Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
File: 5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json)
Hash identifier: nbShb+Y9nAnEfQ2LlhPkEKIHuAJ0ySjxtavXTL5rpFg=
Subject key identifier: CF:11:9A:5B:C7:5B:F0:0C:DE:9C:3C:C8:6D:C5:D2:77:82:07:2C:FC
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial: 01969115AD6B2DA313B9480AE037B0C2EF52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
Manifest number: 151D
Signing time: Fri 02 May 2025 13:00:39 +0000
Manifest this update: Fri 02 May 2025 13:00:39 +0000
Manifest next update: Sat 03 May 2025 13:00:39 +0000
Files and hashes: 1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: T227mWo+KUB9NFtW7qEwjERPdDEjr90png9v3a+JZFs=)
2: O7xkMgYDWmT39_oyZPNETli4dGo.roa (hash: BJVxC4UljGsK/BbuRqwBk8+Scbbux5UgI7xaPeJbQCA=)
3: mTHF4xRS849mOw36faqzyw4dbV0.roa (hash: wG6gmT9BywW9Amqbl4suJT23ZQUJGIpmhCizynoZqms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:15:ad:6b:2d:a3:13:b9:48:0a:e0:37:b0:c2:ef:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Validity
Not Before: May 2 13:00:39 2025 GMT
Not After : May 3 13:00:39 2025 GMT
Subject: CN=cf119a5bc75bf00cde9c3cc86dc5d27782072cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:61:fd:22:bc:40:dc:c2:00:d7:db:3b:6e:b1:
17:ce:f2:fa:6b:48:94:04:fc:a4:d9:e6:a2:2d:dd:
19:c8:b2:93:a2:0d:02:14:03:a6:dc:e2:d5:34:26:
71:d2:70:8b:0f:67:b3:a1:81:5e:57:96:7b:92:31:
6a:20:e9:65:d1:d0:f6:0f:45:63:ec:89:48:eb:04:
c6:e7:ac:2b:f2:a6:f7:74:89:a1:00:6e:e7:b2:33:
6b:23:c3:00:0b:66:7f:0a:d3:a9:b9:23:6c:90:8d:
7b:ee:e2:e2:ab:58:89:0a:18:ba:57:28:56:83:c4:
d8:98:b6:62:29:a8:fd:83:62:1c:cd:f7:ba:a4:8e:
84:37:fe:cf:59:3e:81:f8:3d:16:63:86:2a:73:97:
49:ff:14:06:8d:15:b8:cb:45:32:ba:72:35:a5:36:
5c:d3:95:f9:0b:33:38:de:eb:92:8f:20:4b:23:df:
17:72:dd:10:9c:78:49:36:ef:dc:3d:92:28:4e:ac:
12:19:32:af:18:f8:c8:cb:c3:7f:1a:38:73:79:15:
fd:75:07:3a:eb:52:8d:24:f8:5d:77:e1:93:21:c0:
2c:0a:c6:76:28:b5:c4:fb:a2:0b:a2:45:01:91:c5:
c6:d1:81:b8:9c:f0:17:6f:bc:27:5a:90:70:73:f8:
b5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:11:9A:5B:C7:5B:F0:0C:DE:9C:3C:C8:6D:C5:D2:77:82:07:2C:FC
X509v3 Authority Key Identifier:
keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9c:23:63:40:c9:d8:73:6a:35:53:42:30:bc:ce:e0:b5:0b:
9a:ea:55:cb:a1:fc:57:7e:33:f9:1a:e1:d8:c5:17:71:70:97:
77:cb:8a:0c:cd:3d:29:ac:f4:67:db:3e:43:10:20:7e:7c:26:
af:e2:ff:06:bc:7c:4c:39:67:94:73:f4:43:c8:15:fc:21:28:
ce:0a:9f:4f:30:8f:1a:08:8b:c8:c3:7d:99:35:a6:23:e4:59:
20:d8:35:3c:ad:ac:54:05:02:3d:45:34:8e:ca:da:51:bc:b7:
b1:b4:31:ff:a8:41:fa:a9:38:bb:d2:0b:e7:9b:9c:3d:fe:d7:
36:a0:2d:e0:e0:19:4f:13:08:31:d6:6a:fc:c1:30:b1:4d:dc:
be:49:98:98:7a:0d:70:17:07:95:b8:56:95:c8:87:4d:96:b6:
c6:6f:54:24:13:38:a1:72:74:6b:d0:6f:01:12:be:59:66:78:
6d:f3:cf:71:93:41:cf:b5:a4:3c:ad:f1:88:cb:88:56:25:0e:
ae:68:8a:f8:a8:d0:29:1a:72:7b:77:36:8a:82:39:e7:b3:cd:
ab:c1:e8:3d:f1:6c:a9:d0:54:49:46:89:fd:ed:db:cb:4c:68:
40:79:97:a1:11:52:5c:67:11:d8:e5:19:b0:44:25:98:e5:79:
2f:9d:c7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:08:49 2025 by rpki-client