Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File: 5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier: 9CbUD+q+lmSOlWr551XubTdr4NylBD8dV4p/nhq8SrE=
Subject key identifier: 4C:F9:11:6B:52:6F:83:51:C2:AF:C3:24:86:41:4A:54:8D:CC:BF:39
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer: /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial: 019655A5C8B50EB4D555BC6284626A61B31C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number: 0B8B
Signing time: Mon 21 Apr 2025 00:00:50 +0000
Manifest this update: Mon 21 Apr 2025 00:00:50 +0000
Manifest next update: Tue 22 Apr 2025 00:00:50 +0000
Files and hashes: 1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: 5KoJoMbMwmJvkXOpFuiCcaNDnF/2mKU/Wzzczf2KfR0=)
2: PPydfwM1qrJ_5LEP2Lu7pEc74lg.roa (hash: pMnth1QdrHrp1n0i0bRqhdBwVaon4su5sBWJ9WYdSts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:c8:b5:0e:b4:d5:55:bc:62:84:62:6a:61:b3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
Validity
Not Before: Apr 21 00:00:50 2025 GMT
Not After : Apr 22 00:00:50 2025 GMT
Subject: CN=4cf9116b526f8351c2afc32486414a548dccbf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:42:45:db:55:97:39:7e:d8:21:8e:dd:b1:
77:48:21:35:99:3f:18:3a:fc:98:4c:74:06:58:0c:
50:d2:b4:a8:16:90:b1:3b:52:ae:b1:66:08:94:00:
e4:a2:99:f2:d0:c5:a8:61:4b:2a:4b:7c:8a:71:b2:
ba:87:d5:e6:46:86:fd:56:16:47:6d:2b:9a:93:31:
a1:78:78:de:77:44:1e:20:d4:df:ec:bd:be:90:a6:
b1:49:e4:2c:03:57:31:5d:ed:c3:78:22:d4:37:93:
8f:de:f2:1c:0c:fb:2e:34:fc:19:d4:3a:24:95:03:
60:96:80:58:06:c1:3f:8e:f0:19:c0:0a:fb:c2:7d:
49:7f:9c:02:ce:48:49:5b:3d:45:bd:10:29:92:a6:
b5:29:7e:90:85:c0:d2:ee:2d:be:8e:4d:05:fb:d6:
1d:d7:32:63:d2:a8:09:71:c9:f3:7c:21:ef:f6:83:
f7:62:d1:6c:11:67:a8:d6:dc:60:6c:a0:bc:1e:c4:
4c:03:46:13:71:0d:ec:24:c5:b0:32:91:c0:66:f1:
c1:51:fb:3f:7f:c5:de:76:7b:28:f5:a2:d0:45:d0:
f7:2c:a1:89:36:9e:a3:92:03:9d:b0:5a:3c:3d:81:
7d:9f:c6:68:ab:ec:6d:19:5b:33:7a:fa:1d:6a:9f:
98:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F9:11:6B:52:6F:83:51:C2:AF:C3:24:86:41:4A:54:8D:CC:BF:39
X509v3 Authority Key Identifier:
keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8d:3e:5b:53:e0:f8:89:dc:ce:8e:0f:ad:a9:c6:05:19:c2:
13:1a:cf:90:f1:f8:a7:47:eb:61:55:ff:c2:c2:e5:29:7f:d7:
8e:c0:87:5c:fb:f5:e3:17:85:71:bd:f1:4a:3a:30:f4:43:38:
af:4c:9d:05:2a:5d:91:b5:ed:b3:4d:9f:bc:94:6a:3c:48:1a:
08:85:07:5e:81:ee:4b:1a:ff:b9:58:99:56:62:c7:70:74:23:
04:d1:ee:d0:d2:6c:50:52:c7:2e:c7:9a:3a:66:e0:e5:98:83:
af:a4:bf:09:f7:4b:b6:04:33:30:5e:59:a9:14:df:bd:ca:d7:
a0:9c:bc:f1:a7:37:51:5d:df:52:fa:07:0b:fa:f5:d8:fd:e4:
b1:58:59:68:65:75:6c:29:90:a3:37:6a:51:26:a3:da:92:b5:
2e:9e:c9:96:42:ab:86:1a:28:66:2f:dd:91:67:03:eb:47:97:
2c:cc:ee:1f:69:6d:3f:6b:c4:5f:43:00:e6:04:d4:49:6a:25:
3a:e9:99:cf:1f:a0:79:1b:19:4e:57:36:38:1e:8d:53:b2:91:
b5:f5:71:0b:05:2c:c7:8e:2b:46:ce:39:58:b9:99:6d:7c:ad:
83:bc:7f:b2:82:77:99:51:cf:2d:92:e6:eb:71:00:39:f2:0c:
79:a4:87:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:04 2025 by rpki-client