Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
File: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft (raw, json)
Hash identifier: Zdahw9mOJRxBD2j/zRFqAfY1fEJz5b2IcthA6yrqjCg=
Subject key identifier: A1:1D:1F:CB:C5:41:E1:D5:37:FC:92:26:D6:4E:A7:84:D8:E6:3E:15
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Certificate issuer: /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial: 01967A56FE504188CF23A4F2B5946325875F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
Manifest number: 0C92
Signing time: Mon 28 Apr 2025 03:00:43 +0000
Manifest this update: Mon 28 Apr 2025 03:00:43 +0000
Manifest next update: Tue 29 Apr 2025 03:00:43 +0000
Files and hashes: 1: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl (hash: EZ9Docl1ExVlYF3bdRNucvOQKvkBkqS5wFCwLZgGAnY=)
2: vhYKMa2Z6sRh78styyEQC2ay13Y.roa (hash: q6ISR7QoOYSfixxm6mwluVodtW8Dzcm/t68jGp50cGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:fe:50:41:88:cf:23:a4:f2:b5:94:63:25:87:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Validity
Not Before: Apr 28 03:00:43 2025 GMT
Not After : Apr 29 03:00:43 2025 GMT
Subject: CN=a11d1fcbc541e1d537fc9226d64ea784d8e63e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dc:5e:2f:80:85:69:1c:2f:08:5b:d2:fd:e4:
bc:44:d0:a2:f3:07:2e:fe:db:0e:d3:1d:e3:f9:65:
4b:94:22:85:30:21:74:02:6e:ec:be:b6:b7:6d:27:
31:38:a5:3d:d3:6d:be:79:e3:bf:1d:9f:19:94:b2:
11:62:35:f8:ba:b1:48:8a:36:b2:ab:c8:f2:34:01:
9c:a6:7d:7e:95:45:58:bd:30:8a:2c:29:68:fd:e5:
be:40:5b:f8:3f:8c:fa:d5:33:a9:7d:06:9d:e1:9c:
6a:16:5b:86:63:7c:99:c6:dd:77:e4:24:99:78:51:
6d:cb:7d:02:7a:ce:f4:08:93:67:a9:c1:3e:37:64:
a1:4d:0b:fb:b1:95:3f:eb:8c:49:d9:26:14:20:41:
97:bb:29:3e:3f:fb:77:7a:4b:af:99:d5:4c:f6:d9:
ae:cb:ae:77:59:c0:43:90:d7:9d:eb:7a:27:fb:51:
ff:96:79:85:bf:f3:98:5e:ad:1e:6f:13:35:a2:5b:
8d:d1:d2:4f:99:e6:40:1b:7c:ef:c4:29:3a:9d:f8:
95:8f:57:46:bc:f3:d5:31:a4:85:fa:d6:2a:f0:7b:
ab:e5:86:20:ca:2e:44:1b:95:01:9f:b9:a2:37:2b:
6a:b8:2f:de:2f:25:b2:0c:44:d5:af:25:dd:3c:a3:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1D:1F:CB:C5:41:E1:D5:37:FC:92:26:D6:4E:A7:84:D8:E6:3E:15
X509v3 Authority Key Identifier:
keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:2d:0b:d8:f7:46:ca:10:f5:ee:c4:52:8c:ef:ad:cf:44:f1:
32:05:a2:f4:03:f1:1c:e5:fe:fa:b9:72:0b:c0:b8:ae:79:82:
2a:47:46:13:c2:05:c3:d6:c9:37:cf:8c:a4:73:41:c8:9e:ba:
1f:8e:73:5a:ff:f5:97:61:05:09:ea:42:68:ec:a5:88:8f:d0:
04:39:f9:50:40:ef:6f:3a:1f:85:d3:c3:af:c0:57:d1:3b:fb:
ab:83:d2:ea:d0:da:6d:bd:c5:2e:67:0b:b8:d5:7b:33:be:64:
0e:e5:cc:ec:9e:24:1f:d6:ab:96:6c:ba:2b:ce:d2:8c:9c:18:
a5:f9:d6:08:9e:11:3e:c3:e7:6b:0a:4b:23:ff:c5:df:3b:04:
45:87:af:85:a0:71:a2:8a:d9:06:63:dc:ac:6b:b0:ec:c7:9c:
0e:33:ca:f2:b6:45:7b:15:6b:08:be:2f:64:3c:db:ca:7d:80:
67:f2:0d:30:07:ea:af:1a:c4:c7:d9:4d:6e:bf:f8:72:a1:f9:
8d:27:fe:63:21:24:47:c5:fa:ab:f6:cc:b0:d4:9c:cd:8a:5f:
2f:ff:d3:e4:ee:3c:b8:49:2c:7b:4e:ae:a3:bd:c3:9a:c2:c0:
cc:96:00:2e:59:e3:30:a5:96:c8:3e:1c:b5:2a:c6:4a:9a:37:
b0:cf:58:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:49:14 2025 by rpki-client