Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
File: 5snUihjDwNLk5jp7g4haeWd1WCY.mft (raw, json)
Hash identifier: 514LvdR3HaTZ8iEFSaGwmhiqAbpCiHPTQGabFRDEQFQ=
Subject key identifier: 35:28:C4:62:71:95:40:89:C4:8F:D8:C9:1F:19:B1:14:F0:B1:70:1E
Authority key identifier: E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
Certificate issuer: /CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Certificate serial: 019679441F6166A6F76107206E9750D7D29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 22:00:29 +0000
Manifest this update: Sun 27 Apr 2025 22:00:29 +0000
Manifest next update: Mon 28 Apr 2025 22:00:29 +0000
Files and hashes: 1: 5snUihjDwNLk5jp7g4haeWd1WCY.crl (hash: ZgocHe0U47KimWTSKdhLpu6xIbPfxKsaWoObST2KD9g=)
2: zohWKsAJg1AB7BcLgO5mP203ZJ8.roa (hash: qyr9zS4mbTGjUUiqIIIhploYFAxZHgevrVarc4Vt5k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:1f:61:66:a6:f7:61:07:20:6e:97:50:d7:d2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Validity
Not Before: Apr 27 22:00:29 2025 GMT
Not After : Apr 28 22:00:29 2025 GMT
Subject: CN=3528c46271954089c48fd8c91f19b114f0b1701e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7f:6b:08:5e:6c:7c:2f:a3:8e:35:27:60:e8:
a1:65:b6:b3:f2:e0:b2:18:66:80:e6:00:1a:36:a4:
53:17:7b:63:86:15:06:56:85:c4:7b:42:16:b9:c0:
db:2c:2c:d2:2d:d0:78:cd:8f:c5:c1:d6:f0:f5:66:
39:4a:fb:c7:2f:1c:e3:74:c0:03:44:b8:38:8e:34:
92:04:ab:e8:e3:ed:13:75:16:be:03:67:de:4f:d9:
e6:8f:24:b6:76:03:37:fe:41:74:ff:03:41:ee:d2:
9d:07:f5:e8:95:dd:dc:8b:18:54:d6:72:43:19:08:
fd:62:e1:fe:80:a9:f6:3b:5c:b7:7d:2b:4e:a0:a2:
0c:e5:15:c5:f5:68:cd:2a:33:e4:f7:06:2e:e9:39:
f9:90:07:26:51:2e:01:55:f3:cc:a1:5c:83:ea:f8:
34:7d:25:1b:02:d0:ea:cb:f5:50:e0:49:2f:e7:d4:
0a:05:bb:bc:9a:16:e6:6a:50:e6:75:1e:93:79:ab:
47:3c:81:24:a3:06:41:2f:22:16:c4:1b:a2:0f:5d:
0e:25:ad:61:fa:05:9d:e3:86:0f:9d:39:60:d2:ed:
21:3d:2d:75:ee:77:bb:dd:6d:43:b9:8e:71:d9:ba:
4a:61:6a:5f:ad:1c:0f:26:33:ef:d7:b0:cc:4a:25:
92:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:28:C4:62:71:95:40:89:C4:8F:D8:C9:1F:19:B1:14:F0:B1:70:1E
X509v3 Authority Key Identifier:
keyid:E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:08:a9:9c:bd:54:59:25:c6:19:20:da:b7:59:01:87:ee:b0:
d1:e1:18:80:6c:db:de:1f:9f:16:5e:af:c2:c1:90:a2:67:18:
8c:c1:3b:03:08:96:01:e0:58:8f:ca:c2:f0:87:5f:d2:4f:1a:
22:ba:fc:74:ca:4d:56:fa:3f:4d:1f:f4:05:2a:10:c6:ec:65:
8d:49:a5:b3:53:f1:c4:61:f6:cd:f5:74:da:bd:5c:23:cd:a4:
1a:84:ed:23:8e:78:50:48:5d:e2:aa:8c:5e:ee:b6:bb:6c:77:
d5:5e:8d:80:3d:6f:5e:c1:8b:c1:03:36:97:fb:7d:6c:d8:7d:
e6:e8:18:ea:72:bc:c9:01:93:b1:00:38:91:73:d9:a6:e4:12:
ea:f5:f6:e0:bd:0c:77:7a:da:85:37:27:af:a1:3f:12:38:d8:
be:25:73:2f:e5:e2:23:c3:0e:43:88:8a:d3:f5:0b:9d:15:36:
91:c6:16:1f:ef:d7:68:4d:60:34:c0:09:c1:db:a6:4d:d0:61:
cb:12:83:09:42:da:77:d5:04:b6:68:d7:ce:ef:04:8e:77:77:
a1:ee:df:53:83:8a:32:3f:2b:53:f5:88:b0:bb:3c:54:34:fe:
3c:45:d9:2c:cf:55:d8:6c:e5:5f:82:cb:3a:7f:80:15:0a:7a:
89:79:a7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:37:56 2025 by rpki-client