Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
File: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft (raw, json)
Hash identifier: IZCNbnWsEJ3FYEXDiWtW7jKXKX8mMoM8zkfCs5OybBE=
Subject key identifier: 8F:4A:BC:F2:84:02:16:AF:79:A0:26:2F:9E:D3:42:C2:A5:6A:4A:09
Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Certificate issuer: /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Certificate serial: 01958BBB67129A6BF3897DAC4E23858BB162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
Manifest number: 1496
Signing time: Wed 12 Mar 2025 19:01:09 +0000
Manifest this update: Wed 12 Mar 2025 19:01:09 +0000
Manifest next update: Thu 13 Mar 2025 19:01:09 +0000
Files and hashes: 1: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl (hash: 5S5R1Z7gRt/J41++Vf82lf4NZeXmaVLapDhfn5G6E4A=)
2: H9LigG1-eoyksArBLiDVRw0BhjU.roa (hash: oha3QLmkXpQFYs1KCF6A8sqvDCo/E/9M5bF7ey6N14M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:67:12:9a:6b:f3:89:7d:ac:4e:23:85:8b:b1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Validity
Not Before: Mar 12 19:01:09 2025 GMT
Not After : Mar 13 19:01:09 2025 GMT
Subject: CN=8f4abcf2840216af79a0262f9ed342c2a56a4a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9c:06:47:93:81:e1:0e:75:95:49:ac:b6:30:
e4:c8:3d:c3:ee:5e:b9:e4:b3:64:37:68:d6:ea:21:
2b:22:7a:f6:d2:14:02:50:c1:96:97:e0:b1:e0:b9:
9b:a3:e5:96:79:f6:63:89:86:c8:b5:6d:0c:5d:7f:
9e:6a:56:75:17:5b:ad:c3:45:83:56:28:25:88:71:
d8:b9:d1:5e:bd:7b:19:0f:3a:83:26:a6:d1:d4:80:
9f:39:b3:c4:b2:a0:37:bd:86:9a:61:28:68:20:ca:
19:03:fe:21:bb:75:dd:a2:00:42:73:76:bf:b8:45:
4b:14:3c:63:f9:43:25:7b:ed:c5:f8:3a:b7:c4:ed:
96:4a:1f:df:a5:1a:cb:0a:0d:e4:0e:db:4d:18:bd:
33:7e:86:0a:bf:52:0f:fb:f5:45:04:6f:83:d5:9d:
32:84:cc:33:62:00:e4:e7:66:f6:dd:b8:b9:74:0b:
1b:df:aa:f6:63:ca:bb:85:61:52:c2:c7:23:80:f5:
f9:79:4f:35:08:75:13:51:63:67:e6:f4:0e:fb:77:
f3:0f:01:7f:6f:b0:ab:02:af:37:ab:f1:e6:ab:c3:
71:42:e4:83:68:55:95:59:f9:71:2f:84:aa:2d:03:
8b:b3:cc:cb:b3:28:30:5b:14:22:81:6f:3f:9e:c1:
2a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4A:BC:F2:84:02:16:AF:79:A0:26:2F:9E:D3:42:C2:A5:6A:4A:09
X509v3 Authority Key Identifier:
keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7f:0f:b7:0a:fc:93:47:26:b2:d8:4c:7c:91:c0:77:0e:da:
24:aa:ea:15:30:95:38:9b:6a:5c:e2:0d:d0:b9:6d:e1:06:ce:
92:7d:97:fd:48:30:e1:0b:1a:9a:e1:c1:aa:43:a2:70:35:9f:
74:da:d8:8a:7f:e0:a3:73:33:b3:29:3b:42:3d:c5:c8:f0:c6:
e0:20:89:2c:4d:e6:56:0e:b8:5a:dd:c3:aa:e7:2f:53:b0:15:
72:56:37:40:41:e0:99:12:d4:af:6d:51:48:ab:01:24:82:76:
9b:e5:1c:94:6c:82:d5:ac:a8:d3:5d:ed:86:de:d4:7c:b1:14:
d4:ea:38:7d:86:b9:a4:86:25:91:6d:2d:95:1c:b2:28:10:27:
9b:29:e5:4f:bc:d6:79:3a:fd:9e:fc:d6:4b:bb:71:a2:15:3d:
28:a0:4a:d2:8e:7b:ba:f8:a5:ef:82:1c:d4:16:03:31:0b:cb:
cf:88:77:da:72:5c:34:18:01:a1:02:93:fe:ff:86:d9:f9:d5:
09:88:ac:c9:d5:e8:3e:c1:72:8e:af:50:d5:5a:98:c2:66:d9:
67:7e:50:32:23:44:f8:4a:28:2d:ab:08:24:ab:01:d6:92:31:
88:36:4a:f3:be:56:5c:06:d6:21:f4:60:2e:de:c3:cb:d4:11:
f7:e6:cc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:20:43 2025 by rpki-client