Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
File: 5frVG_rdJFMhvgkuaB2N5uLSdcM.mft (raw, json)
Hash identifier: kMJp/cKVBzioA2EiGdJDq/Gt/ks/K1UmQ1UFnuPWujQ=
Subject key identifier: C8:BE:38:1A:9B:D9:B0:B0:B5:91:FF:CF:85:28:60:C4:E8:E5:31:12
Authority key identifier: E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
Certificate issuer: /CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Certificate serial: 01967EA14EE89938909E76F0F8CE18A19191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
Manifest number: 0497
Signing time: Mon 28 Apr 2025 23:00:22 +0000
Manifest this update: Mon 28 Apr 2025 23:00:22 +0000
Manifest next update: Tue 29 Apr 2025 23:00:22 +0000
Files and hashes: 1: 5frVG_rdJFMhvgkuaB2N5uLSdcM.crl (hash: 2GfXeZcY8qhVwsyVlMt7J0I0YqHpR0IUeArfXq0YMvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:4e:e8:99:38:90:9e:76:f0:f8:ce:18:a1:91:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Validity
Not Before: Apr 28 23:00:22 2025 GMT
Not After : Apr 29 23:00:22 2025 GMT
Subject: CN=c8be381a9bd9b0b0b591ffcf852860c4e8e53112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:af:65:64:ac:87:f4:9a:e9:a9:18:99:a1:f7:
d0:dd:24:c8:0f:4a:1f:34:79:81:31:8f:59:e2:6c:
bc:20:c2:ac:6c:8a:7c:a9:24:25:4d:ee:d5:96:a1:
67:a6:6f:0e:9c:32:07:e8:f5:2f:ee:30:03:04:b1:
1e:21:26:e1:05:c2:ff:d3:05:a7:91:2c:34:d3:44:
92:34:62:4f:74:3b:3d:41:5b:b6:d1:89:5f:a8:72:
16:e5:be:34:9f:6d:ce:e5:81:71:12:ac:8e:37:37:
81:c8:e9:6d:b0:b7:c4:b2:c1:dc:49:21:49:c4:e1:
f6:51:6c:52:98:39:ba:c2:70:aa:54:27:13:7d:04:
cf:ad:e4:43:f6:a0:c0:c0:92:01:7c:1d:eb:47:64:
77:60:12:0f:88:5e:9e:43:64:44:86:c7:5f:67:a7:
dd:ba:47:94:0b:bf:50:06:84:e1:2c:7e:21:14:0d:
39:68:19:c6:d9:18:c5:73:76:d3:13:be:76:3e:1e:
71:a1:3c:e1:db:38:e8:53:04:f5:da:d1:94:34:e4:
de:4e:82:b0:28:0b:8b:1c:de:58:f5:e5:85:c3:63:
ab:a5:40:4a:aa:e8:b7:f9:c7:be:37:d7:46:51:93:
44:c3:0c:46:ad:72:b3:31:c7:d0:36:eb:38:64:cd:
29:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BE:38:1A:9B:D9:B0:B0:B5:91:FF:CF:85:28:60:C4:E8:E5:31:12
X509v3 Authority Key Identifier:
keyid:E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:45:23:92:4d:85:3e:04:b5:3c:cb:0d:8a:d6:91:4c:0f:3c:
9c:59:fd:ad:e6:79:2a:b3:df:28:62:10:de:cf:7f:21:77:51:
2b:6c:01:76:8a:1a:b9:c7:41:47:d4:03:11:87:73:c0:dd:8c:
42:91:c9:94:b6:84:b2:83:92:8c:57:a0:57:87:74:ee:de:68:
08:95:b6:4f:49:b4:c2:d8:f1:93:e9:dd:34:6d:03:e5:39:11:
69:b6:da:f7:e1:c2:74:8e:ba:c4:88:4b:80:e9:d0:e9:8a:81:
18:30:0f:8c:9e:ff:83:a2:69:d5:7b:10:a5:1d:25:fd:72:a4:
d6:d6:41:cb:c3:bd:6c:4d:a5:b9:8e:60:53:cc:96:2f:2a:67:
85:78:29:74:3f:b1:13:a9:a0:7c:1f:9f:c2:1e:f5:cd:52:92:
2d:34:49:06:f8:3d:cb:48:0a:2e:d9:40:75:88:71:d5:4b:36:
42:28:08:e3:52:22:ad:ad:03:f5:89:ca:c4:04:c3:bf:af:84:
68:56:5e:23:c7:27:33:fa:29:76:70:1c:9c:aa:e9:30:81:eb:
55:ce:4f:b9:50:01:f6:13:a5:16:cb:13:a4:2c:68:38:69:4c:
44:28:95:8e:ee:22:19:5d:32:8f:89:2f:73:74:ab:87:46:a4:
d0:20:ee:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:33:21 2025 by rpki-client