Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft
File: 5b-MGBsoDj0oKNobJHe5ECNVlVo.mft (raw, json)
Hash identifier: IhzXG9RVpIn5zC44OIh4gAoUbu58z3nA1HuUBi8sqOo=
Subject key identifier: B3:3F:FD:66:E8:7A:12:7B:18:B0:EF:D2:23:1D:04:B7:2D:1E:92:AC
Authority key identifier: E5:BF:8C:18:1B:28:0E:3D:28:28:DA:1B:24:77:B9:10:23:55:95:5A
Certificate issuer: /CN=e5bf8c181b280e3d2828da1b2477b9102355955a
Certificate serial: 01964FA376951BEBF7B4629029E3CF42A247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b-MGBsoDj0oKNobJHe5ECNVlVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft
Manifest number: 13E2
Signing time: Sat 19 Apr 2025 20:00:34 +0000
Manifest this update: Sat 19 Apr 2025 20:00:34 +0000
Manifest next update: Sun 20 Apr 2025 20:00:34 +0000
Files and hashes: 1: 5b-MGBsoDj0oKNobJHe5ECNVlVo.crl (hash: 6lM9sOAnBG55BRTZK4Y+G5GXPNky0NRrl5k1+yNGNEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b-MGBsoDj0oKNobJHe5ECNVlVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:76:95:1b:eb:f7:b4:62:90:29:e3:cf:42:a2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf8c181b280e3d2828da1b2477b9102355955a
Validity
Not Before: Apr 19 20:00:34 2025 GMT
Not After : Apr 20 20:00:34 2025 GMT
Subject: CN=b33ffd66e87a127b18b0efd2231d04b72d1e92ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:80:ed:ad:db:a6:5e:24:b0:59:b7:d1:b5:d0:
5f:1c:db:28:a3:83:8e:0f:27:df:15:ba:31:19:e7:
c6:95:b3:c1:bc:ac:5a:76:03:eb:79:76:86:ac:e6:
6b:a4:57:57:39:a4:fd:fc:b0:0e:f4:bc:6b:42:78:
d3:c6:07:04:cf:b8:79:a4:8d:a3:c6:da:86:02:be:
b9:c4:62:76:38:9d:7a:74:11:80:c7:09:7d:8f:71:
69:2f:8e:56:e9:b5:a1:43:90:10:2f:e0:74:49:fc:
33:86:6e:f3:be:63:7a:9c:46:ae:79:b9:80:dd:0b:
4c:bc:94:ae:5e:70:d6:5d:cf:40:ef:dd:87:10:d0:
1b:37:f9:88:a2:41:4f:23:4a:36:27:7e:9d:73:a9:
ca:d6:1d:3c:8e:20:b0:34:e2:62:e4:6c:e2:45:a4:
7b:bf:c1:03:fb:5b:f4:c9:c5:6e:dc:c0:8d:72:94:
1f:15:2d:cd:bc:92:bf:43:69:2a:24:c5:73:86:b4:
19:20:57:9f:5c:26:8d:56:56:20:a4:3d:4b:4b:81:
ea:fa:cc:5e:26:df:68:96:a0:3a:4d:68:06:f9:87:
df:78:31:be:a9:fd:bd:4e:0c:fb:63:0b:f7:81:2d:
50:56:d1:9a:ee:de:d3:90:fb:5f:82:66:d4:83:f7:
30:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3F:FD:66:E8:7A:12:7B:18:B0:EF:D2:23:1D:04:B7:2D:1E:92:AC
X509v3 Authority Key Identifier:
keyid:E5:BF:8C:18:1B:28:0E:3D:28:28:DA:1B:24:77:B9:10:23:55:95:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b-MGBsoDj0oKNobJHe5ECNVlVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5d:34:f0:21:5e:2d:0a:70:cb:1d:12:ab:77:8a:e3:15:23:
e3:94:99:e1:71:ff:f0:ac:b7:94:65:aa:9a:61:52:df:75:8f:
ae:dd:a3:bc:67:cb:ae:4e:40:55:f7:8b:53:97:b3:55:ff:90:
29:16:b1:1b:a7:19:b7:07:49:28:5c:67:9b:12:2f:f5:39:87:
a1:49:4d:ec:5c:49:4b:c9:bc:ab:cc:c7:e2:a1:50:77:f3:3c:
2b:29:a2:1f:cf:a0:02:a2:20:21:8e:11:ec:b8:91:96:61:77:
f7:33:7a:43:67:6a:d4:a8:91:44:3f:75:02:63:38:e6:8f:66:
68:1f:0b:00:42:57:46:87:37:d0:1a:d6:48:5f:f2:30:0f:a0:
7d:f0:8f:71:ed:44:94:a1:2a:4e:31:76:9e:08:97:c9:a2:e5:
8a:58:2e:a5:e1:13:27:fd:cf:da:56:28:0b:06:55:73:1b:d2:
07:75:6f:3c:2a:3d:69:fb:53:9f:25:a4:7c:86:cd:cf:0b:f1:
25:39:27:2f:28:6f:a2:d5:61:eb:0f:a9:2e:69:df:bb:b2:d2:
a7:af:0f:2e:a7:94:89:04:2f:4f:f8:76:e4:40:cd:7d:79:7c:
57:6d:c7:dc:9b:d8:28:38:c3:b0:9f:0e:16:4d:19:22:bd:a3:
5b:4c:7f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:46 2025 by rpki-client