Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
File: 5GWsyQgJ77RczaJQoQV2GElLhus.mft (raw, json)
Hash identifier: j9Ic4fGLk2aJgHaefCl2TOMlGcYcLUqnaKVOCrsw5m4=
Subject key identifier: 0A:C5:F0:E3:66:FC:E2:F4:2C:BF:86:24:6B:A8:CA:49:AD:A2:DC:51
Authority key identifier: E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
Certificate issuer: /CN=e465acc90809efb45ccda250a1057618494b86eb
Certificate serial: 019613213436FD9DBE0A9FA50879E361D5B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
Manifest number: 14DC
Signing time: Tue 08 Apr 2025 02:01:05 +0000
Manifest this update: Tue 08 Apr 2025 02:01:05 +0000
Manifest next update: Wed 09 Apr 2025 02:01:05 +0000
Files and hashes: 1: 5GWsyQgJ77RczaJQoQV2GElLhus.crl (hash: XngKKXVVeohcqWzn8lNKm8U36hCAQLtUNH01FbrPIgg=)
2: HXkMZsrBmT3pdly4pNHClnxxiAs.roa (hash: uINrlSFHfmPOAUFp+GFnrxpC6bCJm76Z7RhHxB80xWI=)
3: g56Uh-QZpNYvH0QrLNbigssPnrQ.roa (hash: wrpYwLhb1No98RIDJLncVQMkGDqMDtvmrpGIa2b7nWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:21:34:36:fd:9d:be:0a:9f:a5:08:79:e3:61:d5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e465acc90809efb45ccda250a1057618494b86eb
Validity
Not Before: Apr 8 02:01:05 2025 GMT
Not After : Apr 9 02:01:05 2025 GMT
Subject: CN=0ac5f0e366fce2f42cbf86246ba8ca49ada2dc51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:8c:cd:4a:08:10:d0:3f:88:3b:78:16:cf:
51:5a:9a:4f:c9:c8:f8:7b:07:48:ba:30:e1:f9:28:
b6:05:16:cf:85:0f:91:fb:65:2a:1f:57:6a:dc:09:
7c:24:4f:c2:2c:e9:68:56:36:74:cd:48:c1:e4:4c:
68:d6:62:d3:e5:39:15:18:bb:41:fa:02:50:40:66:
28:9b:7f:7d:05:5b:47:15:0a:d2:80:b5:85:75:cc:
17:c5:92:e6:f6:99:da:45:3b:86:e7:9e:ee:28:51:
ee:db:5e:a9:80:d3:03:72:c4:ae:e2:4b:7c:6a:98:
b9:40:95:75:de:24:32:31:d6:6f:10:28:b0:14:f2:
46:0b:ca:19:94:4d:e5:57:d0:27:02:d9:31:84:c4:
2b:66:3f:0b:43:1f:bb:2e:3e:b3:f5:b3:3a:3e:ec:
f8:e1:b3:22:58:55:90:b0:71:62:1d:62:34:00:63:
e9:a7:ec:9b:36:37:5c:7d:aa:39:e8:e8:9d:d5:75:
4d:8c:66:f5:4b:c4:a4:dd:39:4f:21:fc:af:f7:0f:
8f:0b:48:0f:66:13:39:da:e7:01:9f:33:b6:45:69:
45:86:79:3b:cd:be:c8:ad:b8:65:74:d4:72:60:a6:
64:53:0c:8c:fc:ef:6d:4d:e9:71:b7:25:04:0a:23:
f1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C5:F0:E3:66:FC:E2:F4:2C:BF:86:24:6B:A8:CA:49:AD:A2:DC:51
X509v3 Authority Key Identifier:
keyid:E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:cc:47:2a:28:37:47:7b:86:b0:81:dd:58:11:66:d2:74:ba:
5d:cb:17:fa:e2:ff:81:94:5d:7e:1b:b4:e5:12:33:f3:cd:01:
b8:ed:e0:49:01:c2:7e:c1:61:7e:de:09:c3:3d:e1:84:40:a7:
fc:ed:44:96:2e:39:fd:38:94:b2:28:95:1b:b1:91:f2:ad:93:
fb:ca:89:9b:29:ca:1e:7e:00:9a:57:ca:71:70:ec:14:da:3b:
a8:18:9d:b2:69:f4:c7:cf:68:a7:22:ef:11:5e:20:6e:a7:14:
e9:cd:11:a3:fb:44:45:0e:32:2a:38:27:95:4d:aa:fa:36:45:
af:4f:00:03:39:68:bb:72:2c:30:c6:b0:05:d1:2d:0c:36:c7:
a6:d1:23:ef:dd:97:30:e6:1b:1e:36:22:eb:cb:06:9a:57:cc:
f2:a7:ee:41:90:d0:b2:8a:b0:01:d9:d6:af:b3:45:fe:d0:c7:
aa:72:c6:ba:5e:c7:ce:78:fb:4c:a9:21:a2:0a:61:23:ed:b3:
7e:eb:c0:4c:68:67:ff:ac:ff:a1:25:13:ef:45:fb:ca:57:7f:
1e:67:98:e1:76:23:35:b4:ff:cd:48:53:2e:9b:33:21:3d:8e:
d3:1e:22:da:17:13:1a:34:2c:51:8a:96:88:8b:ef:85:bc:a4:
19:aa:b6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:58:43 2025 by rpki-client