Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
File: 5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft (raw, json)
Hash identifier: PmkgJE21TJYVfTXHq1+ZWOThLcM0Ln07MPI2+jy4aDk=
Subject key identifier: F1:1F:11:86:4E:A2:FA:1C:22:5A:54:1C:D1:4D:30:8A:66:DB:67:25
Authority key identifier: E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3
Certificate issuer: /CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3
Certificate serial: 01967BD745BD1BCFCDFBD8B763A9327E301B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
Manifest number: 0825
Signing time: Mon 28 Apr 2025 10:00:27 +0000
Manifest this update: Mon 28 Apr 2025 10:00:27 +0000
Manifest next update: Tue 29 Apr 2025 10:00:27 +0000
Files and hashes: 1: 5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl (hash: weHysd1J+WZNcyDkGI9KyhQ/TMTQTUG1LUXt7GGc1EE=)
2: 6xUnoc1wAnSrf2dpU2UTzibFAZU.roa (hash: tiXyyLUhxSiIfoFFtQDRMAVp44XARQDTShxLyIGBRKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:45:bd:1b:cf:cd:fb:d8:b7:63:a9:32:7e:30:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3
Validity
Not Before: Apr 28 10:00:27 2025 GMT
Not After : Apr 29 10:00:27 2025 GMT
Subject: CN=f11f11864ea2fa1c225a541cd14d308a66db6725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:f3:7b:fd:0f:65:50:ce:5a:8e:9b:ad:f4:
d5:40:a0:b0:59:c2:c1:9e:67:03:7e:78:54:28:c6:
6e:8d:02:61:d5:b5:df:5c:2a:b6:d3:e8:2c:77:fb:
15:87:16:4b:a3:d3:22:df:41:e1:3e:eb:ff:5c:88:
90:f6:95:79:75:24:0a:8b:fc:67:3f:4c:36:13:43:
76:7d:cf:81:3f:2f:fa:34:c0:73:7b:2b:09:68:db:
dc:15:96:77:4e:47:5e:c8:36:84:0d:92:34:87:83:
7c:ae:4d:f6:58:d1:87:2f:fc:11:67:61:8b:1b:73:
88:21:9a:4a:00:41:d1:9f:25:25:6c:d8:06:cd:4a:
d7:26:f9:1f:ee:65:fd:65:fb:81:8a:f7:18:f8:e5:
29:58:c0:41:e9:02:29:70:6a:5c:bb:26:32:c6:f2:
1d:d7:ec:3e:3b:bb:f5:f6:c3:93:9b:17:05:17:51:
16:01:34:17:c1:4f:e8:39:f6:79:64:24:0b:5d:79:
d8:84:0e:20:c7:3b:c9:dc:3f:74:62:6c:f1:a2:99:
42:21:e7:e6:45:67:77:37:49:c3:a4:66:3f:a7:c6:
d4:bb:aa:f9:a2:ee:13:c1:fa:31:40:00:8e:7b:7a:
97:92:b2:2d:2e:4a:0c:6c:6c:22:0d:a1:c7:3d:f6:
d3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1F:11:86:4E:A2:FA:1C:22:5A:54:1C:D1:4D:30:8A:66:DB:67:25
X509v3 Authority Key Identifier:
keyid:E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:01:aa:84:6e:5d:6a:5d:c9:8e:3e:fc:ac:2c:e4:1b:72:80:
ad:55:b3:70:d4:e2:42:2e:be:1c:fd:60:00:23:31:d4:e7:bb:
78:fb:d6:f3:fe:67:f3:71:9f:b9:06:97:64:ed:4d:5e:11:51:
ce:14:ab:f4:62:4a:c0:a1:ed:93:b8:21:a0:f0:6b:1a:98:9a:
df:c5:f4:e4:22:1a:ae:3d:cf:5e:aa:26:85:1f:4a:a9:61:6b:
1c:b8:f2:5f:dc:4f:a4:99:14:a8:6e:e6:71:d5:2a:09:1f:12:
2a:23:91:0d:91:ca:fe:cd:e6:28:01:cd:9e:2d:72:a6:48:6e:
bf:47:52:35:d9:ca:74:cb:51:52:ad:06:da:6d:84:57:d2:e0:
41:34:6c:58:05:32:a1:7c:fb:56:11:bc:24:91:01:25:55:37:
7d:1e:e6:75:e5:17:4d:54:28:6e:0f:8d:ab:58:fb:db:d5:2a:
96:71:34:35:3c:99:5a:4c:3e:5b:65:8f:14:d6:be:e4:e5:37:
27:e6:54:48:8e:d0:91:14:5d:95:8b:7a:e4:29:79:08:63:74:
95:26:01:ac:a9:18:6c:eb:31:5b:34:73:02:55:50:f7:cc:b5:
46:ab:5d:99:61:c3:0d:f2:79:5c:ab:10:dc:36:14:7e:8a:33:
c4:6b:4a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:43:52 2025 by rpki-client