Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
File: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft (raw, json)
Hash identifier: agb22Mqla/edHcbeMIU9+5LFcDL5dmt0zUv6k8h+LJg=
Subject key identifier: 0D:0F:2E:38:B3:B9:EC:0C:7E:C5:85:80:E2:CC:D2:7E:C4:39:45:13
Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
Certificate issuer: /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Certificate serial: 01967AC47D116EF66FC1343B5AC86815ACDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 05:00:19 +0000
Manifest this update: Mon 28 Apr 2025 05:00:19 +0000
Manifest next update: Tue 29 Apr 2025 05:00:19 +0000
Files and hashes: 1: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl (hash: csMlAM0kp2ISDkZf/Ex9lqzwKOUmqgFTxeF8uWOuw44=)
2: fTo1f8ubRBwfU0xVoHHtzOApYuU.roa (hash: 6qDVE6eG6EbcIMXQ5M9bjDvf2Vx2WIt3k9ZSfVGTUr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:7d:11:6e:f6:6f:c1:34:3b:5a:c8:68:15:ac:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Validity
Not Before: Apr 28 05:00:19 2025 GMT
Not After : Apr 29 05:00:19 2025 GMT
Subject: CN=0d0f2e38b3b9ec0c7ec58580e2ccd27ec4394513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bd:7a:23:dc:1a:c7:3a:0c:31:85:ec:8d:80:
eb:03:08:6d:26:6e:83:4b:56:7c:af:ff:29:21:5a:
f9:7e:37:fc:ea:ad:46:77:12:80:32:90:ae:a4:94:
3c:d0:61:82:40:88:96:34:8a:5c:5e:0a:db:b7:a0:
1d:bc:73:32:f3:ed:4b:8d:86:3a:c7:b4:df:45:ed:
5b:2c:12:45:96:47:b6:ac:5f:ee:38:92:d1:4e:6e:
1a:84:a4:91:d6:ee:66:4a:31:5d:75:37:49:d2:bd:
e7:46:9c:66:0b:18:17:3c:cd:43:39:6d:9c:91:85:
58:f6:f5:e0:a9:48:d1:e1:60:53:22:f9:d0:ee:c6:
73:1a:c1:e2:57:79:b1:9e:dd:e5:05:3f:45:cd:19:
e1:9f:eb:51:bb:8a:06:5e:f1:ff:4a:34:eb:39:a9:
3c:06:e1:3e:7a:f8:23:75:68:de:fd:27:c3:a2:77:
ee:d9:ce:8b:9d:08:17:82:71:4f:3f:d4:cf:d4:08:
81:4c:ff:7e:17:a1:7c:98:85:f3:10:ee:37:e3:36:
3a:f3:91:48:aa:5c:fa:f9:b5:1f:35:4f:a8:10:ca:
2a:3f:c4:97:05:64:53:bc:05:ed:bc:9c:a2:d5:d5:
76:0e:be:8c:1b:c0:b5:de:a6:4e:4f:98:b5:87:db:
4d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0F:2E:38:B3:B9:EC:0C:7E:C5:85:80:E2:CC:D2:7E:C4:39:45:13
X509v3 Authority Key Identifier:
keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:62:26:a1:9e:30:51:c1:7f:d6:d0:f4:61:1d:c5:f6:64:46:
8e:53:5e:6d:dc:29:e6:4f:ba:3e:e8:b7:4a:c5:7c:20:e4:2f:
fd:f5:b5:1f:96:6a:00:f4:19:40:32:f4:97:ef:5b:ac:9d:27:
23:5c:fb:1f:6f:1c:40:9d:2b:de:fb:ec:73:b4:28:da:2c:b4:
dc:a4:be:2d:4d:ca:cc:c8:9a:63:84:84:6d:11:83:6f:cd:30:
bb:0a:f9:47:32:9c:7b:51:58:09:58:e5:a3:fd:e5:0d:3c:51:
7f:6b:02:62:9b:93:d0:52:83:55:de:6b:06:42:6e:3c:9b:a3:
b0:ea:94:49:0d:e9:be:aa:18:c1:c7:fc:49:73:4e:55:f3:83:
a5:11:84:0b:cd:ba:a3:8d:96:1a:ed:fa:23:55:92:89:ab:04:
8b:ea:bb:44:29:78:a8:32:5c:70:ea:1a:07:a5:9d:52:47:2a:
4e:52:99:28:24:35:df:52:38:6a:11:01:f6:9d:a5:8d:18:ff:
e8:1b:cf:f6:24:42:1a:04:76:03:df:b1:58:32:25:a3:cf:99:
13:58:34:62:26:3b:c3:47:87:38:aa:96:30:89:67:3c:3d:4e:
d3:65:f0:e4:03:b5:9a:df:ab:39:68:3f:72:d4:9b:1f:b9:6c:
43:27:9d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:35:53 2025 by rpki-client