Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
File: 5fTyS0D9qblSjkqO3K1huEHfbBg.mft (raw, json)
Hash identifier: Trmq6WCH49udwW5wrLFtkByGP3Pb9C/4EpFBK+C5vqo=
Subject key identifier: 27:4F:D0:18:2B:45:32:01:65:A9:3E:7B:0D:D6:17:C3:D3:E2:7A:D9
Authority key identifier: E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
Certificate issuer: /CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Certificate serial: 019676E7DDDA6552589B204121117B5A3A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
Manifest number: 12A1
Signing time: Sun 27 Apr 2025 11:00:29 +0000
Manifest this update: Sun 27 Apr 2025 11:00:29 +0000
Manifest next update: Mon 28 Apr 2025 11:00:29 +0000
Files and hashes: 1: 4k9DaSQHXw2s8I0EzO1Y-jNpTYg.roa (hash: ZVBB3cjYOT3VqfWQ4/A+wZjufx+V4UWOyQ4pBr48oC8=)
2: 5fTyS0D9qblSjkqO3K1huEHfbBg.crl (hash: MQtSZq7orspKYPqBG+P+s4m+nbjXMkNuK1NPSHLRZbk=)
3: W0VJvnbWq3J3Bz14XVJrCcO-0Ak.roa (hash: BRMekWIhLsWnxOA/bB8odlVJv4hlD7aXq4PRDSkGzkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:dd:da:65:52:58:9b:20:41:21:11:7b:5a:3a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Validity
Not Before: Apr 27 11:00:29 2025 GMT
Not After : Apr 28 11:00:29 2025 GMT
Subject: CN=274fd0182b45320165a93e7b0dd617c3d3e27ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1c:9d:27:44:81:19:19:3e:20:93:e7:82:80:
ad:6a:8e:27:58:9c:df:9f:34:f5:7f:5d:1c:de:68:
da:48:f5:58:66:ac:0f:2c:ae:00:2e:92:ea:e1:d0:
d5:95:3b:0b:c6:cc:88:4d:e9:e8:d1:0e:c3:48:6a:
8e:16:0e:bb:1e:d5:71:fa:57:65:12:e0:2f:93:6a:
8f:5c:f8:45:0f:60:e2:d8:42:75:58:6d:5b:23:da:
dd:b1:e7:8a:e8:28:ca:71:8d:4d:08:ed:1a:dc:fa:
14:c2:a5:00:f4:bc:51:57:83:dc:99:04:74:b1:61:
4b:53:06:03:81:3c:71:90:c9:72:3d:95:6f:46:f1:
df:22:bf:3f:bc:8b:a3:d4:a3:49:67:1c:b4:01:f4:
40:69:63:12:29:4d:cc:94:eb:a5:31:b1:92:df:71:
e9:57:10:d5:40:b3:9d:5a:9d:53:e5:7d:8c:33:d5:
1e:61:96:04:00:e3:b2:fd:9f:85:7f:4e:30:71:cd:
4f:5a:85:a1:9d:33:87:f2:6b:b2:eb:64:cb:ab:79:
d9:64:1b:30:a1:c0:17:ce:f1:31:df:cb:51:93:fa:
95:a3:59:33:8a:f2:18:9d:a6:d1:5f:94:7e:22:11:
5e:08:1f:18:84:75:90:60:17:44:0a:4a:03:a8:67:
9e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4F:D0:18:2B:45:32:01:65:A9:3E:7B:0D:D6:17:C3:D3:E2:7A:D9
X509v3 Authority Key Identifier:
keyid:E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b4:9c:b9:75:dc:31:11:6d:42:d8:9a:31:e0:cc:ac:f6:ee:
21:f0:a0:69:ef:dc:7c:6c:6c:6e:37:cf:b9:02:63:52:1c:32:
46:c9:7f:28:05:1b:fa:37:78:ec:17:6e:f6:26:8c:04:58:31:
25:d9:fd:54:c5:b2:c5:a5:5a:4c:2d:4e:6e:4f:71:8e:c2:c6:
20:93:46:89:ac:cf:aa:3f:a1:3d:b9:c2:ba:96:a2:7c:c6:4c:
8f:17:6f:12:ad:fe:cc:28:7a:8f:a3:7f:50:9b:7b:02:0b:81:
9a:dd:00:df:3d:0b:40:91:05:c5:78:06:84:97:e2:7f:50:8c:
26:92:0b:bd:55:80:04:c1:24:f1:0a:c0:ce:d5:9d:97:82:24:
9b:31:a0:5b:30:49:f9:f3:35:39:64:59:d2:79:bf:d4:1d:9f:
56:ea:30:ad:1d:7d:f1:69:ae:66:fd:c8:51:93:04:3c:b8:35:
ae:ad:62:c8:ce:bf:5e:15:de:7d:2d:70:ce:33:93:75:51:a1:
c1:62:d2:99:5f:94:37:b1:13:c2:94:33:d7:b5:eb:75:f2:fd:
a3:15:bd:b1:6c:d9:ee:00:59:c8:be:75:db:d8:ed:0a:ae:5e:
a9:bb:84:56:f1:ae:53:fd:0f:02:f7:05:f8:de:44:aa:8e:88:
53:a2:50:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:46:45 2025 by rpki-client