Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
File: 5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft (raw, json)
Hash identifier: fidRhkkzgiCwhbKYHXhbiMJdD/G5fhUkYilOBZxnMtE=
Subject key identifier: 17:43:11:8D:80:73:94:90:B5:D2:63:A5:54:AC:56:35:41:DB:FD:6C
Authority key identifier: E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
Certificate issuer: /CN=e5de0de73e73874bbc66738805d373cab833b7a5
Certificate serial: 01960BD5E5A664C8F7932C16C0C724DC4BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
Manifest number: 1491
Signing time: Sun 06 Apr 2025 16:01:29 +0000
Manifest this update: Sun 06 Apr 2025 16:01:29 +0000
Manifest next update: Mon 07 Apr 2025 16:01:29 +0000
Files and hashes: 1: 5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl (hash: aAJSoC2rQ8m72SDOgXfW2pqbNSEZk2cqZVEOrbeyklA=)
2: KRSzUBxyLebIHKF4Pc56YInJ7G4.roa (hash: bYjIh5qsMD47j13Dp6UvpgvAJLXcSZU6nC4Ef8AfKgY=)
3: twkvRlKBbWGvXorm0QWgUQL2aXw.roa (hash: RdMA83SLaDMkPV3ykgU6NQ7K1hlLuBXMiacxW37ziVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0b:d5:e5:a6:64:c8:f7:93:2c:16:c0:c7:24:dc:4b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5de0de73e73874bbc66738805d373cab833b7a5
Validity
Not Before: Apr 6 16:01:29 2025 GMT
Not After : Apr 7 16:01:29 2025 GMT
Subject: CN=1743118d80739490b5d263a554ac563541dbfd6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:b0:ea:fa:4b:6d:05:4e:12:9a:46:9c:34:
5e:cc:4c:83:8c:a2:de:33:de:19:df:bc:5f:89:a5:
22:b2:68:21:74:3a:4d:42:c0:f0:50:3f:c8:16:ea:
ae:90:58:a4:e3:a1:1e:d5:75:b2:80:55:8a:f2:b7:
65:32:fe:1a:79:cb:1e:e7:ce:92:ec:c9:92:b1:c8:
99:44:21:ad:e8:42:91:e4:53:ff:87:f2:ea:eb:54:
ac:26:dd:25:87:e2:8c:5f:3a:74:ba:6b:bf:bb:b9:
64:0a:52:46:a3:1f:bf:a4:1b:61:70:0f:ca:e7:a5:
ac:3f:4d:5e:ff:3c:fe:6f:04:10:6d:ec:72:76:ce:
93:c2:20:ca:c5:4f:f0:18:b1:f5:af:b0:eb:64:9f:
d7:5c:5b:29:b9:b7:13:f8:86:36:87:34:71:de:bb:
f1:3d:a5:49:a2:fc:34:a9:a6:0d:32:41:1b:45:e9:
7d:5d:ed:7c:8a:e0:2a:22:eb:d3:ad:00:0e:ac:a8:
9b:a1:1d:2e:0b:c3:3b:aa:cc:73:b4:96:d6:94:47:
b2:89:ff:a5:7e:a2:7b:f3:51:2e:16:0a:f8:53:3c:
7d:03:b0:49:a9:47:b7:3e:0a:92:40:a2:b5:8b:99:
16:1e:bc:12:5c:87:5e:96:f2:f5:87:74:36:4b:b9:
30:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:43:11:8D:80:73:94:90:B5:D2:63:A5:54:AC:56:35:41:DB:FD:6C
X509v3 Authority Key Identifier:
keyid:E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8d:66:e9:4b:b4:c0:31:13:cb:9b:2b:3d:47:f3:9a:c6:8a:
fb:de:6d:ff:87:94:3b:b7:38:c7:ba:e2:53:a0:3e:56:cd:b6:
99:4f:95:b4:6c:7d:a8:52:3e:9b:67:46:19:31:7d:a8:91:37:
e1:0d:d7:32:1a:04:5a:a3:8f:d0:5b:f6:53:3d:d8:d4:2a:ac:
5b:ee:99:a4:0d:f7:49:10:fe:24:0e:e7:93:4c:f4:bf:0a:78:
0d:a9:22:b7:b1:dc:dc:06:78:f5:9c:a3:e6:ef:ab:e3:0d:b8:
c6:97:63:e7:65:67:c1:ae:32:60:40:cd:99:53:f8:d6:10:ad:
58:1c:00:86:6f:3e:a1:4b:e7:61:67:4f:b6:88:87:26:aa:cf:
16:c5:3c:e1:ca:d5:a5:21:24:dc:60:59:af:07:df:83:c4:4c:
f9:08:a8:8e:f2:47:e2:4d:45:29:6e:5e:0e:97:0f:66:d0:a4:
e6:0b:89:a6:37:08:3a:87:55:b8:4a:f1:6d:f6:2a:58:48:12:
70:3c:5e:80:dc:b1:f0:19:7a:5d:77:ec:7f:94:f6:0b:44:7e:
43:36:2a:f2:28:cb:1f:99:93:28:ae:b4:9c:df:28:29:77:6a:
d7:bf:ee:13:51:3e:e9:16:b9:65:ae:24:d1:9f:37:dd:fe:f8:
c3:24:cb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:34:57 2025 by rpki-client