Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
File: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json)
Hash identifier: X7gbi/EyEZh8l/Gt6Gaeq4Pg1ibMrdIaitEMfTILzlE=
Subject key identifier: D3:5A:D5:05:DC:22:D4:5F:B2:69:F4:D4:32:78:70:1C:1C:21:31:FD
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 0196790CFB61EC76E5AC6D516B531AB25BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
Manifest number: 1109
Signing time: Sun 27 Apr 2025 21:00:15 +0000
Manifest this update: Sun 27 Apr 2025 21:00:15 +0000
Manifest next update: Mon 28 Apr 2025 21:00:15 +0000
Files and hashes: 1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: 0e3SkwL+VVW4kHBf1sVM3UYVRumVl9mUCXx+8BpqEXY=)
2: heGVk36ucrG4MWNpzqidvrKZ7YQ.roa (hash: m5uFEBEQAoAGMceOf2ib4bFCfxUv5uqZ6mZG8baGWlk=)
3: vKXgeHxyf9Ij8PbBtwAWk4PkSNM.roa (hash: FZfpvGBPzqeBXQfd0+/kWA7PAyR+Gx7rv6DgDmnZlfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0c:fb:61:ec:76:e5:ac:6d:51:6b:53:1a:b2:5b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: Apr 27 21:00:15 2025 GMT
Not After : Apr 28 21:00:15 2025 GMT
Subject: CN=d35ad505dc22d45fb269f4d43278701c1c2131fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:bf:64:1d:73:21:02:49:4d:a2:de:9c:d1:
17:57:3f:44:08:94:ce:6a:49:5e:21:00:a7:74:e1:
08:b4:fb:d9:f2:aa:dc:f6:9e:94:92:1b:bb:57:77:
8e:e2:6b:0f:27:69:f7:86:c9:88:93:e0:05:fa:66:
88:b9:20:33:fa:e8:b2:9f:71:22:c4:da:19:d4:92:
74:52:00:69:80:fe:f1:f6:8c:6d:67:f0:3e:f0:99:
8b:a3:45:59:32:bf:02:7d:fc:20:d7:54:40:78:23:
d7:08:e1:0c:b5:9c:c7:63:68:54:40:cf:6c:0c:4f:
47:72:5b:f8:04:59:bc:a2:74:42:de:0f:5d:0f:89:
8a:a4:d3:9b:a5:93:78:7c:23:95:f5:8f:50:17:d3:
e8:ba:1c:fc:50:6e:27:8d:2c:e0:9d:ef:5c:82:89:
29:2d:d6:9c:74:8d:94:fd:23:9b:69:8d:5d:4c:00:
79:b4:dd:77:13:53:38:71:2e:f2:d5:24:c9:0c:50:
65:9e:9f:47:f8:6a:57:f2:ad:ac:d9:45:a7:22:03:
da:f4:96:8f:fe:a7:76:38:65:9a:94:34:10:8f:5c:
c2:4b:1c:bb:e3:fd:91:f5:7f:a1:d9:33:8e:d5:af:
50:a5:b3:b2:4b:cb:a4:13:25:c6:1d:72:d4:df:e9:
17:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5A:D5:05:DC:22:D4:5F:B2:69:F4:D4:32:78:70:1C:1C:21:31:FD
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ff:43:4d:c2:38:dd:ba:28:69:91:5e:3c:3a:80:d5:dc:61:
28:ed:dc:7b:11:e7:2d:10:16:d6:c1:ba:80:9c:21:34:4c:d1:
50:04:ff:59:71:62:b1:21:ee:42:a6:2c:5a:c5:ee:f6:08:9c:
a9:88:74:f8:97:0d:36:14:fd:60:91:46:38:03:51:ef:c2:94:
5a:48:e7:84:a4:40:64:94:4f:a5:8b:43:79:88:0f:f1:6f:c8:
b7:25:f9:c4:57:56:c6:6d:9e:0d:38:c7:e3:95:d4:85:cf:da:
ef:3f:e3:4e:29:2c:4c:66:84:d3:8b:d6:de:fc:5c:9f:81:2f:
18:36:8d:a6:b4:59:3a:f2:be:05:92:c0:c3:9e:cd:26:0f:c1:
1d:3f:1d:bc:d0:d8:26:9f:f9:e1:68:57:15:f9:99:3c:bd:ca:
07:7b:e2:34:a2:cc:87:90:f8:7f:66:02:e9:8f:21:99:fc:49:
dd:9d:f0:34:ed:99:12:1c:d1:86:f4:04:18:89:63:95:c6:c2:
78:30:d8:41:42:86:93:5b:ea:d2:35:7e:02:62:d0:d1:90:f5:
38:98:94:7e:c0:f4:e5:5f:86:fa:df:90:14:f6:f3:27:4f:d7:
cb:70:23:d2:31:8c:b6:fe:87:26:33:51:d0:7a:9f:4c:c1:9c:
67:83:4d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:58:12 2025 by rpki-client