Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
File: a5LPM5DKpYeedZcpzZAIxuylWic.mft (raw, json)
Hash identifier: imdLRtwn0JqrRS2yAulsBS0FjiAcHT/EVyAMJSAxXb8=
Subject key identifier: A7:C7:49:64:5B:68:85:3F:A5:F8:88:0B:B1:47:11:EE:7E:01:AC:65
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Certificate issuer: /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial: 01962B60E3DFE76376F468C118DAB94A5BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
Manifest number: 0513
Signing time: Sat 12 Apr 2025 19:01:31 +0000
Manifest this update: Sat 12 Apr 2025 19:01:31 +0000
Manifest next update: Sun 13 Apr 2025 19:01:31 +0000
Files and hashes: 1: MKVWoK3wRPR_92nYPkQa4dZVFlU.roa (hash: CUusBr3IW9QaEzh3QeMtC6ZDvXcFkIcu309/jIeDme8=)
2: UVKqbvOHvCn6HoAzG1ux5mNYX9U.roa (hash: zS7iofsDKAb9AZxOa/q1sMs1Br0lasrnbRlbpqfAq5w=)
3: a5LPM5DKpYeedZcpzZAIxuylWic.crl (hash: XCCHr+FtiOimRKJekFoAdc8dAsCHcBDTAnu4T7cxFXQ=)
4: nHW9BLq4zRW7_GDpHKk8LDtfSmI.roa (hash: wgNVfFr1EUmSTQMiYZD3CFdfwE6KU5e+fnSwgZEt6SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:60:e3:df:e7:63:76:f4:68:c1:18:da:b9:4a:5b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Validity
Not Before: Apr 12 19:01:31 2025 GMT
Not After : Apr 13 19:01:31 2025 GMT
Subject: CN=a7c749645b68853fa5f8880bb14711ee7e01ac65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:71:1a:48:16:b4:20:fc:3f:61:a9:72:fc:
9a:b4:cf:6b:cf:29:b9:af:ed:c3:89:fb:12:42:23:
5f:a0:b0:6b:c3:49:7e:1a:7f:d5:e8:11:ed:c4:83:
59:e4:cd:f0:cf:09:7e:08:14:4a:b4:75:ef:1f:b3:
a2:a6:fe:97:5e:9c:f8:b5:ab:5d:e6:98:7f:a0:4a:
1c:04:e9:38:04:1f:b7:f3:9a:c8:8a:e1:08:98:70:
34:e1:85:66:0b:0d:58:ee:17:6a:0c:5a:b6:3c:01:
b1:62:45:e4:2e:b6:9e:b0:ef:55:b7:17:b7:bb:0a:
80:ae:2d:80:90:15:c3:9e:9d:be:53:87:e9:e9:2c:
d5:87:c4:70:7a:f0:3b:36:21:c2:b9:39:30:c0:75:
7f:5c:2e:45:0b:68:30:b4:4b:9e:6d:a1:62:ac:43:
be:7e:51:2c:e7:21:5c:19:7d:c5:9d:95:4d:5f:db:
3d:c5:2a:70:c9:1f:c4:75:3e:57:69:b3:ee:0f:b0:
71:2f:8b:00:9a:7c:ec:1c:ae:fb:16:5a:15:2a:05:
7b:2e:c4:30:0b:77:73:79:19:70:32:7d:d8:69:5f:
35:8a:c2:cb:fc:a0:cf:8e:39:99:05:d2:47:ea:c6:
50:56:f1:6e:d4:51:6a:2e:00:d1:97:e9:4b:03:b4:
2c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C7:49:64:5B:68:85:3F:A5:F8:88:0B:B1:47:11:EE:7E:01:AC:65
X509v3 Authority Key Identifier:
keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:53:c0:09:fc:26:e0:54:df:4c:72:4b:f7:4a:07:bc:12:80:
17:33:f6:f8:8b:d0:7f:9f:30:87:7f:b0:a3:a3:a4:52:dd:54:
a3:b4:d1:ab:7a:89:7c:bf:78:cd:9d:c4:1b:ae:43:0d:40:3b:
ca:fd:84:57:09:06:52:21:b9:bc:78:19:7c:9b:08:5f:89:69:
25:57:0a:d9:e6:57:86:50:95:58:50:ea:ae:4c:b7:30:37:b2:
f8:56:9f:52:ae:eb:e9:91:2a:1d:fa:ac:65:27:3a:9d:92:93:
40:56:83:cc:16:2a:86:66:a8:c9:31:01:46:d2:47:ec:54:4c:
1e:4b:9d:17:75:43:c7:26:f9:99:cf:ab:6d:94:a5:36:9f:ec:
7c:df:3f:73:7a:75:33:e9:e5:cd:b4:39:d9:e1:2e:45:dd:8a:
bb:f2:04:dd:5d:5d:07:ca:d2:63:11:ce:c0:16:d1:1e:88:11:
bf:34:53:b1:c4:44:92:6a:fe:61:ea:1f:21:bd:35:5b:a3:4e:
99:81:f4:05:cc:92:41:db:8a:26:fa:2c:a1:5c:88:b7:f7:fd:
3d:e4:7f:23:c8:d8:03:86:e0:1a:f2:ec:4a:f4:ef:11:2f:21:
66:6d:ca:d9:5c:fe:16:01:2d:b7:4e:cc:88:af:d7:15:20:75:
54:b2:11:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:20:24 2025 by rpki-client