Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
File: 5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft (raw, json)
Hash identifier: 75xnDzV+/AFnqKdQQiU+ukGn5QRaeXcK6q8yREYEQb4=
Subject key identifier: 40:23:40:15:6C:0A:09:F9:44:B9:C2:25:08:06:4D:7D:F6:8D:EE:A6
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 01962A170ACFE6EC5E8AF0AB74D86D897086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
Manifest number: 1562
Signing time: Sat 12 Apr 2025 13:01:15 +0000
Manifest this update: Sat 12 Apr 2025 13:01:15 +0000
Manifest next update: Sun 13 Apr 2025 13:01:15 +0000
Files and hashes: 1: 5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl (hash: WOGTEwyPjrGOKnRU6DzivG/1bAYLEFrqVvbdwm5XHRM=)
2: SXG-e2hHIIAl-yj4qBi6FUi9wGY.roa (hash: +fTL7yItTRc/AAESJMlIEyzwJCD39qE6Ysoda7xR64c=)
3: mKq_xfX4GR_sRnKxaF_Jb4hVjPc.roa (hash: IBzPrlYvpdl22I7A6wpS6qZk+JSBkD6G1y12ddxaVGI=)
4: w7Fbo3W0AkoJQABo1dgJ37JPic8.roa (hash: gD8RrhuF7+lyzMsNkWMV653nJuELIlwIESwEiuq+hP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:17:0a:cf:e6:ec:5e:8a:f0:ab:74:d8:6d:89:70:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Apr 12 13:01:15 2025 GMT
Not After : Apr 13 13:01:15 2025 GMT
Subject: CN=402340156c0a09f944b9c22508064d7df68deea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9b:7c:70:91:2b:da:6b:12:8c:8e:34:e7:75:
34:56:6f:7c:f8:dd:bd:f6:35:05:72:62:68:66:f3:
93:71:0e:df:69:d6:8c:18:ae:4a:e1:7d:59:d7:d2:
9d:b9:e6:51:95:d3:7d:74:0a:c2:df:5a:02:43:e1:
43:c5:68:ff:34:7e:c1:27:c5:47:11:7d:44:d2:3e:
35:98:54:86:64:be:6e:72:20:ef:ba:ae:e1:0f:dd:
08:e8:bf:9d:19:08:f7:d4:88:3a:fb:75:10:ad:60:
ec:69:51:ed:65:1c:b3:67:a6:f3:44:41:72:f3:47:
b8:5a:b2:b3:37:76:9f:71:d3:1c:db:a6:cc:76:1d:
55:36:d7:2f:98:fa:d4:81:b5:3d:d2:82:0a:fb:ff:
b0:1f:a4:4d:b0:f8:5a:49:b1:8c:08:f4:6b:6a:ae:
d6:a6:b8:35:d9:73:f2:15:11:8e:c4:c5:27:17:f8:
2e:be:37:84:25:ca:33:73:07:a8:96:73:77:f2:20:
7d:9e:4b:34:99:7f:b5:5c:02:b6:f4:64:ef:54:65:
89:9d:54:ff:0c:d0:52:09:b4:c6:e2:7e:b7:c9:b5:
32:55:4c:e9:c4:82:8b:df:a7:19:98:fd:fa:fb:1f:
52:71:a6:aa:e1:57:a2:f9:74:07:d4:47:4a:86:d4:
3e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:23:40:15:6C:0A:09:F9:44:B9:C2:25:08:06:4D:7D:F6:8D:EE:A6
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:45:c4:e3:b8:4a:12:6b:56:c9:a9:75:6d:2b:6f:08:fd:7a:
72:eb:30:aa:9c:25:ac:f8:39:8a:4b:58:14:b6:35:8d:38:4b:
02:8a:b4:33:53:5f:87:02:aa:0f:2e:3c:f9:f6:34:76:b6:5e:
98:c3:01:7d:af:d6:48:53:83:f6:4b:a5:00:6d:43:6a:ab:31:
bf:60:25:be:1b:1a:8b:2f:47:0f:ca:f1:d1:48:3a:c9:c9:12:
94:07:58:27:7c:5e:c6:f0:bf:66:4f:33:41:f1:2c:7c:c5:6b:
ec:b7:b6:1d:6a:c9:a5:b2:cf:54:2b:d8:16:2b:7e:a4:1d:92:
82:6f:13:b7:a5:e3:77:ba:3d:b1:04:33:a7:da:a7:46:7f:e2:
46:b1:b1:e4:8b:77:0b:5c:61:a9:76:ac:ef:cc:be:9b:d5:72:
01:bb:b1:0b:d8:d6:45:cb:9e:6c:cf:32:2d:6a:fc:ff:36:07:
95:a4:71:e0:74:6c:ab:dd:b9:33:5c:3d:07:11:43:af:fe:81:
16:75:3c:16:1e:c6:dd:bf:96:60:29:00:9d:b1:c1:c7:dc:d4:
87:45:d3:a5:4c:01:61:27:7d:62:eb:dd:56:21:1a:18:3f:3e:
aa:ea:c3:49:49:b8:e6:96:9d:19:16:ce:e8:09:73:3f:74:42:
5d:37:e3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:47:54 2025 by rpki-client