Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
File: 5SrPy9efIyxdcqVQvExm8REHoOI.mft (raw, json)
Hash identifier: 68S2m6tkmt32WVnW9TlSBsHzNrp5W9NRl6vOsJI85zY=
Subject key identifier: D4:67:26:57:99:3B:DB:20:EC:C2:63:D6:13:49:5E:6A:53:FE:0B:96
Authority key identifier: E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
Certificate issuer: /CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Certificate serial: 019652A492E271F787D663FC5651693D89AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
Manifest number: 021A
Signing time: Sun 20 Apr 2025 10:00:39 +0000
Manifest this update: Sun 20 Apr 2025 10:00:39 +0000
Manifest next update: Mon 21 Apr 2025 10:00:39 +0000
Files and hashes: 1: 5SrPy9efIyxdcqVQvExm8REHoOI.crl (hash: fGTVg1x9Gs6uWY9DWWU1RcifoXDRua0D77LpOOX35cc=)
2: GtnbuughA7lHebTG_DZyY-rxvp0.roa (hash: 0ytXaby9nsfJsM0kCLclgYx+EoqtC/Er8+W1ubhewEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:92:e2:71:f7:87:d6:63:fc:56:51:69:3d:89:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Validity
Not Before: Apr 20 10:00:39 2025 GMT
Not After : Apr 21 10:00:39 2025 GMT
Subject: CN=d4672657993bdb20ecc263d613495e6a53fe0b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:9b:23:8d:d7:41:b0:5a:d6:75:79:06:15:
7b:00:46:12:d2:41:95:54:71:c8:76:1c:9d:ef:84:
cf:e7:66:48:06:df:fe:88:42:f9:48:10:d3:73:7c:
58:0a:35:a9:32:9d:83:4c:0b:d8:c1:07:5c:81:5d:
9f:80:03:23:ec:0c:bc:1b:0e:7a:b1:4f:21:e1:02:
f5:75:18:0a:19:e4:6d:7b:7b:27:0d:56:f3:33:c2:
6e:a2:06:68:80:5a:db:11:76:03:69:2b:e0:43:da:
ab:68:8c:a7:ba:94:01:2f:78:b2:ce:55:6e:c3:2e:
72:df:af:08:7a:59:76:1f:69:86:07:22:4e:c9:2a:
d4:0e:fb:3d:c6:09:e9:37:5a:bc:76:1b:90:78:41:
ab:73:bf:df:4f:d6:1a:a8:15:d7:e8:e5:b7:0f:7c:
69:2b:99:c9:c5:77:92:20:07:23:09:b7:f1:01:a5:
c8:e5:5c:25:77:c5:35:50:32:07:41:2c:35:af:3b:
9f:9d:2f:53:66:7e:12:88:19:ea:29:bb:67:b3:34:
8c:bc:be:5d:88:95:5a:66:d8:32:a6:d3:45:34:b9:
81:56:ee:40:6c:a1:89:5b:3d:9e:95:2f:43:6d:ff:
5e:7a:f7:32:09:df:7f:7f:a0:e3:b5:55:7f:11:6a:
b6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:67:26:57:99:3B:DB:20:EC:C2:63:D6:13:49:5E:6A:53:FE:0B:96
X509v3 Authority Key Identifier:
keyid:E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d8:21:de:4f:3e:d2:e3:f7:f0:6e:4c:07:1d:72:5e:b9:c2:
29:9f:6f:0b:20:58:bc:48:b3:a6:36:52:ad:52:36:59:cb:ad:
66:03:75:d2:f5:34:b3:e4:86:ae:f3:42:b6:12:92:c7:d3:62:
61:e3:b8:3c:78:dc:89:57:4b:35:b1:a5:6e:6f:57:f3:d7:61:
c2:01:71:b8:91:e2:87:d7:ed:c3:f3:65:c4:a1:46:3c:bd:f9:
8d:8b:80:0a:cc:9d:73:0d:45:3f:94:12:95:58:70:1b:09:b7:
ea:d7:9c:ec:6e:1b:74:e2:13:9b:6c:8f:6b:9d:fb:11:5e:31:
20:b0:ee:87:b3:5d:53:10:34:ae:a9:75:85:18:96:22:99:64:
24:df:2e:72:c8:81:d0:27:b1:c9:8e:45:ac:6e:0c:77:5b:8b:
db:68:cf:3f:61:d5:1e:87:b1:1b:a4:96:92:05:49:7d:55:53:
9c:e3:a5:f8:e6:78:16:95:73:86:0a:b4:3e:1e:0f:4b:d5:02:
ac:fa:93:0b:de:b5:b8:10:65:d9:e2:9e:a2:18:73:ad:d0:99:
29:6f:6b:3e:30:98:7a:48:9e:bf:de:03:40:7a:14:4e:08:83:
92:40:3d:f5:fa:e1:8c:42:97:ae:b9:2d:d2:09:bf:d0:bd:84:
e4:9a:db:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:21:10 2025 by rpki-client