Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
File: I5xF5DYlUiCArsU5UpiaE6KKvQA.mft (raw, json)
Hash identifier: RUa/vLegWfBegqyKD+EPkF4OxuEFXyiqSHKGlRfSmXw=
Subject key identifier: 5E:50:97:88:1E:B0:34:AC:61:EC:EB:00:DE:EB:92:02:74:BA:4A:45
Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00
Certificate serial: 0196760D275608D9F271873870647B61C5FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 07:01:35 +0000
Manifest this update: Sun 27 Apr 2025 07:01:35 +0000
Manifest next update: Mon 28 Apr 2025 07:01:35 +0000
Files and hashes: 1: I5xF5DYlUiCArsU5UpiaE6KKvQA.crl (hash: qB3+8EjooojLjf1pdx5dsR2LwfIjWhOPVIUU6Tw2aZ4=)
2: lw90sey6Y2XkP3Sip6ebzWQtTKU.roa (hash: IdqbojAlXr4XwjmKtJYEU/2zd7cvDplQCfLZ9IO+/d0=)
3: uBZl19XYTdc5SBXaRHXvV0GGF98.roa (hash: 1Ti03xYR3EsLOQdndtqiFtUtuVxyXY66yoLYTtqG1ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:27:56:08:d9:f2:71:87:38:70:64:7b:61:c5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239c45e43625522080aec53952989a13a28abd00
Validity
Not Before: Apr 27 07:01:35 2025 GMT
Not After : Apr 28 07:01:35 2025 GMT
Subject: CN=5e5097881eb034ac61eceb00deeb920274ba4a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b4:8d:44:13:c8:c8:7e:78:35:16:93:c0:ec:
fe:1e:3c:7c:ea:a9:94:a5:7e:28:30:0a:0a:cf:da:
9c:9a:2a:1d:16:a3:42:92:c1:82:d7:14:3b:6b:7f:
6e:b5:22:a5:93:7e:51:da:d3:b9:a3:58:c8:20:9f:
1d:80:fa:3d:63:8a:b5:7e:26:c2:13:d4:b2:ae:e2:
c4:cd:d9:c0:58:4f:f3:8c:dc:7f:9c:77:70:f7:91:
8d:e2:8d:0b:c4:a8:13:e7:af:9f:c7:e1:13:f5:dd:
3f:a4:e3:89:a5:05:90:2c:01:a6:f0:c2:15:2d:cc:
ec:57:ab:57:b2:8b:09:90:a1:9a:af:9f:73:34:32:
9d:91:0a:0b:e5:a6:c7:07:ff:38:31:03:bf:35:73:
20:b4:02:6d:7d:d5:7b:3f:22:f0:94:88:fa:e1:c1:
77:47:8b:f9:85:3d:a3:5d:dd:e3:ff:3c:d2:08:f4:
3f:6b:a9:62:ca:bf:bf:b2:bf:8c:fa:c8:c2:76:d6:
73:38:c3:10:d1:40:54:54:2a:35:38:82:5f:4b:0a:
b3:09:64:40:d0:42:62:3d:c8:9b:36:73:1a:c2:2f:
97:63:06:dd:30:81:fd:36:d8:8a:47:b4:fc:f2:32:
44:eb:97:98:c4:77:10:5d:4f:7f:58:60:79:7b:b9:
9a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:50:97:88:1E:B0:34:AC:61:EC:EB:00:DE:EB:92:02:74:BA:4A:45
X509v3 Authority Key Identifier:
keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a9:b5:1c:95:3a:84:e1:3e:7d:36:5f:f4:44:87:1b:f1:ec:
65:31:53:f4:71:0c:83:ba:53:32:69:f7:c0:21:32:20:8e:6b:
0a:03:3f:10:69:8e:2b:3a:b1:67:e0:51:07:9d:79:26:a4:55:
07:ba:90:8d:87:bd:12:86:fa:4b:ba:a1:e5:04:2d:7e:6e:40:
97:be:13:47:56:51:ed:40:69:dd:1d:b4:72:42:e9:42:dc:cb:
b0:60:4e:0c:7d:13:f7:2f:d2:b6:4e:f5:98:97:35:49:a0:a3:
84:cb:39:f1:e4:23:9e:42:fc:74:0f:38:6c:f0:b6:fb:58:e5:
20:27:9c:0f:cd:61:72:11:d9:cd:90:c2:aa:80:6f:ff:73:82:
81:96:ec:53:cb:8a:6d:06:87:13:19:ba:e1:7d:60:77:9a:0d:
48:18:60:0b:5c:e5:79:24:a8:60:6d:94:bb:cf:3e:ea:7e:f8:
7e:67:1c:03:07:38:6d:80:3f:4b:fd:38:0c:09:88:3e:63:80:
9f:f6:fe:8b:e3:7d:bf:8c:70:00:d9:79:39:1f:2c:57:2a:64:
58:c8:1c:9a:83:99:65:24:4d:88:5a:13:ad:9f:9e:a1:bb:af:
9e:59:71:55:2e:09:18:2f:bb:1b:45:3b:d9:68:1e:4a:4a:14:
cc:aa:3d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:38:57 2025 by rpki-client