Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
File: 5jRhbtvWAVT6Pax36pDb18aKEy0.mft (raw, json)
Hash identifier: 3mImr+odxCYHaP8O24nLhOlpyEE3PCTL9q71n+9vlkc=
Subject key identifier: 0F:62:D2:EA:5D:AB:64:A8:4E:81:C6:B0:1B:08:64:6C:C4:F3:3D:9F
Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
Certificate issuer: /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Certificate serial: 01962FE294E44E08AED43BC4BD7C88C3FE4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
Manifest number: 1279
Signing time: Sun 13 Apr 2025 16:01:40 +0000
Manifest this update: Sun 13 Apr 2025 16:01:40 +0000
Manifest next update: Mon 14 Apr 2025 16:01:40 +0000
Files and hashes: 1: 5jRhbtvWAVT6Pax36pDb18aKEy0.crl (hash: h1bOrB9LcJTlYHt68SGYOU691pwPmqUboPguUdjwyPM=)
2: VzSRXIJg549082TDLwuDhpZSHdM.roa (hash: A7LBmXbBqDdzugUEkji9OFm2eXNsHo+v5p497CjSCCA=)
3: gHDsE-M7Bds6BODdronU54n9Gb0.roa (hash: wZSAuVITgB+tf10qxZ+G6OSnVz70iDg6RypnL81jrkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 16:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:e2:94:e4:4e:08:ae:d4:3b:c4:bd:7c:88:c3:fe:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Validity
Not Before: Apr 13 16:01:40 2025 GMT
Not After : Apr 14 16:01:40 2025 GMT
Subject: CN=0f62d2ea5dab64a84e81c6b01b08646cc4f33d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:27:e0:f1:e1:a6:4c:23:b1:7e:05:ec:26:
4f:7f:a0:0c:c1:2c:f9:7a:99:87:e3:34:a7:04:93:
8c:e5:e8:31:ad:71:ce:9a:72:56:3f:77:82:9f:b5:
6f:30:4f:ab:a2:a2:1f:31:d8:d4:47:88:c3:3a:d2:
96:96:a3:bd:f2:db:9a:c7:16:70:60:e9:32:6f:35:
44:ec:8f:bb:e5:13:ab:0b:73:8e:7c:08:65:d8:a2:
f2:24:72:ae:47:f6:15:3c:00:9c:09:54:4b:62:2a:
27:99:b0:4f:b6:9a:0c:c6:b4:10:a1:95:b1:99:0b:
b8:ad:83:81:33:ca:f4:97:fa:66:ae:b2:04:91:75:
ae:2d:ff:fe:14:3f:a9:fe:c1:28:af:35:a7:38:4f:
0b:84:44:0b:e2:db:99:0f:ec:95:50:87:cc:18:54:
60:1a:18:e3:b1:54:52:6b:aa:87:55:25:3f:6d:fc:
5f:94:7b:8b:75:14:0a:ea:a9:81:80:c6:4b:10:92:
87:1d:5c:22:b1:49:cc:89:1b:e9:2c:f9:bd:94:bb:
54:25:c9:13:d0:77:29:89:6b:cc:2b:6a:b4:f0:35:
0f:bf:a4:42:77:87:35:6b:47:e2:9a:bd:74:5f:47:
56:0f:5f:01:e7:b5:9f:1f:71:d4:76:a7:50:61:97:
25:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:62:D2:EA:5D:AB:64:A8:4E:81:C6:B0:1B:08:64:6C:C4:F3:3D:9F
X509v3 Authority Key Identifier:
keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e7:b5:eb:ca:45:61:79:2c:ae:ca:0a:e4:77:73:51:ae:75:
55:d7:bd:dc:e4:41:da:1a:dd:f5:18:f1:f7:15:c4:5c:58:07:
73:62:71:4d:5e:6e:64:ce:9e:8f:ad:3b:f0:93:9a:98:bd:cf:
51:4c:96:ec:54:4c:6e:96:a7:e9:81:c8:40:8e:d0:3f:8d:ab:
01:94:09:06:36:e7:3d:36:af:57:30:fe:de:72:a8:02:cf:a5:
40:13:74:40:93:87:07:48:14:8f:5a:f4:af:c9:89:11:42:43:
97:1e:e3:6c:96:3f:24:dd:87:cf:9d:54:44:a0:35:34:c5:20:
9d:16:79:24:ba:e1:1f:52:91:0f:08:75:37:18:66:c6:f4:48:
96:0b:4b:41:b4:5c:c4:c9:84:97:7d:16:8c:0b:a8:c6:58:bb:
2a:31:86:29:51:03:4e:82:7f:c1:05:8c:bc:11:c7:e8:ea:bc:
14:89:bc:d0:b2:eb:79:81:31:2d:e6:00:89:8c:4c:ae:f1:d9:
c6:ad:81:2a:2e:3f:d4:69:62:8c:5f:b9:01:71:7d:01:9c:d5:
94:01:77:76:58:f8:88:4e:a0:eb:9f:f5:f8:e7:0b:17:32:45:
bc:52:cc:72:28:84:a5:36:70:67:45:6d:f8:72:d7:ce:be:ab:
e2:f2:9b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 20:14:28 2025 by rpki-client