Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File: 5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier: 3lEKoqqAbu0NsdgzCFbThekeoKE2VcEXO+hE55b2Oss=
Subject key identifier: 0F:57:DA:2F:A1:40:21:05:B8:5C:EC:EF:08:ED:B6:47:D3:BD:E6:B3
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial: 0196835A2DAA766B2AEEFD87DEB89F198D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 21:00:47 +0000
Manifest this update: Tue 29 Apr 2025 21:00:47 +0000
Manifest next update: Wed 30 Apr 2025 21:00:47 +0000
Files and hashes: 1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: s6+UBKlfdb89YMdnGLSi/br+AV4LzOAQ2uujNjpo7Wo=)
2: HK-o-7NfDvPjOf99JzJL3ciySc8.roa (hash: DfwAR936JyRgw/jNJGOSmvyuLlvSXJeaVAPRyL2njSw=)
3: HMayfNdgxzPgTIksbOz-A7oqLCk.roa (hash: 3k2Q130datVFrgfiHucYcHqZP3tKnpk1Z1BK3tttEV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:5a:2d:aa:76:6b:2a:ee:fd:87:de:b8:9f:19:8d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Validity
Not Before: Apr 29 21:00:47 2025 GMT
Not After : Apr 30 21:00:47 2025 GMT
Subject: CN=0f57da2fa1402105b85cecef08edb647d3bde6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f0:55:53:19:b4:6d:77:24:f5:da:d2:a4:59:
85:82:eb:88:62:3b:8d:1f:49:23:b6:04:90:82:83:
0d:0a:44:fc:81:da:51:85:e1:db:4c:18:15:6e:ea:
d8:bd:2a:aa:2d:24:73:39:1d:44:7f:0e:1d:bf:25:
38:77:1a:c6:48:9a:fa:e1:11:19:66:d8:db:27:70:
65:f5:63:e4:24:e7:4b:d8:44:67:74:5d:73:52:9e:
be:13:94:30:ee:c7:83:88:5e:83:74:ff:af:c3:16:
15:a9:15:41:ff:aa:8e:48:6b:e2:c7:a3:a7:41:8e:
a5:bb:37:92:e2:69:55:f0:88:10:48:c8:86:bb:92:
2a:75:f4:49:65:4b:c2:74:90:f0:de:8e:ea:b9:bb:
81:38:0a:bc:78:37:af:cf:1d:30:e8:c6:de:0c:78:
9f:b7:aa:9b:38:60:91:e6:64:d6:98:ac:ec:6f:a1:
57:8c:09:52:52:0c:1a:56:b5:2c:d8:e6:d1:c2:4a:
d1:00:24:44:ab:f0:e5:19:ce:b8:db:9c:d9:fb:aa:
1e:91:de:bb:c4:26:a4:29:bd:f2:65:7d:fd:97:51:
cd:1d:66:56:7f:39:b4:86:eb:91:18:30:10:5a:70:
7a:96:3f:32:fc:7d:ce:4f:2b:b2:a4:54:b5:0e:39:
63:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:57:DA:2F:A1:40:21:05:B8:5C:EC:EF:08:ED:B6:47:D3:BD:E6:B3
X509v3 Authority Key Identifier:
keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:da:57:4b:58:97:59:11:6e:3f:88:07:29:e8:6b:f8:1f:73:
3f:38:e9:3a:63:f1:18:4d:47:8b:7a:ca:f9:87:e9:f4:28:17:
ae:4b:1f:48:52:cb:2e:63:03:4c:57:99:c2:e4:1b:59:a2:39:
a6:51:d9:99:c9:a1:a0:e0:60:6c:b3:0b:72:6d:23:08:ef:c6:
7d:de:ab:1f:c8:fc:75:3d:27:a4:72:4d:04:a4:6d:ef:5c:7d:
60:ef:37:2f:fc:9d:45:dd:e2:4b:26:92:37:1e:c0:cf:59:6a:
01:ee:0b:9f:fd:33:54:f3:78:27:3d:d0:a2:90:05:f4:08:51:
d5:d6:25:ae:23:91:50:dd:04:d8:45:82:d7:4f:20:84:fb:c0:
e1:b8:f0:d4:91:07:a6:67:f2:72:14:b6:51:c0:6f:66:73:c5:
be:89:65:5c:1d:13:f8:54:40:f9:3e:db:a5:06:99:c2:64:8f:
c9:17:99:7a:3c:be:a1:68:ab:d7:3e:de:86:8b:0f:fe:e4:1d:
fb:b8:39:97:fd:04:4d:21:b7:51:55:b2:ee:ce:47:7a:c5:16:
ae:88:dd:6d:09:e2:a8:08:45:71:ff:20:16:1c:0b:4b:ee:35:
8b:c5:21:eb:8d:cc:c8:23:b7:ab:23:92:6e:4c:de:fe:d5:73:
de:45:ac:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:01:28 2025 by rpki-client