Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
File: grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft (raw, json)
Hash identifier: T5ppBumvNFhDAa9v0F+cEdRz/DT8W8u5d6cqm+bUsgQ=
Subject key identifier: 5E:AD:C4:84:AC:65:65:CC:7C:97:A1:91:3A:8D:98:33:66:62:34:96
Authority key identifier: 82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
Certificate issuer: /CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Certificate serial: 01968A37AAC0C7925BF2DED38E1A15E0EA2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
Manifest number: 055C
Signing time: Thu 01 May 2025 05:00:25 +0000
Manifest this update: Thu 01 May 2025 05:00:25 +0000
Manifest next update: Fri 02 May 2025 05:00:25 +0000
Files and hashes: 1: UJLmCw34qWtSEnk-TuMcHNiR5vk.roa (hash: j5fkYAu7YGsQmsA7L/NleCKG1P5eFJG2QoHhfIjSYOI=)
2: grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl (hash: s5+hXGXzKKRt3kNgBODikiejSOOtKkzF+q4AAdsgqvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:37:aa:c0:c7:92:5b:f2:de:d3:8e:1a:15:e0:ea:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Validity
Not Before: May 1 05:00:25 2025 GMT
Not After : May 2 05:00:25 2025 GMT
Subject: CN=5eadc484ac6565cc7c97a1913a8d983366623496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:da:34:a1:08:af:b5:2b:42:8f:86:0a:e8:0a:
5c:b0:54:2d:33:c5:fe:43:af:dd:72:79:fc:05:64:
25:7a:57:02:d8:97:a6:8f:50:57:8d:a7:d2:ca:c3:
11:4b:f4:26:e4:e7:f1:b8:d5:3b:a9:9f:73:44:aa:
6b:e1:5b:78:94:77:90:ac:6e:b3:eb:55:89:59:4e:
53:c1:9c:54:1f:4e:47:ce:d6:99:f5:62:e6:9c:5c:
e0:91:4a:4d:fd:9a:9c:48:65:a2:50:1c:54:da:5b:
e4:63:40:01:aa:4d:5f:43:77:91:24:af:c4:aa:4a:
ca:86:c8:22:c4:e3:f2:78:49:92:2a:cf:f6:01:19:
14:13:83:71:01:da:d8:66:f6:f1:d1:1d:bf:83:ff:
e9:8d:0f:78:3c:b3:91:50:c1:97:2d:69:ac:d9:6f:
2f:7b:d0:a8:06:14:7d:5d:7a:bb:0d:d6:55:8a:b1:
ac:f8:96:ca:58:f1:2a:c5:92:0e:b3:f4:c8:fa:03:
80:c7:31:56:b6:b5:ca:82:b5:9a:2d:50:2f:e7:18:
91:01:b1:51:ec:21:6b:b3:69:2a:ef:6f:19:c7:b8:
95:5b:8a:be:1f:6e:9d:f9:9b:8c:1b:4f:f5:b4:1d:
96:ba:2a:52:6c:45:8d:82:f8:5f:ac:ae:9c:b3:db:
e1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AD:C4:84:AC:65:65:CC:7C:97:A1:91:3A:8D:98:33:66:62:34:96
X509v3 Authority Key Identifier:
keyid:82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d1:e6:ea:ba:53:5f:db:87:02:d7:84:cf:ab:e4:f6:7e:0c:
ac:e5:42:b3:1f:48:b7:0d:db:10:e0:86:5a:99:83:5f:8a:d6:
9c:31:db:67:3e:ec:f8:43:88:48:5b:54:56:6d:19:d5:45:f9:
de:dc:ed:44:0a:97:73:e8:5b:87:da:cb:c0:c9:03:ad:50:9b:
47:b5:a4:51:6b:b6:1b:4a:d9:f9:48:eb:75:43:c3:06:77:ee:
e7:38:49:65:37:8f:23:58:27:ba:aa:ed:c3:c8:f1:cb:fa:f2:
73:96:84:8c:95:40:bb:1d:3e:2d:22:9a:33:0d:37:cc:1f:51:
a9:5d:91:2f:1d:b5:b8:66:ac:dd:84:32:40:10:58:ee:ea:26:
e3:9f:0d:67:d0:40:6e:f4:73:c4:37:1e:5d:c4:96:f4:f5:c4:
86:8b:7e:99:fa:61:25:08:b7:a5:ee:13:f6:01:29:be:16:ee:
e7:70:ef:79:a3:28:32:a7:69:5f:43:81:38:57:1a:04:50:74:
9d:19:33:9d:04:f9:25:18:49:d3:d6:0c:8c:98:21:54:ca:b3:
1b:e3:a6:29:e5:33:f4:9d:13:e6:45:41:80:95:d1:fe:cb:4d:
a5:27:30:9a:47:13:92:28:16:4f:0f:ca:66:8a:2a:e2:0f:02:
33:ba:48:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:26:55 2025 by rpki-client