Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
File: 5vgk5Lxc2BiG7CS14VJm6V-N35M.mft (raw, json)
Hash identifier: T6sF78oTPSwgMStrvu5JBlTPxYkS9tRGOZBJwr7BdDE=
Subject key identifier: B1:85:80:24:52:15:30:BE:AF:DE:42:08:CC:B2:57:2E:BE:DD:B7:99
Authority key identifier: E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93
Certificate issuer: /CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
Certificate serial: 019673B0207D39DD0005A22D05658D316688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
Manifest number: 0A82
Signing time: Sat 26 Apr 2025 20:00:44 +0000
Manifest this update: Sat 26 Apr 2025 20:00:44 +0000
Manifest next update: Sun 27 Apr 2025 20:00:44 +0000
Files and hashes: 1: 5vgk5Lxc2BiG7CS14VJm6V-N35M.crl (hash: lywnn3eN2IlfVCi2yS/8SCaDxWj9FbN3XHbRHPfXmdg=)
2: rf8xmxH0lxQMZaEoNGLhxRtMOZM.roa (hash: 8uXylOlK6BkO3v7SWg2Pp+uIEZNpg7MPKeK8yn1WMAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:b0:20:7d:39:dd:00:05:a2:2d:05:65:8d:31:66:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
Validity
Not Before: Apr 26 20:00:44 2025 GMT
Not After : Apr 27 20:00:44 2025 GMT
Subject: CN=b1858024521530beafde4208ccb2572ebeddb799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:73:e8:b5:00:b7:2d:58:be:8b:ba:8a:f6:16:
24:be:04:36:ec:3b:c1:6b:d4:4c:e8:52:36:1f:d4:
d5:e5:ea:ce:9e:70:ea:11:10:8b:9e:b5:56:7a:d4:
3d:f2:0d:de:0d:5f:9c:39:88:df:34:9c:04:10:9e:
45:8f:f5:ca:33:e5:24:94:44:d0:87:2a:75:97:ce:
ab:54:2f:14:96:a6:1e:3e:02:a7:72:a8:98:64:e9:
e3:43:57:4d:df:03:85:fc:0e:3f:cb:3a:3b:46:1d:
cb:02:58:64:6f:a5:e3:6b:93:7c:9c:16:c2:4f:f9:
13:ac:e0:63:a4:8c:00:5b:5d:56:61:87:c3:75:35:
c0:da:ed:9f:1e:4e:63:65:04:b9:6e:47:25:f8:d9:
92:55:aa:7e:f4:f3:76:b8:05:85:ef:cd:9e:e4:00:
f5:c1:d4:0c:a8:39:09:69:cf:e0:74:9b:d2:ce:cf:
c1:20:ff:34:f2:18:f2:d2:f0:45:c5:86:3f:a2:9b:
12:ea:a2:35:e9:aa:24:21:c0:94:c8:a0:44:2e:fc:
1e:6a:9d:90:f5:30:27:28:85:b0:d7:16:81:12:68:
4e:65:f7:44:b4:8a:31:05:db:90:9e:a7:6a:61:87:
21:42:2f:16:db:09:ec:43:89:c4:30:d8:1e:e4:3f:
9c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:85:80:24:52:15:30:BE:AF:DE:42:08:CC:B2:57:2E:BE:DD:B7:99
X509v3 Authority Key Identifier:
keyid:E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8c:02:06:89:60:8d:c0:54:2b:6b:17:74:da:2f:4f:ea:b6:
b7:51:f2:be:87:e5:73:e3:76:00:ac:bf:d6:0a:66:1b:02:e8:
74:7c:cd:07:61:17:3d:29:8e:b5:99:35:25:77:8a:00:5e:54:
dd:7a:c2:e2:6d:e9:bd:ea:22:7a:bc:c8:eb:07:10:00:c2:54:
a8:f5:c5:a3:42:be:0f:30:fc:9c:71:bd:56:95:52:eb:0b:ee:
87:01:92:ae:52:b3:c4:21:5e:bd:79:98:ed:db:d2:eb:9c:8e:
2d:5a:ab:1d:21:1f:ff:76:65:e0:87:a9:09:c5:e0:46:39:13:
48:fa:f7:66:7d:29:a0:b2:35:1f:20:64:ad:eb:c8:b8:7f:84:
17:18:04:ca:12:d8:d2:d9:da:a0:a5:5f:3e:50:93:81:88:f9:
c7:cc:45:6b:0f:50:0b:34:92:70:8d:57:39:7f:ab:5a:f9:7c:
48:a5:a1:24:99:9d:0c:1e:02:f1:9a:e9:39:f2:29:0d:b2:73:
76:7c:e2:9b:18:7f:4f:56:d3:4c:bf:fa:91:e1:10:2e:77:b7:
7d:29:de:5e:8f:2c:3e:de:af:a8:68:a2:07:02:df:ea:d8:ce:
ab:4d:f4:94:27:2c:64:4a:73:05:12:f9:fb:e9:37:d5:94:cd:
7f:28:bd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:36:38 2025 by rpki-client