Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
File: 5UmH5s-8zliuDJbnZmqyGrPi4JA.mft (raw, json)
Hash identifier: zJu4diF7vXbJoxJSzH+DjtPlugmb7puyjgCLtkCHKyc=
Subject key identifier: CF:35:3F:F8:63:13:D5:D5:78:DE:CE:1E:7B:56:F2:D8:07:0B:A1:E4
Authority key identifier: E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
Certificate issuer: /CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Certificate serial: 019678D67CB05232F5892724DC0BEAE9B763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
Manifest number: 01B4
Signing time: Sun 27 Apr 2025 20:00:44 +0000
Manifest this update: Sun 27 Apr 2025 20:00:44 +0000
Manifest next update: Mon 28 Apr 2025 20:00:44 +0000
Files and hashes: 1: 5UmH5s-8zliuDJbnZmqyGrPi4JA.crl (hash: sGYVtG0EKBg0exzQ+opkxxa7IuWvR8VeOye6FJsBSp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:7c:b0:52:32:f5:89:27:24:dc:0b:ea:e9:b7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Validity
Not Before: Apr 27 20:00:44 2025 GMT
Not After : Apr 28 20:00:44 2025 GMT
Subject: CN=cf353ff86313d5d578dece1e7b56f2d8070ba1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:08:6a:55:e1:44:72:ef:97:57:b3:26:f6:
64:f1:04:bc:e4:3f:95:7e:91:11:86:a8:b3:89:5e:
c6:09:cb:16:d5:e5:9c:37:fd:4c:dc:c0:55:a1:0d:
5c:9b:9a:80:86:08:37:cf:bc:a7:04:40:2b:4c:ed:
ce:da:c0:d7:2e:b9:da:56:45:25:3a:de:29:37:9f:
88:0b:27:4e:a3:1a:49:d7:fb:43:be:6f:41:26:29:
b5:4d:f2:d5:ff:a9:b0:29:b1:20:a1:c9:ff:a9:35:
a2:8b:35:f4:44:5e:91:98:d7:e0:ba:ff:fe:d5:49:
1c:a5:5a:bc:d1:35:ee:f2:41:52:87:f8:2f:9c:f0:
24:21:b6:c8:8d:60:04:50:a2:6d:b0:5c:20:1f:05:
dc:81:05:c9:dc:b2:56:2f:31:89:53:77:50:ef:0e:
e0:ec:81:56:10:69:56:24:7f:4d:b9:c6:5d:46:b2:
dd:54:dd:3d:c7:e0:6a:8c:1c:5a:2f:cc:e1:75:a3:
6d:21:07:da:66:93:db:94:ea:8f:2e:03:52:2f:79:
44:3e:90:4b:62:95:12:3e:2d:df:aa:13:02:e2:6d:
f8:29:9b:e3:75:fc:4c:57:96:49:62:54:73:3c:3d:
e1:e3:cf:06:52:07:53:a8:89:a7:c5:67:b0:80:45:
32:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:35:3F:F8:63:13:D5:D5:78:DE:CE:1E:7B:56:F2:D8:07:0B:A1:E4
X509v3 Authority Key Identifier:
keyid:E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:35:a6:71:85:b9:67:26:e6:5a:6a:c9:e1:2f:40:06:cb:c2:
3c:63:86:e0:09:4f:db:17:25:39:cc:b3:14:35:d0:89:2a:44:
cc:bc:7b:f7:2d:43:89:f3:9b:2e:dd:5d:fc:dd:35:96:39:82:
d6:b4:89:a2:6c:c3:a4:e9:e5:ba:7b:8a:f7:e4:2f:1a:86:70:
db:cd:84:53:a7:0f:c9:20:db:4f:6d:31:4a:20:aa:54:93:ef:
fe:d2:75:e6:4a:7f:78:5a:3a:33:1c:01:96:f3:8d:8a:86:35:
49:34:d3:f7:8a:1c:11:9b:2a:31:67:14:20:89:ef:8e:c9:18:
0b:e3:b5:9f:bd:0d:cd:ce:7a:d7:91:b6:27:54:01:94:15:0c:
4f:eb:e1:84:44:dd:bd:36:d4:1e:37:f2:1d:1c:f7:ce:69:32:
7c:da:61:b5:df:06:a8:4b:dd:14:af:6d:6e:4e:11:37:65:7e:
84:e6:f3:a9:58:18:ed:f1:b2:64:a5:6b:9f:d0:ab:a4:e4:a5:
39:81:5d:cb:5a:ef:7d:43:8d:99:eb:43:26:2a:cd:27:3c:85:
de:5b:a3:4c:0e:46:b3:d2:a5:e4:90:69:fb:fb:da:68:4d:07:
98:78:03:9d:c7:13:5f:75:fd:9b:e0:e2:ea:03:10:24:b4:d5:
d2:0a:1d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:09:20 2025 by rpki-client