Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
File: 5hwHyVFIjwTLOw_TOK-E135Gv1I.mft (raw, json)
Hash identifier: +MKMz1Gj1No3C4qnwbj4zeGZZh9llrz25AjUX4/7Ouo=
Subject key identifier: 05:0A:64:84:4F:FD:C6:FF:BE:1E:24:C1:79:44:AD:EC:B5:D7:9A:04
Authority key identifier: E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52
Certificate issuer: /CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
Certificate serial: 019656132CB76408839F189D5FD9B2DC8AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
Manifest number: 1504
Signing time: Mon 21 Apr 2025 02:00:19 +0000
Manifest this update: Mon 21 Apr 2025 02:00:19 +0000
Manifest next update: Tue 22 Apr 2025 02:00:19 +0000
Files and hashes: 1: 5hwHyVFIjwTLOw_TOK-E135Gv1I.crl (hash: paav4tV0CRn5WXC7r7JTDRSFzFZ20ooewfOdxCHlApI=)
2: GYQyoqa1Lcx9RJ4IYkOHPaDzsYs.roa (hash: 5OkYxXGX0IRpYv6mAWx2ijlmqd3siYfdidMZt5Qq9jo=)
3: PFBBA4lrKhNwCem9RKvfOnYfCDc.roa (hash: /EjlV3R/5VRkrIm2TPm8gVB2qkL97VXtQAiUN3hx+BU=)
4: i0nThbwdezW0AO7pmekkEJjld0U.roa (hash: A1bHJVolhok5D0oj17VJpul41EQExCRaiyi6t8ZnkFw=)
5: kZSXPr30NxG2Ec5X6u_UtIxYO9I.roa (hash: VIVKmXaG6PiMqZqJVIAC7mrs8dFjgOuKWeFhL3VLTU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:2c:b7:64:08:83:9f:18:9d:5f:d9:b2:dc:8a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
Validity
Not Before: Apr 21 02:00:19 2025 GMT
Not After : Apr 22 02:00:19 2025 GMT
Subject: CN=050a64844ffdc6ffbe1e24c17944adecb5d79a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:30:16:47:97:1d:d7:1d:50:15:d3:58:c3:87:
27:bf:dc:33:b2:4c:c4:fc:e4:63:ce:f0:37:0b:86:
64:cb:d2:6d:ad:51:76:95:00:44:13:d1:f1:50:3f:
d5:f7:ad:5c:82:c3:22:1a:2a:26:a2:23:da:6e:94:
8e:28:f2:69:cf:8e:d4:81:79:d2:e4:f8:ee:59:07:
06:83:e3:b7:9f:5a:b8:69:ef:f4:61:97:80:b8:21:
4a:a5:75:cf:51:ec:52:4d:04:a1:83:87:dc:16:bb:
3f:9e:bd:e5:1e:0c:96:97:1e:a9:96:d8:57:ce:dd:
d8:73:03:7e:e7:8d:55:9c:ee:1b:64:93:f2:f5:95:
38:83:5b:31:84:aa:8d:c7:91:5d:07:4b:93:ce:9c:
4b:bb:c2:e8:2d:48:c0:e2:db:6a:77:98:c6:1e:69:
01:4b:73:c0:05:b5:14:57:ea:10:a3:4a:91:29:77:
1b:f3:5b:95:14:1e:e0:0b:de:57:aa:34:10:61:1e:
2f:a1:0e:11:04:a1:22:69:05:e1:30:d8:c3:f1:02:
2d:28:00:4e:41:56:3d:d8:60:7f:18:0b:4b:a9:e4:
5a:8a:92:25:b0:58:8f:c8:e4:5a:63:97:29:8c:84:
90:36:66:c8:a3:de:36:9e:d4:8e:2c:76:ef:06:5a:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0A:64:84:4F:FD:C6:FF:BE:1E:24:C1:79:44:AD:EC:B5:D7:9A:04
X509v3 Authority Key Identifier:
keyid:E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:73:fd:97:c2:2a:a7:a0:f3:4e:a3:78:df:26:7b:dd:63:f9:
39:e4:78:b9:67:f8:3b:d8:e6:15:ed:87:01:14:be:db:af:d2:
99:b2:97:65:dc:2b:7b:c8:2e:41:59:31:1b:04:c7:e0:49:6f:
33:1b:43:7c:f6:7c:e8:2e:4a:c3:5d:9f:b8:35:c0:f4:7f:0f:
64:8e:d4:05:39:cf:29:c3:ab:3d:28:b9:55:dd:00:5e:81:23:
82:18:47:23:04:e9:25:8e:73:1a:71:08:20:4b:ae:57:45:da:
db:f8:bf:ee:e9:4c:bf:d4:66:7d:39:cd:0e:bd:26:60:03:c7:
06:6f:11:f5:81:d4:42:b9:c5:f7:2d:80:0f:e6:94:92:a5:ca:
54:e1:e3:20:36:6b:5d:e1:3b:ac:9a:f8:7b:0f:70:e3:1f:18:
2a:b9:93:6e:13:fd:7f:6a:46:94:81:d8:9d:01:66:76:14:f1:
e7:b5:cd:37:4e:8c:c4:02:97:6b:e3:6b:5c:f5:bd:b2:87:52:
10:49:0f:5d:86:03:3c:57:32:e2:fc:64:5a:ca:21:45:3c:32:
3c:a3:9d:85:97:78:3c:70:6c:98:b6:ff:4d:8a:2f:25:d3:4e:
99:52:a3:bd:a4:7a:7c:2c:1f:9f:fd:f1:55:61:c7:56:ac:2b:
29:7b:b0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:27:30 2025 by rpki-client