Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: vVoNeHCP8XZ8IyOd8tBFmlDja1IU42sPDJQnrxrGzjA=
Subject key identifier: BB:77:B6:94:61:E5:60:49:00:54:A1:3B:06:C1:62:89:2C:9C:4D:CC
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 019680227977144B27FAABC9736D488D5061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 05A7
Signing time: Tue 29 Apr 2025 06:01:05 +0000
Manifest this update: Tue 29 Apr 2025 06:01:05 +0000
Manifest next update: Wed 30 Apr 2025 06:01:05 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: A4pWGqrSbaoEY/wm/Xs0lg4rIFk7v2JwWOm+pUa54rI=)
2: FUn2t9ppYu0Wn0pkoCRZ-HiUy7U.roa (hash: IgKhBAHaInAK8D+wEDHgOoVh2qEqWhDFRzWVOdnNaSE=)
3: H4hpUNA2nrrRur4Tk2W8HjJVqu4.roa (hash: oa7awxP7blKcpEGQ8hgbpBoX6kUOq34Ta41x1XECaFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:79:77:14:4b:27:fa:ab:c9:73:6d:48:8d:50:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Apr 29 06:01:05 2025 GMT
Not After : Apr 30 06:01:05 2025 GMT
Subject: CN=bb77b69461e560490054a13b06c162892c9c4dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:36:34:cb:71:86:66:7d:74:b3:11:05:9c:
60:c8:5c:41:4a:ed:e5:7d:0f:5c:0c:11:ac:78:8c:
59:5b:29:e5:a4:6e:77:88:75:a3:89:47:1d:13:88:
7b:8e:56:be:55:56:57:a3:c0:8c:d3:67:a9:fd:12:
bd:d1:31:05:02:9d:18:73:00:81:15:a6:a6:a2:01:
fe:7c:6e:dd:f1:94:3b:cb:f3:46:09:bc:da:3c:25:
f7:df:19:8c:09:71:6d:d6:fb:b7:ce:71:7c:fc:de:
c3:87:d2:60:3b:18:e8:8a:c6:d9:3b:5e:d4:b3:b7:
99:69:b4:ab:78:0b:70:3a:c4:e7:f9:c2:f4:78:a6:
db:c9:de:2b:5e:ba:ed:3f:3e:92:36:8c:0f:e4:a5:
52:58:2f:92:56:28:a1:8f:3e:29:06:44:90:47:42:
13:6e:26:77:b6:47:04:34:0c:9f:0f:ba:36:ea:93:
7c:b3:70:5c:8b:ee:2a:e1:20:0a:6d:27:82:f7:5a:
39:3e:d2:11:04:3f:ec:53:56:8f:62:d0:58:3e:f5:
02:48:80:8c:49:2e:09:fe:ef:dc:87:89:54:74:5b:
1d:38:89:b4:b4:44:bf:e5:5b:17:21:0f:ea:00:6d:
2b:32:27:5f:7a:cc:11:b4:a4:12:33:ee:92:cb:60:
3a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:77:B6:94:61:E5:60:49:00:54:A1:3B:06:C1:62:89:2C:9C:4D:CC
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ca:d3:2d:5e:50:8b:6d:c6:b7:a5:ff:99:93:71:f4:ca:06:
71:f1:5a:11:e9:46:2a:97:ae:31:97:cd:7e:dd:f2:2f:5b:30:
8a:fd:7d:f6:54:79:d4:a1:38:e1:2f:4d:89:2e:f4:83:49:b6:
8a:aa:74:04:5f:41:95:45:20:f8:08:54:12:76:da:88:db:41:
ea:85:07:28:02:7e:09:fa:23:52:8d:a2:6e:ee:32:32:e9:f1:
cb:b7:4d:e2:37:7d:dc:ee:a5:bd:7d:04:b9:1c:da:ba:cb:50:
da:59:db:2b:7a:a0:26:83:0f:c3:e9:b3:24:44:54:41:02:75:
5b:b0:ac:66:52:00:fc:51:30:9f:5c:09:8e:92:f8:e9:25:ca:
98:32:1b:08:0a:42:e4:8d:eb:49:c9:f7:e6:59:09:2a:31:8d:
35:a4:09:bb:4d:4c:fa:f4:ab:44:f2:c4:7b:5a:7e:bd:9f:7a:
e2:57:0d:5c:d7:93:c2:c2:81:92:3d:1f:23:2a:87:71:32:8c:
d4:b4:f8:fd:20:51:45:7f:6a:c8:30:1d:37:93:91:f9:b7:f8:
fa:39:fb:fa:86:16:87:3e:fd:7b:95:5f:1e:ce:30:10:8d:73:
84:95:43:ee:ee:4a:3c:62:94:06:4b:bc:44:0d:86:98:68:da:
76:8b:60:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:21:00 2025 by rpki-client