Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
File: 5yHQ6mg8xnWULAmPWcQRyGDorto.mft (raw, json)
Hash identifier: 1JPov2Ji3W95vG2yG0LUn3lPfpzdIjMU8+PzOORO5O0=
Subject key identifier: F9:CF:81:5B:4D:61:17:1A:5C:87:E3:08:58:86:A3:82:8E:5A:D9:2F
Authority key identifier: E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
Certificate issuer: /CN=e721d0ea683cc675942c098f59c411c860e8aeda
Certificate serial: 01965F16B37AD7FDF1F8BC2D3570C59AB197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
Manifest number: E4
Signing time: Tue 22 Apr 2025 20:00:45 +0000
Manifest this update: Tue 22 Apr 2025 20:00:45 +0000
Manifest next update: Wed 23 Apr 2025 20:00:45 +0000
Files and hashes: 1: 5yHQ6mg8xnWULAmPWcQRyGDorto.crl (hash: xGbV5CLAIuh20nSQaCBehQ4Bwnx1ix/PT8HfeSjyUkg=)
2: jgoeY3coRJMRVNj7rT_gdCxKrt4.roa (hash: HO7ymkMaYgqdA88q8uGMkiN43bUDJb9bwGWjnqtMFDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:16:b3:7a:d7:fd:f1:f8:bc:2d:35:70:c5:9a:b1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e721d0ea683cc675942c098f59c411c860e8aeda
Validity
Not Before: Apr 22 20:00:45 2025 GMT
Not After : Apr 23 20:00:45 2025 GMT
Subject: CN=f9cf815b4d61171a5c87e3085886a3828e5ad92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2c:fe:84:17:15:d2:f0:f9:83:4b:2f:09:0b:
fa:5e:c7:87:74:8f:2c:53:b5:66:47:1f:cf:74:bd:
56:9e:dd:5b:49:0b:bc:83:1b:49:7e:a2:3e:42:aa:
4f:e3:47:5d:90:73:02:82:8a:13:30:d3:c9:96:55:
9b:f3:62:e8:99:dc:5e:21:34:da:a0:d3:3a:09:1c:
43:4d:28:b3:48:d0:95:08:56:8a:06:b3:77:3d:52:
8f:89:25:62:92:fd:1d:6e:7b:17:f3:b7:68:4d:bf:
c1:1d:6c:56:b7:19:bc:3e:9d:ef:1c:ce:a4:0f:4e:
ed:5c:a9:0c:73:bd:4f:5d:f8:dd:00:54:d4:7f:26:
59:9f:89:9f:bc:ce:3a:db:f8:0a:3f:13:43:f1:8c:
2a:fb:7f:f0:29:83:fd:34:76:53:68:9d:dc:01:15:
b5:89:34:c2:40:0b:05:6f:a6:ff:ae:14:ec:bc:c9:
55:82:21:77:ee:7b:79:42:1b:54:af:5a:cc:96:27:
3b:6b:f1:00:be:27:a3:71:12:d1:eb:6a:77:7a:3c:
16:97:1d:e2:7b:6e:b2:12:a8:a5:e4:9b:31:5a:01:
83:6f:69:3e:1c:e6:eb:f9:3e:7a:54:0c:80:a9:ff:
e5:b1:ba:dc:ae:33:de:a4:89:aa:02:2f:43:59:dd:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CF:81:5B:4D:61:17:1A:5C:87:E3:08:58:86:A3:82:8E:5A:D9:2F
X509v3 Authority Key Identifier:
keyid:E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c7:3b:22:76:74:42:0d:74:3c:b7:56:8c:0d:d2:e9:89:26:
39:d8:bb:14:aa:45:bd:2e:e3:8f:5e:91:d6:45:f5:0b:02:58:
27:b9:9c:97:ec:68:2f:76:8d:bc:9f:0a:b4:8a:3c:3a:e6:cf:
b5:39:6d:aa:a1:f7:6f:89:ea:5e:a8:d9:01:d5:fe:a9:0c:8f:
b1:d1:df:0f:78:57:a4:f4:f8:1a:dc:0d:b8:98:19:8b:ad:30:
47:b6:d6:ca:0e:8d:aa:38:07:40:dd:de:09:7b:b2:91:4f:8f:
7e:de:2d:af:54:e9:56:20:c8:1d:82:62:16:ec:84:52:36:ed:
8d:ac:46:8b:e8:9e:e2:c3:d3:a2:3c:9b:c3:93:fe:03:50:18:
fe:9f:56:e4:e8:89:cc:f5:0f:7d:4a:1e:6a:b3:19:c0:a9:5c:
c8:27:11:52:c1:7b:3c:44:72:09:66:d1:85:07:1e:de:ac:da:
96:11:1a:46:7f:5a:c7:6e:55:cd:c4:b7:f0:25:04:75:43:c5:
9b:25:02:9e:a8:69:a7:74:10:9a:b5:5b:aa:b9:9b:02:93:ed:
99:a9:fd:e9:e4:c0:1d:74:92:fa:8a:f7:bb:9a:8e:7b:8f:4c:
93:f1:6c:18:fa:c7:60:01:61:13:5f:e0:6c:1a:91:bd:49:45:
1b:73:0a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:04:43 2025 by rpki-client