Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
File: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft (raw, json)
Hash identifier: 7N2tpODc9qYVBUiMUgs0aG/WgV/YJvikQGZ3VfL57X0=
Subject key identifier: AE:56:F4:3D:AA:D9:4A:60:CA:22:72:09:22:5D:D8:4C:FC:FE:BC:79
Authority key identifier: E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
Certificate issuer: /CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Certificate serial: 01968548A0F116B6D34129D2D2D7F25749EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
Manifest number: 0FCD
Signing time: Wed 30 Apr 2025 06:00:51 +0000
Manifest this update: Wed 30 Apr 2025 06:00:51 +0000
Manifest next update: Thu 01 May 2025 06:00:51 +0000
Files and hashes: 1: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl (hash: 7l7qyBvdncxJhNNWJgxEYzEYifhzDF+wG1BWWV+opbY=)
2: V60g_4Hl1O4ws6xObJRepK5WbCI.roa (hash: WQJN9PGlNp52w8KNVApuftRmLkpbyYXJ0S9Q2EedPcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:48:a0:f1:16:b6:d3:41:29:d2:d2:d7:f2:57:49:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Validity
Not Before: Apr 30 06:00:51 2025 GMT
Not After : May 1 06:00:51 2025 GMT
Subject: CN=ae56f43daad94a60ca227209225dd84cfcfebc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:03:46:c4:d0:70:5c:59:c4:a5:1d:ea:1b:
74:f5:ef:43:92:91:eb:3d:b2:c0:08:38:c0:91:6a:
c2:c0:d0:b5:2b:de:cd:26:2f:23:24:91:eb:d5:09:
2b:96:d6:de:67:43:a7:82:7d:0c:fa:31:9e:8b:e7:
20:a2:5a:3a:fe:a1:61:38:fa:bf:0b:2d:b1:60:2d:
0f:9d:8a:6d:b1:4c:a5:6d:24:f0:41:5b:4b:da:5e:
3c:2d:86:84:59:e7:af:25:6a:1e:c6:f9:8b:8e:1f:
d2:2b:6e:75:67:b6:1f:91:c6:c1:37:4f:ba:1f:09:
30:8e:ce:11:50:b0:0e:3e:c2:2b:c8:31:85:79:ee:
6c:a8:bb:44:d1:22:30:2d:3b:71:56:8e:1d:62:6a:
71:75:3a:5a:8a:c6:71:ca:36:86:19:90:68:66:38:
4f:73:57:25:91:da:d8:da:ec:f1:16:97:91:2d:61:
53:87:4e:99:b4:29:f9:64:18:2c:2d:90:c2:47:c7:
26:47:ed:90:e3:4f:37:72:3f:70:4a:c7:b6:24:b3:
df:5c:dc:a4:ec:91:f5:59:58:e5:b1:2c:c5:d4:da:
17:c4:9e:72:0c:ee:7a:58:d7:c2:36:77:ba:95:7a:
b1:71:8f:ef:99:0e:5d:ef:bb:2f:23:97:7c:86:9b:
9b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:56:F4:3D:AA:D9:4A:60:CA:22:72:09:22:5D:D8:4C:FC:FE:BC:79
X509v3 Authority Key Identifier:
keyid:E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4d:a8:e8:96:8a:b5:f3:22:fe:4d:98:70:25:23:6a:af:61:
94:bb:7c:a6:a5:41:37:fe:8d:d9:54:48:df:d0:d8:3c:fd:8a:
eb:a6:70:aa:74:a9:ca:12:b8:17:78:5b:6a:6e:b0:37:3b:f2:
72:c3:a2:81:e8:22:47:1f:d5:92:96:00:9f:72:7f:46:1b:a9:
be:24:db:3c:a1:05:7b:31:8b:33:5d:fd:fe:b6:f7:b6:e4:93:
0f:4e:9a:0c:7a:c3:cc:14:49:3d:80:be:b6:7c:02:b9:94:d9:
73:b7:2c:a4:f4:04:d5:01:92:36:bf:69:9c:25:0c:60:cb:e3:
7b:ba:7e:0a:47:b8:3c:9d:3d:52:f6:e2:b2:39:23:4c:c8:43:
16:3d:b9:69:13:71:f6:cd:3c:61:5a:ef:e6:1b:86:ea:e2:55:
ef:0d:53:0a:43:72:99:d7:e9:6b:92:d8:cc:f4:6a:73:7c:b9:
65:4f:33:91:15:ef:6c:56:df:21:07:6e:eb:b8:f2:17:07:f7:
86:2e:03:e3:04:95:b4:4c:83:85:b4:d8:92:4f:0a:b2:2c:b3:
be:34:17:7a:75:30:de:80:49:15:66:dc:a0:1a:ec:aa:a2:4d:
f3:2d:7e:dc:00:7b:ca:93:43:92:e8:a9:ea:e7:5f:0d:94:62:
ac:58:50:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:42:05 2025 by rpki-client