Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
File: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft (raw, json)
Hash identifier: JZuprLFpUmH/fC5RMqWLbYT4ykgg+7DDCabDHGE/4oc=
Subject key identifier: D3:D4:DD:DC:7D:7D:36:2B:E9:5D:F7:9E:CD:A9:34:7C:7A:EE:35:4C
Authority key identifier: E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
Certificate issuer: /CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Certificate serial: 01964D7F070D9A661495098D311053DF1D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
Manifest number: 072C
Signing time: Sat 19 Apr 2025 10:01:32 +0000
Manifest this update: Sat 19 Apr 2025 10:01:32 +0000
Manifest next update: Sun 20 Apr 2025 10:01:32 +0000
Files and hashes: 1: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl (hash: oHWGnR7Ht2zYowKGxmKNSpdNy9xCgogQhOTKXKx9aRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7f:07:0d:9a:66:14:95:09:8d:31:10:53:df:1d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Validity
Not Before: Apr 19 10:01:32 2025 GMT
Not After : Apr 20 10:01:32 2025 GMT
Subject: CN=d3d4dddc7d7d362be95df79ecda9347c7aee354c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:a0:f4:fd:e0:23:19:c4:9d:69:13:bb:be:
a7:ca:6a:d8:ce:4b:28:74:5a:a3:e7:bb:8f:ba:b1:
49:2c:c5:2a:c9:c9:61:07:64:ec:2b:b3:c8:ea:8a:
c9:f5:95:a4:4c:ae:67:4b:bb:1e:c7:14:04:7d:b5:
2a:9d:48:ad:18:d6:d0:83:b2:5c:f4:1f:04:ec:94:
45:c6:de:4b:ae:3a:d2:c9:26:e9:93:a4:59:a6:d7:
1e:d6:cb:55:f2:0b:34:bf:60:19:93:04:0d:a0:ed:
1b:a2:81:35:f9:69:cf:d4:c4:48:a0:04:58:58:7a:
ed:1f:d9:e4:15:57:2d:97:8f:88:9b:4f:38:70:95:
7f:2d:5c:79:f9:b0:37:1c:05:42:e4:01:6c:3d:ee:
6a:cf:96:89:0f:89:18:7e:9d:bd:f4:8c:c5:5d:2a:
c4:45:29:4b:2d:45:a4:40:ef:c4:ec:61:96:3e:0b:
8d:2c:e0:7b:79:cb:ba:29:0c:a4:97:a7:7c:0a:8c:
b3:dc:17:25:0f:1d:bc:5f:c6:53:e2:2a:f8:5c:6e:
cc:4c:73:04:ce:29:81:f6:2e:2d:46:58:7b:3a:49:
03:19:50:e4:17:00:0c:df:26:7d:30:76:d5:b0:49:
4c:18:b9:07:70:bb:ef:03:4d:c1:26:27:80:01:6d:
85:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D4:DD:DC:7D:7D:36:2B:E9:5D:F7:9E:CD:A9:34:7C:7A:EE:35:4C
X509v3 Authority Key Identifier:
keyid:E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:33:3f:8c:ae:6b:1b:61:9f:6d:81:82:79:37:f2:8f:ef:d7:
62:cb:7e:d4:e7:96:a6:ac:fc:76:4c:8e:50:c7:e6:8f:be:60:
1a:30:97:a7:94:c7:da:b6:5e:b4:d0:8d:2f:7c:4a:c6:ab:1a:
eb:f8:b8:b7:ab:92:c1:dd:c7:1b:5d:83:81:f8:27:53:7c:f5:
60:68:84:64:84:0b:38:4e:7e:19:fc:21:83:18:83:2e:11:e4:
27:ca:86:ed:87:ea:57:16:87:f0:55:bb:da:17:70:58:81:5c:
6f:fd:cf:7b:31:42:f6:24:c1:46:1e:ad:1f:06:05:77:4d:2a:
25:6c:14:61:8b:83:45:3c:50:b8:83:b3:26:f2:c4:a7:9b:d9:
6f:83:66:c5:c9:6d:49:ad:da:ef:02:21:6e:fc:9a:7a:49:64:
16:f5:b7:0e:87:87:38:03:7d:8c:8b:1a:79:60:02:01:f5:0a:
d1:97:d7:4f:19:79:09:b7:b1:99:b6:81:fc:5a:31:a2:7b:68:
c3:34:fb:db:79:5c:e2:cb:c4:2e:5e:81:e4:a8:a9:69:b1:45:
1f:bc:28:a6:c7:11:e5:ab:fe:46:38:26:fd:24:0a:a5:a9:a5:
11:94:d5:54:47:47:65:05:a9:18:90:99:78:e1:80:eb:f8:3c:
ce:45:65:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:11:30 2025 by rpki-client