Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.mft
File: K5vsAhH2Hq8RnOstQMWg_jqowqA.mft (raw, json)
Hash identifier: k45SZVVy0AKpyGwvZYLtqIvE1CMVzIw4h+nKRIqZtTg=
Subject key identifier: C2:05:75:23:AC:B7:A2:7C:BD:C7:01:7F:1F:8B:BB:B3:47:59:5F:7C
Authority key identifier: 2B:9B:EC:02:11:F6:1E:AF:11:9C:EB:2D:40:C5:A0:FE:3A:A8:C2:A0
Certificate issuer: /CN=2b9bec0211f61eaf119ceb2d40c5a0fe3aa8c2a0
Certificate serial: 0196989851109E7DF0FB36B14A3699487779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5vsAhH2Hq8RnOstQMWg_jqowqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.mft
Manifest number: 0B86
Signing time: Sun 04 May 2025 00:00:41 +0000
Manifest this update: Sun 04 May 2025 00:00:41 +0000
Manifest next update: Mon 05 May 2025 00:00:41 +0000
Files and hashes: 1: K5vsAhH2Hq8RnOstQMWg_jqowqA.crl (hash: 2grfWDhVWLw/JamEvDAv4OpSr9A08HOqG7zrmmnBSfk=)
2: KkH_R6IQv1u30qAL1KWqZsXbAEI.roa (hash: 04O63RIXPPpD9GmqGsDm2l0jn4ZXl6cAUxlim79VpG4=)
3: _JzEQSr5OZqDWs8nTia735Fx54o.roa (hash: n/vl1VjbI5NvAsfCuLgcPjpEvc0iKrJUQhClyjm4L3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5vsAhH2Hq8RnOstQMWg_jqowqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:98:98:51:10:9e:7d:f0:fb:36:b1:4a:36:99:48:77:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9bec0211f61eaf119ceb2d40c5a0fe3aa8c2a0
Validity
Not Before: May 4 00:00:41 2025 GMT
Not After : May 5 00:00:41 2025 GMT
Subject: CN=c2057523acb7a27cbdc7017f1f8bbbb347595f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:08:b8:ce:94:7b:a1:5c:54:35:14:b9:23:12:
13:60:9e:fe:d3:d7:2d:24:e0:2a:14:c2:03:7a:e7:
08:b0:94:d7:4a:a8:06:2e:10:88:20:3e:49:82:c1:
4b:35:95:8a:0e:8d:9c:ec:0d:ef:ab:1b:10:11:6e:
4a:3e:68:9f:69:7a:ad:af:d5:6e:cb:42:83:f5:2f:
58:ac:87:db:72:7f:62:f5:66:6e:0e:11:55:e6:a8:
fc:6e:1c:42:e7:35:c4:68:d7:48:24:25:38:6f:19:
19:a0:48:03:ae:db:8b:cc:fd:70:38:94:92:d5:b7:
b2:12:12:04:29:b4:e4:db:bc:98:fa:19:39:6e:4e:
5c:90:7a:77:c4:86:32:b3:77:43:b1:e3:0a:a1:f6:
08:29:b0:d8:ff:37:a0:2d:00:76:6a:25:a7:80:a3:
fd:5d:b0:c5:f3:c0:9a:32:53:f9:79:01:74:91:52:
b6:11:52:bb:42:66:3a:e7:ec:43:c9:ae:ba:43:00:
45:ce:57:c2:8e:13:11:26:64:02:03:1d:48:ba:25:
df:a3:f5:bf:75:89:1e:4c:9e:64:4d:d3:79:29:fd:
56:a3:b6:9f:79:26:68:f6:cd:59:5d:b6:d2:46:ea:
c1:83:f0:63:74:9b:ff:ad:31:70:08:0b:a8:62:e6:
94:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:05:75:23:AC:B7:A2:7C:BD:C7:01:7F:1F:8B:BB:B3:47:59:5F:7C
X509v3 Authority Key Identifier:
keyid:2B:9B:EC:02:11:F6:1E:AF:11:9C:EB:2D:40:C5:A0:FE:3A:A8:C2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5vsAhH2Hq8RnOstQMWg_jqowqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:5a:cc:5c:d2:09:d7:53:0e:50:a8:39:ef:04:e7:48:7b:14:
b5:e9:48:a8:c2:1f:69:33:2e:16:c7:4d:34:b0:cc:0a:85:6f:
6d:71:61:c8:ed:3d:cd:70:8b:33:64:b6:52:ae:79:47:8e:b5:
47:58:e7:b3:0a:35:b1:32:4b:7f:6f:79:63:0c:90:4a:b0:a8:
19:bb:34:11:59:c7:72:3f:ad:78:9c:96:de:80:3d:f5:04:88:
2b:5f:ce:d3:6b:eb:5e:fb:c6:7f:51:32:df:62:64:9d:b5:5d:
9e:93:9f:96:34:98:3e:91:a0:b0:dc:f8:c9:b8:ee:22:99:51:
36:c6:4e:fc:0e:af:4d:e4:73:5c:19:51:44:8d:49:48:31:e5:
41:70:fe:6a:7b:e7:e0:93:b5:36:f8:b4:bf:bd:68:6c:65:84:
49:d4:a7:be:f4:e9:e4:a4:c0:08:de:02:27:70:5a:87:71:3b:
db:b3:3a:ed:43:10:61:1d:5a:54:54:8c:8e:91:3e:20:cb:7c:
38:06:ee:b8:60:4e:f4:30:78:b7:81:48:a0:3d:63:74:f0:d4:
4c:bf:96:ce:81:39:9d:2f:4a:32:05:73:0c:28:53:cd:8a:91:
f3:55:22:3f:2b:72:c9:69:83:04:de:65:e3:dc:44:e1:17:e6:
65:49:66:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 05:50:11 2025 by rpki-client