Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
File: 5oBHj67Itn3f7OY1fPJc8sodhdA.mft (raw, json)
Hash identifier: CwKKeVtfRaQGZT6BY2SetJ4Knx/wsNPtL2X3ioW9YVc=
Subject key identifier: 63:FB:D9:18:63:A2:84:45:20:32:A8:87:2C:A0:6E:1A:CE:6B:83:48
Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
Certificate issuer: /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Certificate serial: 01967BA082FA9B1C5D7FCF473FD031622116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 09:00:38 +0000
Manifest this update: Mon 28 Apr 2025 09:00:38 +0000
Manifest next update: Tue 29 Apr 2025 09:00:38 +0000
Files and hashes: 1: 5oBHj67Itn3f7OY1fPJc8sodhdA.crl (hash: 70lEFHQgi6YGU4bAn7RTMacKrvpuYRVqoeN+LNg7SzA=)
2: tRzSJb7DVEfQEAa9U4BrDqM_SWA.roa (hash: XZPt+PoWwjSkw1pIWuwBcMWbKd9UU7K0EsDZzwNXa5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:82:fa:9b:1c:5d:7f:cf:47:3f:d0:31:62:21:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Validity
Not Before: Apr 28 09:00:38 2025 GMT
Not After : Apr 29 09:00:38 2025 GMT
Subject: CN=63fbd91863a284452032a8872ca06e1ace6b8348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:0c:b6:41:c7:43:3c:14:8e:a2:bd:c0:95:
ba:ac:6c:ea:22:2e:16:9e:7e:06:7d:58:1d:8f:6a:
1a:d9:d4:d8:a6:9a:3f:aa:ef:31:75:c1:7c:10:64:
bc:9c:86:de:d1:a9:bf:76:f7:69:50:a3:ad:28:95:
c1:60:63:ef:62:36:27:28:b7:90:cd:0e:0f:f1:85:
68:07:f0:22:8c:c4:99:e5:24:c1:7f:24:c0:04:eb:
4e:21:fd:31:fd:cd:9b:23:a3:3d:45:f5:39:ed:70:
26:b6:f2:21:71:c6:9d:af:b6:da:9f:ef:a4:5b:a0:
31:47:73:69:32:df:5c:75:3d:8f:2e:f3:da:14:27:
65:50:82:23:68:30:18:2a:6a:42:56:a8:2c:45:f8:
7e:01:e7:5a:5f:aa:39:aa:f1:4e:e6:b1:8d:38:5d:
26:cc:f6:96:3e:97:5b:b0:53:cb:05:da:85:0b:fa:
cc:41:5f:4f:83:83:3d:f8:3a:92:5b:b8:33:52:82:
dc:5d:38:87:a2:10:ae:b9:5f:b1:c8:b1:15:d9:91:
bc:64:0a:f2:b5:79:86:8a:02:2e:8a:8b:3b:ab:91:
5d:75:ce:ad:27:88:67:51:ed:21:c0:0e:02:6e:40:
55:8e:2d:d3:04:9a:ca:ce:61:b5:fc:b4:90:42:00:
3d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FB:D9:18:63:A2:84:45:20:32:A8:87:2C:A0:6E:1A:CE:6B:83:48
X509v3 Authority Key Identifier:
keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c5:a1:84:57:fd:2d:5c:d3:da:11:8d:58:52:59:36:8c:29:
04:3d:12:81:a1:9e:1a:79:85:06:e7:6d:cd:e0:d3:57:b1:da:
7a:f0:79:9f:be:ee:55:ed:27:63:4f:1e:9b:9e:83:70:6a:e4:
4d:fc:a3:88:b2:9e:5d:70:de:7d:dd:2c:c4:5f:62:41:32:97:
57:eb:25:66:43:e6:83:3f:2d:04:58:f0:69:4d:3b:a5:df:16:
a8:5c:9c:e9:06:1e:8d:d2:c1:62:ac:85:22:c2:5c:59:ff:57:
a4:90:10:b0:dd:31:21:33:81:04:cf:ef:30:76:19:1b:af:34:
aa:e6:a7:1e:45:9f:da:f1:6b:cd:ad:5d:a6:e9:1a:a7:6c:3c:
4a:c2:f1:54:e9:02:2f:fb:3c:a1:31:7e:fd:27:81:32:60:4d:
34:49:08:cc:42:e8:50:21:7a:7f:3b:93:25:0c:05:c5:60:99:
7e:f2:d6:20:51:78:d5:32:e4:1c:ae:dd:1f:77:44:1e:95:fe:
74:5d:00:18:7b:6e:ec:62:ed:9a:fa:47:97:4d:a6:2f:77:bb:
f6:ea:0d:7f:32:bb:d9:b3:71:1e:3b:ea:9d:7f:3a:50:72:32:
4d:7d:f3:50:1d:ce:2a:f9:3d:1e:7b:53:85:c6:cc:22:05:c7:
3e:2a:79:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:54:46 2025 by rpki-client