Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
File: r5VJF2-WbToiFBAHkJfIfw4dILE.mft (raw, json)
Hash identifier: +CfqqxmxHPurqv+H83SnMGFWRvPizc6nO77fUnvPWmk=
Subject key identifier: 35:22:AC:25:2E:D8:5A:DB:D8:C6:4C:DC:67:1F:D9:77:1E:C1:BE:A3
Authority key identifier: AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
Certificate issuer: /CN=af9549176f966d3a221410079097c87f0e1d20b1
Certificate serial: 01964FDB11A24A7B7E6E67362A1BC5945CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
Manifest number: 0C5D
Signing time: Sat 19 Apr 2025 21:01:19 +0000
Manifest this update: Sat 19 Apr 2025 21:01:19 +0000
Manifest next update: Sun 20 Apr 2025 21:01:19 +0000
Files and hashes: 1: 1n_N6auYiXQ1pyBQYj7m3QI_dSs.roa (hash: LsHjMOF74kduMAehGu3uEfQUdY1PYN7E293m6Bfa2Jo=)
2: r5VJF2-WbToiFBAHkJfIfw4dILE.crl (hash: sEsGgU5sZIo5hear27CqQo9ZFUbmYuD1pUoZ6SkZ6W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:db:11:a2:4a:7b:7e:6e:67:36:2a:1b:c5:94:5c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9549176f966d3a221410079097c87f0e1d20b1
Validity
Not Before: Apr 19 21:01:19 2025 GMT
Not After : Apr 20 21:01:19 2025 GMT
Subject: CN=3522ac252ed85adbd8c64cdc671fd9771ec1bea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:1e:bc:82:59:ca:02:22:59:f6:39:5a:07:
eb:b1:5b:46:8e:07:33:bc:b4:9b:8b:62:e6:23:1c:
1a:0f:a0:4a:c7:e7:61:a0:08:9e:d2:89:12:db:e3:
71:82:96:68:48:19:b1:63:26:13:c0:33:b3:31:81:
0e:15:0f:50:d1:93:89:a7:41:68:23:db:f6:b8:a1:
5d:7b:8a:b4:79:3f:51:a5:25:1f:1c:1c:ac:b5:db:
86:1a:0a:07:5a:43:18:c3:58:2d:e7:3d:7d:fb:d8:
d8:54:2c:a3:ea:84:f8:7d:23:7b:62:3f:02:64:99:
c2:be:e1:50:4a:42:a0:52:5d:a7:d5:33:de:f5:47:
5c:96:75:13:26:5b:df:bc:2f:7a:8e:c8:ac:05:ef:
0a:8d:be:4b:0f:99:0b:3a:33:97:ad:d0:71:69:fa:
6d:d1:36:f5:71:fe:bc:1a:23:c9:0c:e9:31:8c:55:
9d:72:ff:27:67:88:d5:8b:a3:1d:62:6f:ae:8b:56:
19:35:cc:a8:10:d3:95:3b:be:f0:3f:a7:5d:ae:05:
03:6c:68:30:08:cf:64:ab:2b:86:74:b0:8c:ca:5f:
9c:be:7e:05:ef:dc:f3:41:a9:ec:06:ab:71:9c:20:
b2:9a:7b:67:70:43:07:0b:34:e3:99:a0:90:48:42:
5b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:22:AC:25:2E:D8:5A:DB:D8:C6:4C:DC:67:1F:D9:77:1E:C1:BE:A3
X509v3 Authority Key Identifier:
keyid:AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:00:52:86:1c:b1:1c:b8:c0:03:dd:98:39:04:da:85:c2:ef:
f7:9e:ce:63:fa:20:ae:fc:37:ae:b5:eb:f5:2c:c1:8b:2d:4f:
00:18:6b:66:2d:09:a6:79:51:b8:7c:5a:8c:2d:24:e9:5b:ba:
0f:4a:a2:54:e5:e1:bc:c8:59:7a:20:d9:cf:48:48:ba:06:39:
db:9f:90:a0:b6:73:53:da:78:3a:c8:0c:10:24:b0:d4:bb:6f:
26:36:6d:ce:6c:d5:e9:f2:8e:06:8d:4a:1e:13:b3:8c:03:94:
93:d0:d8:c4:5b:a8:ba:40:c2:ac:55:57:ce:f0:e9:ae:e3:b4:
89:d1:fc:00:5e:8e:86:ae:39:d6:56:a1:a7:2a:5e:d2:45:b1:
a7:cb:ea:07:1c:ef:78:d8:bf:46:d9:8c:7a:98:37:fa:33:63:
6d:b9:c0:76:27:fc:5d:a5:2d:94:58:fa:df:2c:71:98:be:28:
a6:e3:a2:92:2c:47:8f:1b:37:20:06:39:60:46:ac:3c:69:6c:
ae:bc:cd:4b:94:87:f3:c3:f7:97:90:3e:7c:3a:db:59:0d:cd:
35:74:f2:55:03:ed:53:fc:19:52:f5:73:f9:ed:c9:53:9a:50:
30:73:35:b7:98:2a:3f:94:46:7d:23:37:7d:96:ae:ea:a7:60:
97:3d:10:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:19 2025 by rpki-client