Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
File: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft (raw, json)
Hash identifier: KGC54TnY6i4lrtwIPKZyeLQ/TAquSXyGE1VXpvpyMps=
Subject key identifier: ED:7B:8C:40:11:0C:35:62:52:16:8A:58:86:E7:E7:E5:DF:1B:8C:99
Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
Certificate issuer: /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Certificate serial: 01964821442005D15CBE9B9A25A7D6C80DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
Manifest number: 08E2
Signing time: Fri 18 Apr 2025 09:01:01 +0000
Manifest this update: Fri 18 Apr 2025 09:01:01 +0000
Manifest next update: Sat 19 Apr 2025 09:01:01 +0000
Files and hashes: 1: 1-T5w7A0YDEccVF6k_ZKcjJV6X_E.roa (hash: RgKdIDTjP20tLyadcQVsHP1hGPjaqBXXdhWGjASLZhE=)
2: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl (hash: 7DFRSlyul/1ju7VIld4ZH+aCAh5RMahmzeIeiRkdW30=)
3: at2rcnIGaNwI-0PGhJnQG-qGexk.roa (hash: We2J54zPsodc/oW+WNDT4x60OgGtuME66k87Oz9kIVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:21:44:20:05:d1:5c:be:9b:9a:25:a7:d6:c8:0d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Validity
Not Before: Apr 18 09:01:01 2025 GMT
Not After : Apr 19 09:01:01 2025 GMT
Subject: CN=ed7b8c40110c356252168a5886e7e7e5df1b8c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:d1:3d:46:50:f1:1c:83:16:9d:97:36:88:
14:10:56:4a:5d:80:fd:bd:3d:a2:d9:fb:f7:21:f9:
ea:15:7c:cf:75:9d:7d:3f:31:59:42:e0:0e:49:e7:
27:28:0c:b8:43:25:54:d7:b9:a6:ab:d6:45:63:92:
e9:c7:b1:7f:b0:80:1c:eb:a7:5b:01:27:57:90:8a:
c2:7d:c7:70:2f:d7:4b:f0:b0:62:fe:dc:f2:09:34:
46:e2:27:04:01:4f:d3:9e:6b:c8:79:ae:36:47:54:
e2:f3:f5:4e:e9:5e:9f:1d:7b:b7:cb:9d:59:a3:72:
8b:1e:36:48:ae:96:81:57:b8:d4:7e:42:76:98:86:
86:f6:bb:e3:db:cf:29:3b:fb:30:ce:5e:ad:94:9e:
b6:82:fc:71:87:99:8e:04:83:12:5c:43:bc:64:e0:
d1:23:ba:2a:08:e8:c3:34:da:ac:f0:7c:fe:71:62:
87:8f:fb:b9:18:d2:fe:05:5d:76:15:cb:5b:78:a6:
a7:be:47:5e:e6:92:e2:e9:50:08:22:fb:fb:24:c3:
2f:35:7e:2a:b7:5b:16:90:65:54:c7:d0:cc:fd:e5:
76:08:43:83:b4:39:59:52:48:fb:7b:d4:5d:bf:b8:
0d:43:08:0b:47:c0:17:c8:6f:30:ba:bb:2d:1a:b3:
91:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7B:8C:40:11:0C:35:62:52:16:8A:58:86:E7:E7:E5:DF:1B:8C:99
X509v3 Authority Key Identifier:
keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f9:9c:18:fb:ba:b6:0f:72:53:47:64:41:83:83:8b:e0:02:
cb:62:38:07:e3:9a:22:40:55:fe:1c:57:2c:84:44:37:4f:93:
a9:e0:f5:5f:57:54:05:24:e7:26:e8:69:9e:40:3c:a0:3a:91:
a8:f9:94:36:2a:5a:fb:59:ff:52:28:62:a9:a5:33:5d:4a:e0:
53:9a:bf:c9:f3:2f:74:cc:08:49:38:50:6e:4f:9f:0b:c6:cd:
2f:8f:94:2e:b6:4d:22:66:57:a7:55:db:25:b2:3a:c1:42:19:
63:b4:b3:28:34:40:1f:8e:44:0a:dd:ba:ef:94:bb:ea:49:2c:
e4:1a:dd:10:b9:4a:f0:60:e6:50:58:7c:e6:78:18:e5:75:85:
a5:a0:cb:39:7b:3c:f1:a0:0a:36:42:aa:d9:58:75:20:12:19:
dd:6d:bd:16:0c:0b:7c:f8:7d:ab:a8:62:2a:cd:bb:47:95:bb:
9e:b7:fc:24:c2:30:c1:07:92:98:59:ba:20:74:81:9f:0a:1c:
46:3d:d2:62:7b:4e:4d:23:a1:52:69:f0:8f:0d:c1:3f:26:c1:
45:f1:f5:55:7e:8c:26:fa:38:cf:ca:69:27:c9:c9:39:61:78:
c8:a0:44:79:9f:b2:37:1c:39:70:75:35:c4:fd:a1:fd:0a:d0:
c9:a2:17:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:58:26 2025 by rpki-client