Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
File: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft (raw, json)
Hash identifier: MsvbYWspSBeogVHYeMbxUFXUGGq8FEJ0uz1K1+Xuyz4=
Subject key identifier: 2C:F6:7E:63:59:D9:F3:E0:B9:D8:3B:42:60:00:68:9A:07:2F:24:37
Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
Certificate issuer: /CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Certificate serial: 019691F1C5B594282388AA1B27031E008A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
Manifest number: 151E
Signing time: Fri 02 May 2025 17:01:03 +0000
Manifest this update: Fri 02 May 2025 17:01:03 +0000
Manifest next update: Sat 03 May 2025 17:01:03 +0000
Files and hashes: 1: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl (hash: pqh99+F9sSR8p9lSQSMFSfkirpIyWzl32kZf+f7MgvM=)
2: qvfFT1waDERLpkfbuL979IFfQzo.roa (hash: paMjx2cHD10xNMb2RegQEWwQPemRR0QtwqJzV/kovDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:f1:c5:b5:94:28:23:88:aa:1b:27:03:1e:00:8a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Validity
Not Before: May 2 17:01:03 2025 GMT
Not After : May 3 17:01:03 2025 GMT
Subject: CN=2cf67e6359d9f3e0b9d83b426000689a072f2437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:71:fa:b9:ca:d9:41:4a:e7:f6:97:97:58:95:
ff:37:fb:21:21:7e:4c:61:b1:28:38:c4:bd:68:8e:
05:e3:ed:34:f2:5b:62:29:a9:fa:57:93:7e:fa:9e:
da:7d:90:fe:af:b2:74:df:6e:c1:45:0f:12:92:c3:
bb:4a:91:09:6a:5f:94:00:23:96:ab:48:00:9a:0b:
f2:11:e7:37:6a:0c:c6:c6:e3:0a:d8:9b:d4:18:de:
0e:2c:24:56:7d:2d:35:15:5c:61:aa:ee:3a:4d:62:
04:c8:da:0f:5e:7d:eb:fa:f2:5a:0a:15:1f:d8:30:
bf:7d:ca:f9:97:80:ac:49:5f:c8:a2:32:f8:07:be:
c4:38:32:a1:c9:fa:2c:b4:c7:2e:e7:41:41:94:8c:
79:f8:8b:a2:5a:09:36:6e:57:ca:5f:f7:75:2e:f2:
45:85:68:40:8c:b2:06:51:d9:b4:04:db:96:d5:14:
e2:4c:ab:92:87:11:73:4a:ee:80:9c:f2:4c:60:65:
bf:fb:01:8d:a6:59:6a:0b:8e:ac:21:71:7e:c0:5b:
d9:92:a7:f5:39:cc:38:ae:80:dc:12:d6:74:ce:3a:
ca:d9:7d:cd:20:95:dd:56:9d:26:d9:25:bf:e7:49:
5c:39:53:ca:fa:3a:c4:ae:47:7c:25:96:4f:7c:ae:
fc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F6:7E:63:59:D9:F3:E0:B9:D8:3B:42:60:00:68:9A:07:2F:24:37
X509v3 Authority Key Identifier:
keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ae:60:dc:51:04:43:aa:20:0a:52:26:8e:96:36:7f:00:13:
c5:12:e6:06:ec:ef:63:29:e7:01:13:f5:b1:ca:67:71:e9:4b:
db:cd:a1:f5:57:8c:8b:1d:1f:b3:99:73:16:e2:50:aa:1a:44:
f7:fd:13:1c:3c:b6:ec:b4:10:35:81:39:3d:e6:76:86:93:dd:
e1:ef:6b:68:17:5e:23:49:db:89:77:3a:88:1e:1e:02:53:b1:
5f:5e:8e:82:64:5e:2d:b3:98:01:76:f0:97:a6:e2:8e:af:63:
61:68:5b:84:06:84:4f:a5:87:de:fa:6d:9c:22:ee:45:97:09:
a1:37:eb:79:6b:d3:68:86:d6:9f:cc:e9:aa:13:c5:38:9c:15:
89:da:72:3d:e5:43:25:bb:11:19:22:26:93:fd:9e:80:f2:e2:
7f:f9:04:d8:91:da:5d:d5:32:ca:a3:ab:a3:b6:20:1a:56:ab:
a1:fb:34:99:ae:82:8f:91:cb:23:33:c3:0e:66:b4:09:4e:7e:
ef:fe:06:58:04:d7:cd:5a:71:aa:d6:c8:52:b8:ac:1f:06:97:
ae:b1:e0:38:a5:17:76:c5:80:33:36:49:d2:88:c2:1a:05:73:
fd:c0:1a:90:c5:88:76:30:f4:35:d8:c8:03:ed:0d:f1:4f:ea:
98:af:61:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:56:31 2025 by rpki-client