Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: p6jh4Sn9YOJ2Rx469NvABSfNNn261tqZKIh6RQxx3HU=
Subject key identifier: 55:34:50:71:08:79:79:C1:C8:63:CC:C7:C6:D4:EC:64:D3:79:BD:BC
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 0196379B1F24069706025A925274D5794D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 14F2
Signing time: Tue 15 Apr 2025 04:00:35 +0000
Manifest this update: Tue 15 Apr 2025 04:00:35 +0000
Manifest next update: Wed 16 Apr 2025 04:00:35 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: eF6evJJDtm25ytNHXaULZ0QQN+EgN7osIhi2XWEC5lA=)
2: 6UYJYSp_H1qb-Z1ShFc_cXl87FI.roa (hash: 7Wjn3rvrdmK/H1wlwqE+Z2pd0NQT1fwp/AaKLM/IzPg=)
3: jISWNsTxPdEjjPdMy-Whzlvb0Ac.roa (hash: La/cVhkJ14UaJXVbjX6BzXzgOteVwnmYx6tdmiaM0OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:37:9b:1f:24:06:97:06:02:5a:92:52:74:d5:79:4d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Apr 15 04:00:35 2025 GMT
Not After : Apr 16 04:00:35 2025 GMT
Subject: CN=55345071087979c1c863ccc7c6d4ec64d379bdbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5d:68:b1:6c:3b:ba:dc:8e:7c:95:ef:45:d5:
65:d0:98:69:6a:e4:51:96:2f:1c:65:c1:23:00:57:
bc:6f:a1:5f:f8:1f:54:8a:6d:80:23:83:b5:47:f3:
de:c3:44:f6:06:3b:7f:ce:09:a4:16:e3:91:8c:4a:
98:7d:dd:7f:f1:77:fb:dc:dd:00:ce:68:84:a8:f8:
a0:d4:bb:33:5b:63:66:c4:23:99:a7:2c:3a:d5:05:
eb:fe:42:1a:48:57:90:3c:92:f2:7a:ef:e1:4a:21:
5e:ff:e6:28:0d:07:c8:43:cd:4a:a6:34:1b:28:bd:
0e:51:d1:d3:28:44:5e:5b:93:16:1c:8b:f3:d3:fb:
8e:c2:16:fc:af:27:21:72:6a:44:1e:74:a8:d2:8b:
39:e3:36:d0:03:07:c0:7a:a4:aa:b6:a6:e6:ff:c7:
b9:2c:43:de:d2:8a:e6:1f:93:ec:2c:b1:82:25:03:
95:1f:f2:83:cd:97:5b:e4:b7:46:f0:93:c5:39:59:
80:89:ac:77:7a:2f:b8:9a:c5:04:ad:30:03:68:02:
b8:6a:db:54:8a:8b:40:ab:e3:0f:45:39:0d:e6:e9:
95:c4:c1:b4:88:d4:92:56:eb:b5:fb:52:b2:8c:6b:
8c:91:54:1d:2b:ab:cd:1b:63:0e:92:eb:29:fb:52:
54:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:34:50:71:08:79:79:C1:C8:63:CC:C7:C6:D4:EC:64:D3:79:BD:BC
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:de:aa:f5:1a:78:2a:48:9c:24:a6:ef:e1:02:8d:4e:44:0d:
ba:f1:98:a0:34:6a:84:49:37:ea:ea:d0:79:cf:46:00:ca:3c:
0f:12:e0:6b:63:59:5f:0e:95:db:00:38:61:ab:5a:6e:47:28:
0b:e9:ab:92:8e:08:1c:13:d6:23:10:fd:b3:55:a1:c5:5a:e7:
ea:58:07:0f:02:9c:c9:3f:19:a4:62:53:81:24:11:be:50:98:
bb:99:37:0b:ac:4d:1d:2f:7c:1b:bf:2d:1d:55:7f:be:35:ca:
a7:0b:9c:be:84:a7:f5:75:cc:2e:a3:2a:8e:82:ec:dc:90:ac:
25:f7:f3:62:e6:50:15:c7:41:93:4a:45:4a:81:86:00:a7:06:
9e:ac:79:c3:de:3a:a9:02:93:af:a5:7f:79:83:59:63:4c:88:
eb:f5:9e:b5:b8:25:21:06:b9:76:3c:3c:66:ef:af:a4:4b:00:
59:ad:88:93:66:20:ad:7a:ba:cb:72:4c:35:9b:72:8f:ec:41:
6b:04:4c:9d:94:6a:40:05:8b:b5:65:2f:4b:89:52:7a:29:cc:
ca:78:63:7c:d5:39:98:73:8b:bc:31:0a:ec:26:13:e6:1e:81:
6e:fb:c8:39:74:e2:41:07:58:6d:70:7c:71:31:39:13:83:bd:
19:ff:be:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:43:49 2025 by rpki-client