Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
File: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft (raw, json)
Hash identifier: toVTGAFpVpI36RI2rbHkhT8wmtN0GfNVRp6oSt/FKH4=
Subject key identifier: D8:43:A1:3E:0E:26:43:A7:2C:07:29:DF:5A:CB:B4:3A:93:AD:0C:E9
Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Certificate issuer: /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Certificate serial: 019652A4A6C171EB533F71268FA1ED485F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 10:00:44 +0000
Manifest this update: Sun 20 Apr 2025 10:00:44 +0000
Manifest next update: Mon 21 Apr 2025 10:00:44 +0000
Files and hashes: 1: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl (hash: qzLu2x11pdlv5CvUumIDgbxahgkrKhRe/lIqEYS6rno=)
2: H9LigG1-eoyksArBLiDVRw0BhjU.roa (hash: oha3QLmkXpQFYs1KCF6A8sqvDCo/E/9M5bF7ey6N14M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:a6:c1:71:eb:53:3f:71:26:8f:a1:ed:48:5f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Validity
Not Before: Apr 20 10:00:44 2025 GMT
Not After : Apr 21 10:00:44 2025 GMT
Subject: CN=d843a13e0e2643a72c0729df5acbb43a93ad0ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:12:cc:25:53:a1:de:33:79:eb:be:4c:9b:e7:
29:68:da:92:2c:07:c0:d2:ae:ca:77:2a:a8:6b:7e:
2e:c7:51:bc:18:ef:c1:be:86:1d:0f:7c:d1:bf:0d:
33:d8:db:e6:ae:ac:fb:a0:c4:c1:5d:df:e1:19:ad:
6d:44:1a:06:5d:a6:a5:08:02:18:da:2f:50:04:4a:
ae:3b:ce:7a:47:99:e2:32:08:34:48:49:43:7c:ac:
fd:88:cd:94:1a:61:6d:43:1f:ed:fe:80:f3:9e:60:
88:2f:bb:59:65:e8:f7:71:73:e4:8e:e3:64:12:63:
46:c5:9a:6f:5a:38:2a:8d:2c:c3:11:03:0f:ac:32:
b9:62:f4:8d:92:e2:e7:18:08:b3:07:90:21:e9:3a:
ee:87:9c:c0:74:df:c0:a1:1e:bb:a3:d9:05:b5:f4:
b5:c6:1c:79:73:02:d8:f2:81:fa:2a:bb:ca:ca:18:
27:d7:52:5d:55:5c:a0:29:11:46:ca:23:0b:92:03:
7b:bc:3f:83:8c:99:1c:7b:37:26:73:d3:47:63:a2:
ad:34:ae:f2:08:15:97:57:8c:92:42:ae:35:be:ed:
dc:98:8f:9a:13:b5:ce:76:cd:4f:dc:86:3d:22:80:
d3:92:2b:85:b0:7b:43:00:01:ce:e5:ac:20:57:04:
42:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:43:A1:3E:0E:26:43:A7:2C:07:29:DF:5A:CB:B4:3A:93:AD:0C:E9
X509v3 Authority Key Identifier:
keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5e:25:32:8a:df:8e:88:7f:83:f0:17:b7:38:5b:7a:d3:86:
b8:17:b9:06:dc:5f:54:fb:31:42:83:04:7f:d5:21:75:af:04:
5b:50:d1:8b:2a:56:bc:99:0f:41:d7:82:c6:a8:be:a1:be:30:
32:85:21:2b:99:36:fc:89:69:57:e8:08:bb:6c:ed:95:c1:f2:
65:d3:83:5b:34:a8:e6:43:fd:7e:30:a0:09:d4:12:1f:a4:b9:
8e:d1:c9:a1:52:1c:e0:13:aa:1a:86:1c:0b:09:63:9d:91:51:
96:d5:d0:f6:9c:15:b4:22:57:f1:a3:a9:56:91:49:63:47:43:
39:7c:10:98:3d:aa:17:9f:90:d4:22:70:b8:30:67:ab:0c:ab:
b2:7b:b2:e4:59:9b:04:32:9d:ad:d7:2f:a5:3f:99:0d:ac:88:
5e:dd:de:19:a2:7a:7a:03:56:1a:92:db:4f:9f:f8:30:2f:99:
cc:4d:dd:09:28:3d:7c:05:41:ea:86:ec:b5:08:5d:37:db:5e:
71:f2:b5:df:3d:9d:c3:15:38:f0:ba:78:32:4a:20:e1:f4:a6:
d6:e8:ec:9d:cc:98:08:c8:d6:a0:69:c9:6e:24:b2:4c:85:bd:
5c:2b:b7:cb:7f:04:be:41:c5:34:2c:0f:40:26:68:3b:52:ab:
84:b9:3f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:21 2025 by rpki-client