2025 11:00:33 +0000
Manifest this update: Sun 20 Apr 2025 11:00:33 +0000
Manifest next update: Mon 21 Apr 2025 11:00:33 +0000
Files and hashes: 1: 5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl (hash: GQ5M6WLAVqjpLqkpzj0Mwz4v6aXueZ7vlUovT5uWLwQ=)
2: WFOxXq8-woghob55sftxvTt6FdI.roa (hash: hwAy54H63vrYPhBgVny9CWYFBq69ABYXgCXp7pxF/eQ=)
3: nMthV73xKQot_nDw1BjaSeVp1wM.roa (hash: TYeby9qItlQuzOaWwKV9Jy5leKuAxnH4NPibMj98Eco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:69:3a:80:66:98:21:d0:bb:1b:ea:99:1f:9d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Validity
Not Before: Apr 20 11:00:33 2025 GMT
Not After : Apr 21 11:00:33 2025 GMT
Subject: CN=b6055a5cdee8a1e47b91ea67f5cd65fefa653d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ab:18:e3:29:f6:4f:08:d5:28:ae:53:85:5f:
14:3f:eb:94:a4:54:16:6e:84:93:97:4f:0b:c6:58:
91:68:34:d6:60:5e:a7:40:a5:e6:81:df:96:23:e8:
18:44:ef:17:1b:0d:71:9b:55:a3:f4:20:65:a5:61:
fd:52:62:a5:4b:65:13:0b:9e:66:35:42:55:ba:83:
c8:f4:58:72:76:ab:aa:3b:8c:8f:01:97:6b:7a:0e:
e9:08:86:3c:98:bc:75:50:db:6c:65:b7:8a:36:81:
61:ec:8c:a3:9d:f3:98:5d:44:9e:3f:f8:0e:d2:65:
6e:2d:d5:96:d3:c5:b6:11:65:38:62:17:cf:3b:a2:
74:e0:44:94:4a:a6:05:b1:2e:7d:9f:c4:18:66:b3:
ee:27:ec:a2:fc:a7:31:39:fa:ea:0d:1c:10:63:d7:
9a:10:ce:54:30:a3:0c:e1:c2:6f:86:1d:e4:ce:ed:
6b:66:20:a0:25:85:ff:60:58:29:b4:7c:53:5f:9c:
2e:80:a5:97:97:cb:40:fa:07:f8:23:c3:d3:26:dc:
e3:e1:7b:d1:73:9b:7e:91:35:0b:f2:3a:d6:00:66:
e1:ba:38:c8:79:eb:4f:a4:35:96:35:36:05:c8:6d:
f4:81:a8:72:1d:d8:01:8e:c1:59:b0:bd:32:88:59:
ae:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:05:5A:5C:DE:E8:A1:E4:7B:91:EA:67:F5:CD:65:FE:FA:65:3D:28
X509v3 Authority Key Identifier:
keyid:E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:92:03:3c:b9:b5:65:9e:65:1d:19:86:e5:61:38:9b:e1:43:
2c:b5:57:ad:2a:2e:7c:55:0d:c3:ef:01:36:2b:32:55:89:58:
fe:8a:ab:9b:36:46:e7:14:1e:2b:e1:68:26:e7:0c:62:8f:79:
2c:20:f6:da:eb:eb:d5:1f:c2:01:95:3a:78:f2:b8:18:6a:09:
78:49:0d:2e:94:26:e6:e5:46:76:07:e8:bb:56:ab:17:37:c4:
11:2d:c2:d5:ba:3e:b7:f9:03:56:ca:08:56:a3:81:60:24:01:
6c:85:b6:a9:d0:64:cc:0b:06:01:58:1c:33:2c:e8:df:62:32:
4c:26:31:ee:d5:c2:40:02:b9:7e:22:07:43:06:92:8f:23:01:
5d:6c:c5:b4:e1:7c:01:3a:02:cd:21:58:1a:94:1d:0a:3e:8b:
28:cd:c9:ad:12:16:d8:4e:47:d7:a5:f6:81:85:c2:6d:41:6a:
1a:42:04:00:80:af:e8:d7:63:50:34:84:e7:d7:25:de:c1:25:
42:ad:02:5f:2e:9f:d1:33:ab:61:25:7f:eb:81:b7:24:7e:8c:
97:fd:d2:29:ed:99:01:57:fa:ba:95:54:ca:16:3b:ca:24:e2:
0e:f4:a1:1b:cb:73:25:db:ef:67:8b:86:37:91:03:a4:f9:fc:
d3:72:45:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:49 2025 by rpki-client