Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
File: Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft (raw, json)
Hash identifier: Hl78Quj4zOyb6dqyLYTE6Jwj4nIb/EF3a6h2zW9CPeg=
Subject key identifier: 9F:7B:A1:7D:6F:49:82:D9:F6:B6:3B:8A:4F:0A:FE:6E:3C:5B:E3:56
Authority key identifier: 19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
Certificate issuer: /CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Certificate serial: 01965236E87BBD290C52C94887D5870B4999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
Manifest number: 05AB
Signing time: Sun 20 Apr 2025 08:00:52 +0000
Manifest this update: Sun 20 Apr 2025 08:00:52 +0000
Manifest next update: Mon 21 Apr 2025 08:00:52 +0000
Files and hashes: 1: Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl (hash: R1MmvV4Y8Tb9fxt+48y5CYlgO1w7Y+J3sqPNDBspbqw=)
2: UDJ25qWD57Bw7FcU1JLbyObIuuo.roa (hash: DrbNben6Azyc3081NKjsbYp37NNjbptdcPBV8kesvaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:e8:7b:bd:29:0c:52:c9:48:87:d5:87:0b:49:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Validity
Not Before: Apr 20 08:00:52 2025 GMT
Not After : Apr 21 08:00:52 2025 GMT
Subject: CN=9f7ba17d6f4982d9f6b63b8a4f0afe6e3c5be356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:58:d1:32:90:47:2e:b4:cc:2e:60:59:3f:b4:
4f:0a:fd:c3:c1:1f:37:0a:7d:4e:ec:a6:c1:93:46:
ff:fb:da:4e:6c:e0:46:0d:75:c0:3d:ef:5f:7c:ac:
da:59:87:ab:42:d0:2c:da:b8:0e:54:6f:f9:9d:f8:
94:e3:4e:fc:72:4c:39:f6:75:f4:14:c6:9b:4c:6e:
fe:c0:cf:a5:70:e8:aa:ec:cd:c0:a2:42:b0:66:76:
e7:69:5e:29:53:aa:9a:42:19:dc:11:d6:26:92:57:
ce:d4:33:fa:0f:e1:c5:74:a2:e3:74:55:3a:26:7e:
ca:e4:b1:67:cc:89:c9:55:39:14:af:16:b0:02:37:
c0:12:17:e2:57:61:de:4a:33:4f:e8:0a:88:93:13:
b4:7a:4c:6a:c3:aa:82:28:9d:51:0e:20:4c:c8:c9:
92:32:8f:fd:cd:dd:8d:b8:b0:d5:f2:a3:a9:b8:17:
a2:4e:75:a2:c4:a0:ff:2d:50:00:43:c0:50:39:5c:
19:90:92:62:a0:d4:b0:44:25:b3:25:4a:59:81:3f:
19:4e:bb:0b:47:55:6e:8e:96:0a:6c:57:b8:ee:7e:
cf:a8:f0:09:68:e6:2f:f2:5f:7a:82:cf:6a:42:eb:
57:07:4c:ad:2a:96:23:3a:25:55:08:49:4c:33:2c:
90:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7B:A1:7D:6F:49:82:D9:F6:B6:3B:8A:4F:0A:FE:6E:3C:5B:E3:56
X509v3 Authority Key Identifier:
keyid:19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:96:f6:2f:f7:e8:e1:f3:ce:bf:52:be:35:65:91:4b:b4:fb:
11:99:88:f8:53:17:72:e9:d0:81:24:61:b8:e5:b2:ef:08:1e:
1e:f3:36:7a:c1:8c:d7:af:8e:70:47:53:8b:4c:dc:c5:49:e8:
66:45:b0:22:e8:1c:23:c6:e7:86:d4:fe:40:04:f2:7b:37:a9:
0e:cf:d3:99:f4:a1:1d:db:51:ca:82:26:48:70:ba:fb:f1:d1:
63:a2:71:b8:4c:09:65:7b:4f:d1:db:5c:41:aa:d0:63:68:76:
c9:eb:39:af:dc:e6:2f:5a:3a:69:54:89:70:34:86:72:6e:76:
31:34:81:4a:b0:6c:14:4c:b0:67:37:ff:ec:b8:19:25:69:e0:
24:de:a0:17:45:1a:1f:f4:f3:77:a3:7f:2c:dd:a5:80:cb:a9:
4a:7e:93:98:75:b9:0c:7d:f7:96:a9:0d:c0:f0:d0:7a:dc:1c:
96:fc:3b:61:61:4e:6c:21:c6:06:f8:a6:c9:ea:26:80:74:4f:
8b:b1:28:7f:f0:28:cd:be:37:94:6e:13:b6:c2:ba:1f:57:14:
76:85:32:b4:c7:c4:ba:cc:5f:19:56:7c:b8:6b:00:ab:ad:84:
7b:4c:85:3b:77:9b:eb:7e:12:57:82:c5:cd:d8:15:e5:dd:bb:
6b:58:f2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:13:10 2025 by rpki-client