Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
File: 5QxErpgedJLTuiHihHIIAYA5jWQ.mft (raw, json)
Hash identifier: 9GEz2e/F0Id1HTzPJVMModLTlWLVAMLjlJYWNo+8CP8=
Subject key identifier: 53:D2:4B:8F:12:6A:1E:3C:DD:FE:02:B6:46:ED:EA:77:B4:2C:CB:DC
Authority key identifier: E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
Certificate issuer: /CN=e50c44ae981e7492d3ba21e28472080180398d64
Certificate serial: 0196586F8EDE92326C7C9361D92456CF0926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 13:00:28 +0000
Manifest this update: Mon 21 Apr 2025 13:00:28 +0000
Manifest next update: Tue 22 Apr 2025 13:00:28 +0000
Files and hashes: 1: 5QxErpgedJLTuiHihHIIAYA5jWQ.crl (hash: rQ0zZZ3V5PRozx/7j8akYgQElYrU2iLupqXgICeEyy4=)
2: XqJnQtK-Eb1fVOe5J4HfD-Z2VPA.roa (hash: JXjpjJMP71nmxtEw4MnCOZWcY+ewObU/MkJxejPuf3g=)
3: ZU5mIuhec-w4R0nc_UEougNeTzM.roa (hash: Ryu8faEPK4CmfRJ6AZyYHPiiRBpNAisMzS6dIeA5uz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:8e:de:92:32:6c:7c:93:61:d9:24:56:cf:09:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c44ae981e7492d3ba21e28472080180398d64
Validity
Not Before: Apr 21 13:00:28 2025 GMT
Not After : Apr 22 13:00:28 2025 GMT
Subject: CN=53d24b8f126a1e3cddfe02b646edea77b42ccbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:32:a3:b2:89:06:0b:75:fc:d8:df:79:84:ee:
8d:a0:9d:8b:64:7d:ff:00:2c:2d:b2:5e:27:83:f1:
1a:a2:71:a7:dc:10:73:67:bd:26:3e:ad:54:df:6e:
4b:40:16:27:a5:d9:58:a5:ca:a0:56:14:b8:40:1d:
64:6c:97:b3:67:b9:88:da:2c:f0:09:ba:a7:d4:aa:
d5:d9:87:ef:0b:db:dd:a4:6d:dc:7e:27:92:c4:ae:
4f:16:14:39:18:3c:b5:08:a6:b3:d3:a6:bf:2e:8d:
ba:87:c7:f8:27:0f:28:13:f7:f2:ee:49:1a:be:7d:
a7:53:e4:dc:c4:f4:b8:c2:1d:65:e0:1d:73:61:ff:
16:c1:f9:2c:bd:cf:44:46:c8:0a:90:6a:e3:ee:46:
21:09:90:98:56:d8:91:10:e4:97:1b:06:dd:9f:d1:
fe:5b:c3:43:b5:1a:9e:ba:44:b7:d3:c4:87:61:b5:
a2:f4:6a:49:a6:5b:9a:28:d0:c3:ac:09:87:c2:60:
ff:78:d6:d4:13:85:e6:21:fc:79:14:6d:13:a9:78:
cc:5e:a2:56:67:c9:0c:1e:b2:ac:e1:37:0d:5c:51:
54:33:7f:01:44:6e:a5:5a:c3:a6:20:62:72:70:f0:
93:e6:68:89:43:82:c8:71:4e:2a:21:b9:02:fb:d2:
ef:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D2:4B:8F:12:6A:1E:3C:DD:FE:02:B6:46:ED:EA:77:B4:2C:CB:DC
X509v3 Authority Key Identifier:
keyid:E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1f:28:c0:20:8b:85:00:52:f4:19:15:53:f1:b5:53:de:92:
dc:5c:73:ca:31:8c:7b:be:e1:2c:15:a6:d2:e2:1b:a8:3d:9b:
38:05:f5:9b:38:9b:1a:60:43:6f:d2:a3:89:b9:1f:de:37:5c:
df:ea:b8:00:24:30:a2:ad:cf:ff:6a:df:2f:de:9c:48:98:16:
21:2c:29:c8:10:3e:be:14:ba:0e:08:a3:0e:4f:e9:8f:67:3b:
7c:59:58:54:9e:d6:87:b4:6f:c0:46:04:fd:3b:ba:71:c1:48:
ae:f8:3c:5b:5c:7e:24:ca:08:86:86:32:0b:b0:48:dd:4a:86:
00:dc:3a:7f:92:46:15:5e:3e:57:17:3d:24:23:25:5f:9b:df:
74:05:05:77:e0:7b:a5:f8:64:c5:46:58:52:31:fd:80:dd:80:
4d:fd:c3:f0:44:1d:a3:4c:05:bf:83:e6:e8:b4:fd:bd:af:f2:
70:83:e9:da:7e:11:53:b4:97:19:5d:7c:4d:d6:93:14:4c:91:
49:e5:ae:d6:04:2b:b1:d6:22:a6:45:e5:c1:e3:c8:7d:68:ee:
68:10:fd:17:a7:16:8d:b3:83:4b:bb:f0:5d:d5:ad:be:0b:d1:
41:3e:a0:38:a1:6d:01:06:41:d3:0f:05:af:ed:94:05:4d:bf:
bd:17:68:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:36:18 2025 by rpki-client