Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
File: 5LDTQqkyMznAd8XGreEJO1pADyQ.mft (raw, json)
Hash identifier: YhyEIgDpW+ie4zLcPmjlZ0lO6We9EsNdmcrY4gseXH0=
Subject key identifier: 60:5C:2A:D0:FC:0F:35:23:AB:F4:A6:B6:84:B4:A4:5B:19:7C:D3:2A
Authority key identifier: E4:B0:D3:42:A9:32:33:39:C0:77:C5:C6:AD:E1:09:3B:5A:40:0F:24
Certificate issuer: /CN=e4b0d342a9323339c077c5c6ade1093b5a400f24
Certificate serial: 0196759E60DF3AF4E72E674C2FA7CC7CF8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LDTQqkyMznAd8XGreEJO1pADyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
Manifest number: 0173
Signing time: Sun 27 Apr 2025 05:00:35 +0000
Manifest this update: Sun 27 Apr 2025 05:00:35 +0000
Manifest next update: Mon 28 Apr 2025 05:00:35 +0000
Files and hashes: 1: 5LDTQqkyMznAd8XGreEJO1pADyQ.crl (hash: KfBUiFkDN80BrCmXIdQ2BMzpQ+rgmi5H3qkml3VaoWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LDTQqkyMznAd8XGreEJO1pADyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:60:df:3a:f4:e7:2e:67:4c:2f:a7:cc:7c:f8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b0d342a9323339c077c5c6ade1093b5a400f24
Validity
Not Before: Apr 27 05:00:35 2025 GMT
Not After : Apr 28 05:00:35 2025 GMT
Subject: CN=605c2ad0fc0f3523abf4a6b684b4a45b197cd32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:82:5e:bb:3e:55:22:3e:ba:8a:99:38:8f:
a6:5e:7d:7d:42:b5:2f:56:0e:8c:35:67:51:2c:2c:
7d:29:54:a6:06:e3:6e:d5:2f:7e:c8:5e:b1:d8:9f:
06:bc:4b:f3:4c:d1:5b:8a:42:0c:c5:ba:45:f7:68:
64:8c:c2:36:cf:d3:6b:2e:bd:4f:97:1f:43:27:ba:
30:4a:62:60:ae:ca:30:5c:3e:3e:f3:17:c9:32:75:
18:cc:da:4b:72:d8:7d:ae:9a:9e:ef:11:1a:78:c1:
fe:b6:87:08:e8:e1:a7:5b:92:29:6c:7c:58:ac:84:
c4:e9:48:d1:1b:a3:84:89:c8:b6:c9:94:75:9d:15:
79:8e:66:7e:f3:47:b3:e1:b4:00:3f:84:dd:eb:0a:
ef:49:b2:67:77:9f:14:ab:08:20:f1:2b:43:b1:c5:
19:e5:ec:01:33:f1:18:3c:ca:c2:20:73:b4:b7:f1:
e3:73:fc:88:33:12:9c:1a:1c:d8:ac:63:a1:8f:80:
e5:c7:9b:91:96:94:ca:af:4b:06:bc:95:25:39:71:
b0:bf:e1:e8:f3:15:a7:07:bc:6b:8e:00:ef:89:a9:
1c:90:fb:80:05:9c:16:53:44:71:33:11:37:8b:7b:
5c:a3:3f:12:8f:2c:cb:d6:52:bb:5a:f8:56:81:4e:
fd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5C:2A:D0:FC:0F:35:23:AB:F4:A6:B6:84:B4:A4:5B:19:7C:D3:2A
X509v3 Authority Key Identifier:
keyid:E4:B0:D3:42:A9:32:33:39:C0:77:C5:C6:AD:E1:09:3B:5A:40:0F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LDTQqkyMznAd8XGreEJO1pADyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:da:80:00:99:87:d6:74:fa:31:ed:a4:bb:5f:53:da:3e:80:
e1:4d:c6:c2:62:89:92:4a:55:50:4b:58:47:8a:3a:3e:4f:27:
09:5d:76:ad:1c:a2:cc:25:e0:39:69:dd:73:0e:3a:00:d4:c0:
89:4b:3f:ab:a5:9b:2b:48:0a:94:71:22:8d:f4:d2:29:b6:81:
0b:55:73:c8:fa:e7:22:c8:22:cc:cd:b2:2a:b6:c9:6d:15:cc:
c2:70:25:72:51:6c:8a:03:b6:9b:82:87:c2:7a:51:36:8e:50:
90:35:9a:1b:ad:02:db:be:19:9e:40:32:e5:8c:c1:6f:86:87:
32:01:4d:b3:53:4d:10:52:33:e8:10:89:a0:2f:fe:e9:00:91:
c5:db:25:fc:23:eb:f6:77:d2:20:98:fb:ce:1d:24:b9:96:54:
1c:eb:22:d9:5e:34:87:1e:06:bd:15:02:38:30:fe:3f:38:73:
d7:17:e7:f9:b0:5b:1b:1c:01:99:a4:c3:be:00:86:32:f2:41:
03:a3:66:28:02:b4:54:0f:b7:18:e3:ff:3f:31:be:8e:fc:1c:
56:19:d7:ba:ba:ef:2c:41:0a:8e:97:38:aa:74:93:40:f9:b5:
3d:c9:3a:f7:c2:f8:05:67:db:ff:7e:85:5f:21:ad:eb:c6:2d:
35:de:d2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:57:11 2025 by rpki-client