Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
File: 5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json)
Hash identifier: Vr9zwFYbFA5/EUFAagHsEWrwQNl/YQeAq89wQAXAuTg=
Subject key identifier: 07:39:8A:2E:E8:93:0C:1B:24:86:2F:83:66:DF:FC:C1:24:9C:1E:34
Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Certificate serial: 01964FDA2992499FD29B62D90D198C6E1D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
Manifest number: 0632
Signing time: Sat 19 Apr 2025 21:00:19 +0000
Manifest this update: Sat 19 Apr 2025 21:00:19 +0000
Manifest next update: Sun 20 Apr 2025 21:00:19 +0000
Files and hashes: 1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: RdAhLUUTXS1q+z1Yr/L4INpTicfS/9ITx/gYybzEMBw=)
2: KFEMCZhH126h5EdMOEzOYR3jl7A.roa (hash: i0lu4HO1DlJaiLzdVoxYyKbrNJlxsepiYz5nfS8kc00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:29:92:49:9f:d2:9b:62:d9:0d:19:8c:6e:1d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Validity
Not Before: Apr 19 21:00:19 2025 GMT
Not After : Apr 20 21:00:19 2025 GMT
Subject: CN=07398a2ee8930c1b24862f8366dffcc1249c1e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:4a:80:01:bc:e0:ed:74:d1:55:9e:85:45:
1c:7d:49:28:e0:48:6c:43:54:30:8a:3f:b7:79:4d:
86:7a:9a:dd:7a:58:3a:29:2e:1c:04:38:27:8d:67:
ba:25:58:66:4c:13:4f:3d:02:c8:0b:f7:f2:4a:a6:
25:00:31:9f:ea:8a:00:39:e0:c1:33:a0:92:20:1c:
78:5d:91:f0:2d:08:be:dc:a6:cf:b7:1c:8a:c9:a9:
9c:22:3b:2e:a0:c2:1e:21:de:bf:a5:9f:bf:3b:63:
22:a4:34:9b:c8:78:2a:f6:93:00:dd:a6:65:84:2c:
79:fe:66:78:87:32:e3:99:8a:9a:03:08:71:77:85:
7e:67:aa:05:c1:23:a3:82:ea:c8:a1:04:ff:6d:8d:
cd:04:1d:27:44:85:7f:7b:51:69:86:e3:fe:81:69:
75:23:02:dd:8c:8b:e3:0c:4a:47:19:2c:c8:e5:33:
5b:42:ba:a9:29:a3:25:43:91:58:a3:d9:d7:38:91:
58:dc:c9:ad:af:7c:a4:5a:61:27:b5:f6:6a:05:b4:
18:91:54:c8:d9:72:d8:8f:e8:f5:09:73:a8:87:8d:
4c:ec:8e:67:da:9e:94:ce:4a:2b:6b:eb:21:db:1c:
dc:6e:88:9f:e7:25:71:e4:f1:23:7a:eb:6c:d7:97:
f3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:39:8A:2E:E8:93:0C:1B:24:86:2F:83:66:DF:FC:C1:24:9C:1E:34
X509v3 Authority Key Identifier:
keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:81:94:fa:f4:1d:b9:c0:b7:23:54:c5:54:4a:0e:25:1e:6e:
19:f0:a7:79:3a:00:be:00:19:9d:71:9e:db:bf:83:57:9d:e8:
97:b9:ae:d2:81:ce:60:4a:f2:fc:8a:2b:06:d0:94:d5:8e:af:
1b:27:56:4b:08:eb:a5:7c:b0:18:39:11:7c:98:4b:ef:b2:0f:
36:b5:2d:b6:c6:bf:8b:2b:2c:78:87:fd:fd:a2:bc:a4:15:95:
71:fa:b3:0e:64:64:e9:8d:91:62:53:aa:86:9c:a5:97:87:b3:
ea:ab:a0:fb:de:48:44:cf:b0:bb:67:de:99:61:3c:cb:c7:45:
55:6b:f2:c9:e1:db:f8:ba:21:b5:c7:fc:96:64:70:55:3f:34:
27:53:bb:83:48:c7:9b:a2:32:06:72:14:31:e2:d4:db:fd:5e:
22:d9:7c:52:30:bf:56:10:d3:6d:6f:37:cb:f3:f2:b8:33:16:
4b:c3:93:1e:08:4b:44:8b:ef:0d:70:93:11:76:00:61:20:2d:
25:4b:b8:f0:73:1c:84:54:f8:54:03:f2:c0:6c:08:ac:a7:84:
63:a3:70:b1:6b:f8:8b:80:ad:5c:5e:71:db:0d:b3:91:22:a0:
76:69:bb:8b:4e:9d:19:48:aa:21:4c:bc:43:e2:c7:79:1f:b0:
1f:c0:8d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:51:56 2025 by rpki-client