Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
File: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json)
Hash identifier: CfK+alp7fVBVrPZR65QK1/D2q6+QdVo3hGzuwg0rd6Y=
Subject key identifier: E3:A9:65:B9:9A:A3:79:C2:68:31:FA:7A:1D:93:4D:90:77:10:F5:86
Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Certificate issuer: /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Certificate serial: 01967F0F6EDABBC350A38DA046FE59E7B85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
Manifest number: 0A36
Signing time: Tue 29 Apr 2025 01:00:39 +0000
Manifest this update: Tue 29 Apr 2025 01:00:39 +0000
Manifest next update: Wed 30 Apr 2025 01:00:39 +0000
Files and hashes: 1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: +sGzF17A1UkuK8lA+q7zhv8nLKvc7KqaQqppT2OeKDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:6e:da:bb:c3:50:a3:8d:a0:46:fe:59:e7:b8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Validity
Not Before: Apr 29 01:00:39 2025 GMT
Not After : Apr 30 01:00:39 2025 GMT
Subject: CN=e3a965b99aa379c26831fa7a1d934d907710f586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:63:1e:54:7f:1b:fc:9c:42:99:d4:f3:46:2d:
4c:3e:81:74:e0:24:8e:92:fc:c6:9d:d3:51:56:bd:
42:d2:64:dc:7d:92:26:84:a6:30:e4:b1:f8:c0:22:
a6:1e:88:a5:7e:5e:7a:f4:83:80:64:63:a6:9b:06:
2f:c0:e2:bf:ee:1e:e8:d7:68:bd:3c:65:14:ba:f1:
c9:5d:87:ca:5b:33:83:86:ed:b4:c4:ec:0a:ff:68:
89:14:a8:ed:8f:40:12:f4:da:7d:57:4b:e1:d7:34:
c1:aa:94:ec:2f:53:de:58:88:40:a0:b8:94:0a:4e:
f2:d7:f4:a3:dd:71:f9:b6:11:0c:02:93:6b:d7:b7:
8e:51:ee:cd:03:7a:01:7b:e3:26:44:1e:e1:fa:69:
60:bc:b8:d2:4d:c6:e0:1c:6e:1d:b0:be:d7:04:d0:
73:07:f7:4b:fa:93:ac:06:6a:80:3c:8d:ba:41:29:
94:69:c5:9a:08:99:8c:9e:b6:55:6f:75:40:0e:57:
6b:b5:aa:28:74:6b:17:4a:0c:76:bc:f5:16:d2:d5:
0e:59:56:8b:3a:f9:f5:c0:ea:db:c3:6b:02:b7:28:
24:64:94:ad:45:a2:d0:15:a2:d5:5c:25:c4:41:a8:
fd:c9:2e:f2:d9:bb:1b:18:81:6d:28:00:2a:1a:0d:
46:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A9:65:B9:9A:A3:79:C2:68:31:FA:7A:1D:93:4D:90:77:10:F5:86
X509v3 Authority Key Identifier:
keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b9:5f:b0:45:02:9e:e8:4e:5d:83:be:27:a0:95:eb:d3:90:
9b:b4:a3:74:7a:33:ea:05:d0:49:66:7e:93:da:26:32:8b:a9:
9f:40:67:69:76:18:de:27:a4:51:17:5e:3b:5a:99:bf:fd:3f:
a5:b0:33:36:f5:a4:51:47:d7:99:1b:2a:ab:69:0e:1c:80:84:
0f:c8:24:21:94:d2:6a:e5:e4:8a:19:e1:39:72:f7:56:e0:79:
3a:22:30:65:32:7e:f4:d7:35:5f:75:c6:35:e1:92:39:5c:b5:
5d:e2:c0:6c:06:13:7d:cb:c7:00:f3:27:d5:33:b6:5f:07:03:
70:64:bc:f7:be:87:c9:10:8b:5b:b4:81:b2:27:3f:b8:56:06:
9d:e9:f4:aa:f8:2b:2e:e1:14:10:d3:2f:29:16:b5:25:32:0d:
75:a9:24:4d:b0:db:d4:cc:be:2a:13:f0:ce:e2:89:07:58:f5:
42:74:d8:f6:2d:50:e9:4b:2d:82:92:05:51:b6:ff:17:a4:67:
f5:85:33:ae:28:b6:7e:07:b2:76:72:74:91:36:aa:e8:27:5c:
eb:4e:59:15:f9:e6:47:05:b1:14:41:3d:19:79:a5:c8:d5:c5:
09:63:8f:12:fe:17:5c:50:18:01:30:0d:0c:fc:b4:a9:e0:bf:
f3:4b:7a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:26:10 2025 by rpki-client