Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
File: 5YBcX-NFAofc3mreDZyVWLphXjI.mft (raw, json)
Hash identifier: MsSExiGYGi8HD1iakKiaOwU3hxI9f1kxL5o5JDjbYH4=
Subject key identifier: 17:A2:5E:13:2E:3E:09:29:02:56:62:55:6F:DA:CE:D1:24:74:12:78
Authority key identifier: E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
Certificate issuer: /CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Certificate serial: 0196138FB9479CEA502F0652688CCC6FC2B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
Manifest number: 101C
Signing time: Tue 08 Apr 2025 04:01:48 +0000
Manifest this update: Tue 08 Apr 2025 04:01:48 +0000
Manifest next update: Wed 09 Apr 2025 04:01:48 +0000
Files and hashes: 1: 4smvePH69FAYNSdSIOq-IbOCEOY.roa (hash: YP4Y8XIxmd6gqrm+p+MzPpn8EJXfmEHsFE9JRUt3QgM=)
2: 5YBcX-NFAofc3mreDZyVWLphXjI.crl (hash: VaY1zzvW6XPk8g7Mc1T9a1hx8cOw/MlzpAeAeGEhFlQ=)
3: bslnxciGSGjp5x3mv5ejIjp-fOk.roa (hash: aguWPYFuH/8n3kD28WuYVtoo2iM5Q/UCEREfJbZ73y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:8f:b9:47:9c:ea:50:2f:06:52:68:8c:cc:6f:c2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Validity
Not Before: Apr 8 04:01:48 2025 GMT
Not After : Apr 9 04:01:48 2025 GMT
Subject: CN=17a25e132e3e0929025662556fdaced124741278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:de:25:e4:0a:68:7d:dd:3f:54:95:d2:df:f1:
4d:8f:d6:d4:f2:8b:e3:e4:13:c5:b8:cd:39:68:77:
73:43:4b:3a:95:9c:6d:8d:47:5c:93:fd:bb:97:96:
90:7b:01:f3:16:17:ab:e1:c5:3b:78:32:90:aa:63:
a5:a8:b0:55:ba:16:58:c7:56:dc:cc:ef:6c:08:85:
78:1a:b8:16:0a:b4:1e:58:72:7e:0f:c3:87:cf:04:
3a:3b:f4:db:a2:da:2a:73:0d:fb:e6:e8:47:99:03:
47:89:4e:ee:07:92:67:95:5f:71:8b:4d:13:3a:75:
cd:46:32:cd:d0:a2:65:3d:04:e4:59:1d:02:79:e1:
6b:0e:09:bb:5a:93:76:17:93:e4:3b:d4:36:f6:39:
b9:6b:9d:79:38:00:54:73:9d:0c:48:50:44:e5:89:
97:f5:49:f8:4d:3d:01:a2:76:5c:af:ef:42:68:dc:
a0:f7:bc:f7:0e:8a:04:13:e3:52:9d:52:1c:5a:0d:
fa:8e:13:39:ed:b7:99:a2:3c:36:6d:1d:d4:61:fe:
bc:41:4a:3b:8c:b3:28:f1:18:b0:70:97:af:7a:38:
11:db:6b:1f:06:4e:d6:7a:b7:70:d0:56:e7:d8:b2:
43:fb:5e:5a:b1:46:8c:41:44:f6:ef:b0:ee:47:6e:
0c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A2:5E:13:2E:3E:09:29:02:56:62:55:6F:DA:CE:D1:24:74:12:78
X509v3 Authority Key Identifier:
keyid:E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:82:1c:55:4e:17:6d:8c:a3:06:f3:06:8a:37:ba:3b:36:31:
51:cf:2a:19:6e:ff:79:90:4b:67:f9:33:e3:30:00:29:8a:bb:
97:65:73:cd:23:a7:64:b3:ee:ee:dd:5b:74:99:b7:f6:09:62:
ed:7f:a6:5b:6b:fa:9e:98:c2:3a:86:50:25:cd:94:a5:4d:65:
f4:fb:45:69:71:02:92:89:44:16:71:0c:32:0c:3c:9b:97:9c:
3e:c5:86:fa:8c:1b:2f:84:46:d3:8e:fe:dc:92:5f:e2:4b:95:
ec:9b:84:16:54:d3:b8:2d:e8:5e:96:65:07:2a:9a:71:f0:67:
10:4f:6c:c8:c1:f6:8b:a6:2d:85:ea:9f:eb:b7:fa:56:42:d0:
f8:38:a2:dd:2b:69:6c:bc:d4:fa:16:0d:0f:76:71:b4:2f:9b:
12:0b:26:f3:6c:de:a8:a9:c0:35:3f:09:e1:e6:14:2f:c2:9b:
24:1f:f3:95:13:7b:74:19:c2:41:d1:32:f4:5c:7d:8e:11:a4:
d0:cf:5d:7a:03:3d:83:9b:2f:61:f9:37:06:eb:f4:b5:19:5b:
b6:07:17:57:3f:5a:6d:df:a7:39:98:40:a3:09:e7:d7:ec:ce:
a6:e6:40:f5:08:ff:6b:a2:3e:6e:ca:2b:4a:56:8f:ec:4e:7e:
3e:92:08:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:02:01 2025 by rpki-client