Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
File: 5saSR1gKSIv0YbhL97iyrBN01cU.mft (raw, json)
Hash identifier: vmiqsWM9UTI5UQs2WUxcOdkDE3WZcJQjPrQJS4gtTYc=
Subject key identifier: 5B:D0:BA:66:54:B8:97:06:75:A8:DF:CE:58:8C:27:F6:EE:D3:32:64
Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
Certificate issuer: /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Certificate serial: 019678D640428A52BBC4677622F5F1DD74FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 20:00:29 +0000
Manifest this update: Sun 27 Apr 2025 20:00:29 +0000
Manifest next update: Mon 28 Apr 2025 20:00:29 +0000
Files and hashes: 1: 5saSR1gKSIv0YbhL97iyrBN01cU.crl (hash: knIlLmK+2xD3U6yrAlE+GplIhegDFy9eJILIekwAYOE=)
2: l7WjKJBoi3ZOMaBwpHnPjLLele8.roa (hash: VuHVVXaHP8BDF2HI+1C+9vRLPuu0QKmIZQUwhxNEcWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:40:42:8a:52:bb:c4:67:76:22:f5:f1:dd:74:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Validity
Not Before: Apr 27 20:00:29 2025 GMT
Not After : Apr 28 20:00:29 2025 GMT
Subject: CN=5bd0ba6654b8970675a8dfce588c27f6eed33264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3e:d6:e3:a0:8f:f5:9a:70:7a:5c:1f:4b:c9:
8a:4f:ca:b3:8c:46:d9:16:45:9b:99:84:3e:39:c9:
33:bd:07:87:48:7b:8f:2b:14:a3:cb:c8:b3:88:85:
20:d4:cc:e8:e9:ed:76:9c:17:34:e1:7a:0c:2c:9b:
13:eb:af:c7:8f:ef:02:d0:80:c3:df:c1:e7:a9:75:
da:05:0e:0f:fc:d2:3c:d9:54:fe:45:76:3c:c5:bd:
28:d5:41:6f:09:e8:25:c2:a9:71:23:65:94:42:c3:
8e:91:1b:c4:f5:e5:f9:98:54:33:9c:fc:22:e8:64:
16:25:ad:6f:a2:2a:1f:a5:a3:0f:84:68:55:b8:02:
36:d3:5d:28:2b:65:47:fa:d8:ca:bc:27:fc:fe:20:
6d:26:8f:1f:81:1b:d5:f2:ad:c4:04:a9:69:b0:11:
ce:38:f7:1f:a6:26:a7:d5:55:4c:fd:d1:eb:df:52:
69:34:b7:53:4f:60:a9:5c:f5:4f:44:46:03:d5:71:
b4:35:3d:d4:7c:9f:a3:ab:2f:4a:bb:11:d9:72:d3:
f7:68:2b:3c:f9:84:b3:21:44:20:26:f2:9f:f8:c3:
48:e4:3c:d6:a4:51:e7:36:19:4d:a6:d0:bd:09:70:
52:fe:cc:7a:55:4a:24:15:41:3a:3a:69:da:27:25:
11:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D0:BA:66:54:B8:97:06:75:A8:DF:CE:58:8C:27:F6:EE:D3:32:64
X509v3 Authority Key Identifier:
keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ec:9b:04:b9:c3:71:6f:1d:46:17:81:10:27:65:36:af:9c:
f4:c1:cc:16:1d:bf:0c:08:e2:27:24:a6:2d:ef:c3:99:1b:56:
1d:ee:26:ac:c1:67:71:73:10:7e:7a:1a:3f:cb:77:92:9b:10:
91:a1:ba:79:7f:4d:ce:81:25:5b:8b:06:43:49:4a:a6:6a:38:
c6:fa:2f:cb:7e:7f:9d:c7:f8:77:8f:3e:4f:cd:5a:c8:f6:cc:
ce:6e:e5:60:96:cf:9d:25:ff:92:e0:31:b9:8d:0c:5d:29:7b:
70:d2:fa:9c:24:db:8d:be:95:f6:c8:46:11:6b:86:ce:3b:b1:
9d:80:60:c3:50:f3:63:03:e2:d3:50:3b:3b:44:95:1f:87:1e:
40:3f:1d:73:d5:62:80:c0:3e:67:da:0d:d0:13:52:a9:af:5d:
7b:97:94:4a:9c:43:58:23:4f:d9:32:8f:b7:cb:29:0f:f8:78:
b8:b0:af:8e:0a:9b:c7:b8:59:50:41:59:f0:62:35:47:9d:94:
de:92:2a:54:38:b3:b7:9d:2d:9a:43:39:49:36:47:67:da:95:
a7:16:c8:7a:03:52:87:15:43:4f:f1:b5:20:7e:9e:ad:6d:93:
6b:9a:5d:f0:e2:fb:1f:49:e2:bf:f2:24:bb:aa:67:82:70:79:
53:b0:66:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:04:46 2025 by rpki-client