Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
File: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft (raw, json)
Hash identifier: wOcgi/iDmbs2NWitviphvU+yB12cq/miF4yCJNizBJg=
Subject key identifier: B0:5C:B5:C0:3B:49:18:3E:26:9D:49:64:71:0D:A6:09:94:FD:EE:F2
Authority key identifier: E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
Certificate issuer: /CN=e67bc12b3685716d8ef6567e21904194377be1e5
Certificate serial: 01964A464ADC175B2325E6022AEE3EE2290C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
Manifest number: 14F6
Signing time: Fri 18 Apr 2025 19:00:42 +0000
Manifest this update: Fri 18 Apr 2025 19:00:42 +0000
Manifest next update: Sat 19 Apr 2025 19:00:42 +0000
Files and hashes: 1: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl (hash: oDyOdPlrdNEqnFxLmZXtE3l1BjzfDuK6gZS7NHbDNmU=)
2: CK8AO5cGK3UQexwKT4OQnvAc618.roa (hash: FFxKHiRId03ta3Wbr3GQyhjQH1qxb15B+KbsuejkB8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:4a:dc:17:5b:23:25:e6:02:2a:ee:3e:e2:29:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67bc12b3685716d8ef6567e21904194377be1e5
Validity
Not Before: Apr 18 19:00:42 2025 GMT
Not After : Apr 19 19:00:42 2025 GMT
Subject: CN=b05cb5c03b49183e269d4964710da60994fdeef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e5:b3:78:4a:82:99:30:79:98:9e:6e:7c:17:
dd:11:8d:e6:59:e7:c9:b4:ae:4e:35:60:57:80:a8:
2e:d1:23:01:c2:d5:18:f3:6d:63:11:bf:6d:c5:0d:
c6:6e:3d:1e:f7:06:d6:29:a9:b1:0d:23:0b:a8:9d:
3a:44:bf:e3:d5:ac:3f:98:cc:aa:4c:6d:74:71:2d:
0c:23:c2:e6:b2:a0:33:ce:22:0a:49:3a:50:a2:89:
64:86:ec:f3:ce:cb:da:88:81:3b:f2:a3:84:93:b0:
9a:5c:22:01:80:d8:22:e6:41:b9:45:51:02:bf:44:
75:5b:74:ee:40:81:be:96:fb:59:40:3e:e2:59:06:
67:dd:1e:5e:60:09:16:a4:3d:3e:cf:b0:db:00:ca:
91:14:68:18:ed:a1:c5:53:9f:62:eb:0f:04:e5:ca:
5c:bd:46:11:6a:e8:94:a8:79:f1:6e:e6:71:71:c0:
c2:4e:ae:5e:a5:ce:f5:9f:ee:7f:51:2f:63:ad:34:
c0:1b:15:28:1c:ea:72:39:7c:b9:f5:80:c5:f3:ef:
22:f0:49:a0:67:b9:ff:09:a3:b3:84:e7:05:4c:b3:
be:ce:0d:fb:cb:47:51:53:80:5b:3c:b4:84:ba:7e:
ea:dc:10:6b:83:4b:36:b4:7c:a8:69:11:1f:fc:fc:
b3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5C:B5:C0:3B:49:18:3E:26:9D:49:64:71:0D:A6:09:94:FD:EE:F2
X509v3 Authority Key Identifier:
keyid:E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:29:13:38:f0:5b:d6:61:5b:bc:de:e6:c7:93:81:9c:03:fb:
9f:19:22:2e:4f:69:83:9c:33:51:0c:77:97:88:48:5b:32:e7:
6a:e8:38:49:32:c6:77:37:07:e3:29:17:f5:6f:6b:25:31:e9:
50:c7:c3:15:21:a7:96:32:aa:b9:b0:21:43:e4:d4:eb:a8:10:
ae:9d:e4:b3:27:c1:11:a9:a8:60:11:94:29:4c:08:d9:fd:75:
f1:81:14:bf:ec:e8:16:4f:03:68:17:79:aa:b7:75:b0:03:2e:
cf:f4:ce:93:2f:05:da:e2:3c:09:31:17:e8:8f:15:24:65:25:
f4:1f:88:7e:51:73:fd:99:b6:64:0b:5f:c0:50:8d:fe:6b:b2:
96:f7:39:92:48:90:85:5e:02:ea:d2:c7:3b:fc:20:11:28:48:
5d:b5:09:85:ee:76:ee:ef:74:2e:1b:3e:fa:da:62:13:e6:da:
7f:47:02:67:6f:c5:3d:27:e5:ff:e0:fa:49:78:a4:f1:71:2b:
fa:ca:4f:c3:26:88:97:40:84:32:3a:8d:c2:a6:29:b6:78:ed:
c1:88:fe:75:77:3f:ff:7e:8a:7c:fc:08:a0:55:00:e9:18:80:
60:e6:cd:73:cd:57:02:45:8a:22:91:83:62:52:57:43:ef:bd:
71:0f:23:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:24 2025 by rpki-client