Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
File: 5J1E2IEnX8osC2s_fs7i0iIUb9I.mft (raw, json)
Hash identifier: aNxeOv91WgIoIcx1vV2BJ4gEaITA+hV0YAebX+rOZnU=
Subject key identifier: 2B:76:AF:5F:50:3A:27:EE:EE:11:3E:1F:5B:BF:E0:F2:85:91:5D:C2
Authority key identifier: E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2
Certificate issuer: /CN=e49d44d881275fca2c0b6b3f7ecee2d222146fd2
Certificate serial: 0196805929FBF7748F76C4D9A6054335965B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
Manifest number: 123C
Signing time: Tue 29 Apr 2025 07:00:49 +0000
Manifest this update: Tue 29 Apr 2025 07:00:49 +0000
Manifest next update: Wed 30 Apr 2025 07:00:49 +0000
Files and hashes: 1: 5J1E2IEnX8osC2s_fs7i0iIUb9I.crl (hash: h5eQYRw/7fjn7tbg61sq4t9hYTfGEvL7/dBqRVh4OqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:59:29:fb:f7:74:8f:76:c4:d9:a6:05:43:35:96:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49d44d881275fca2c0b6b3f7ecee2d222146fd2
Validity
Not Before: Apr 29 07:00:49 2025 GMT
Not After : Apr 30 07:00:49 2025 GMT
Subject: CN=2b76af5f503a27eeee113e1f5bbfe0f285915dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f1:30:c7:a0:a0:30:93:b9:98:09:81:17:68:
71:b0:f0:f4:4e:81:50:eb:85:c6:12:27:ab:8c:59:
f5:52:43:f2:70:8e:47:49:e2:c2:0e:ff:2d:b4:ae:
ab:fa:e4:cc:52:e2:14:5a:fa:18:12:12:75:f7:fa:
ef:fb:ac:0e:0b:ed:8b:70:57:7f:2f:ce:03:f5:f9:
cb:19:11:33:09:74:6a:e6:a6:c9:47:3f:e9:c2:d3:
ae:ac:cd:94:d9:06:c0:93:27:05:1e:f8:a1:53:c2:
1d:ee:76:70:da:31:2b:c3:df:25:a5:38:e3:8d:96:
11:85:5b:d6:b9:58:a0:e2:26:80:23:fa:7c:14:07:
ec:c1:22:c0:2c:71:29:a1:b0:4a:8f:37:7f:3f:c3:
24:3a:df:c7:4d:6f:3a:77:b5:0d:a2:8e:a2:11:b4:
b5:9a:b0:98:cf:94:32:48:90:83:91:5a:d5:36:6c:
a3:ec:75:47:e9:1c:17:a4:db:48:78:c3:d3:1b:49:
00:b0:02:81:a2:c9:ae:8a:b2:1d:8e:eb:cb:fe:23:
34:50:42:d4:37:17:56:62:46:ce:ae:26:31:18:b4:
2d:55:05:51:ca:68:b4:18:eb:ea:12:cd:d6:34:e0:
5a:79:58:dd:bc:50:19:f5:46:51:ad:4e:61:ed:1d:
5c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:76:AF:5F:50:3A:27:EE:EE:11:3E:1F:5B:BF:E0:F2:85:91:5D:C2
X509v3 Authority Key Identifier:
keyid:E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:2d:88:76:fc:5a:88:1c:15:ef:ac:f7:13:c4:1b:90:ab:5f:
8c:07:16:d7:b8:b8:d5:3c:99:95:1f:c6:65:ed:24:44:a4:6c:
5c:5e:45:72:67:98:14:f0:9a:75:c5:5d:9a:df:4e:23:58:56:
f2:37:25:2d:00:c2:46:83:76:1f:b7:b9:4e:0c:93:da:0b:0b:
23:58:7e:81:fd:d7:7b:bf:b3:b1:09:7f:e7:70:5a:2c:f6:8b:
b2:09:b8:c5:cd:aa:3e:05:22:9f:b9:98:a3:c0:94:0b:31:b1:
fd:06:e9:48:ff:e6:ff:57:6d:61:71:4c:48:64:a9:8f:c5:b5:
ad:44:f1:5b:ba:73:a5:b2:a8:9a:f2:5e:18:a9:bc:b9:a7:6f:
ab:b1:1e:7a:a5:06:26:10:e7:22:8c:d6:71:99:f2:26:03:22:
97:fd:17:c9:11:89:2f:e3:1b:db:ff:1f:f6:b1:d3:c9:91:3d:
4a:bd:fe:76:ca:db:31:23:bc:7b:96:84:5b:b9:c4:89:b6:ef:
22:cf:04:4e:b8:fc:31:2f:99:97:16:4c:f9:2d:10:d5:62:fa:
f4:3d:c9:fb:3f:94:47:63:14:77:89:81:26:b6:e4:a6:22:92:
a5:0b:72:a8:c3:46:5c:35:ba:8d:2a:53:5c:76:c1:6c:6d:97:
14:d6:c6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:18:13 2025 by rpki-client