Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
File: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft (raw, json)
Hash identifier: uTeWjcKSFZEtG2gxu+EhHFZ/BWbeajbGT39SbeRRShw=
Subject key identifier: 32:13:75:3F:30:B9:C3:D3:83:D6:72:CD:4C:C9:5C:1D:A0:BD:33:AE
Authority key identifier: E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
Certificate issuer: /CN=e5503498ff185d0c607353f43f55e911f62a6802
Certificate serial: 01967CE9DBB436BA39B58FA290EC83CEAE54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
Manifest number: 1523
Signing time: Mon 28 Apr 2025 15:00:22 +0000
Manifest this update: Mon 28 Apr 2025 15:00:22 +0000
Manifest next update: Tue 29 Apr 2025 15:00:22 +0000
Files and hashes: 1: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl (hash: Edt7Iq8hnxT0a2pnieHAEI9iIcPRL6vsQuYx1xxAcOg=)
2: KZNT-sZZNOeQ3ZQO6BjaXLuoD9g.roa (hash: +2sZTVLc367S2ob/w+tSdpZn/g4nvkTyjPLtfOVjhN8=)
3: o-NtXLRHL-S0Y-O2GlCnHQAffNw.roa (hash: dxc+WfWonf57/frz8JHxuwGakdxRPwah5tbEWGWiZgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:e9:db:b4:36:ba:39:b5:8f:a2:90:ec:83:ce:ae:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5503498ff185d0c607353f43f55e911f62a6802
Validity
Not Before: Apr 28 15:00:22 2025 GMT
Not After : Apr 29 15:00:22 2025 GMT
Subject: CN=3213753f30b9c3d383d672cd4cc95c1da0bd33ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:27:e7:f9:ef:05:22:50:19:1c:69:bb:0c:99:
46:f1:6c:85:db:75:55:31:0c:c5:2e:13:12:3d:12:
60:8d:02:9f:af:07:de:36:83:c3:ff:a7:f6:10:f8:
f6:00:3b:7e:49:2a:99:44:1d:27:8c:79:85:de:07:
6f:4d:38:b3:ad:19:4c:a8:98:f9:8d:27:90:2d:0b:
c4:7c:72:14:bc:1d:80:28:45:09:e3:f6:03:29:1d:
88:9f:39:fc:f4:7e:ca:91:70:84:0c:b5:2f:9a:9d:
07:5f:e5:6a:43:97:ad:00:35:b5:48:d9:2d:44:3d:
be:bf:0b:47:2c:75:02:0a:fb:46:2a:3e:be:41:76:
23:c0:28:50:0b:04:3e:4c:3f:a5:5d:67:4d:fa:60:
f5:b7:54:e2:b4:ec:4e:2b:da:40:39:03:92:a5:d5:
89:4c:31:85:0f:1f:df:7a:01:b2:6b:e1:5e:66:90:
1e:5f:58:0d:82:1a:bf:e6:7f:b9:19:b8:24:ad:32:
7d:8b:2c:b6:d2:50:0e:b3:a4:d5:58:f9:b1:98:78:
a8:65:c8:38:6d:40:94:9d:1e:1d:19:50:9f:7a:2f:
16:20:bb:0f:c3:6e:cf:a3:ba:62:e8:08:8d:d2:d4:
b9:8d:a8:95:9b:33:b6:74:c3:f0:9d:51:71:8f:42:
8c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:13:75:3F:30:B9:C3:D3:83:D6:72:CD:4C:C9:5C:1D:A0:BD:33:AE
X509v3 Authority Key Identifier:
keyid:E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:2c:4f:81:81:38:1e:ce:52:30:d2:24:2f:f9:51:3f:be:cf:
c7:21:ac:42:d4:08:8d:71:e8:26:4b:6b:25:33:81:c4:7c:b5:
b6:32:14:3a:36:f8:86:43:8c:52:eb:c3:9e:d8:0e:ef:06:d5:
ed:1b:0d:f6:99:94:f0:e5:01:c8:6b:60:55:06:ac:b2:a1:47:
d6:10:fe:65:d3:3f:ec:fa:51:0f:a4:f5:c8:c0:33:d8:09:da:
36:c5:a4:3e:e9:5c:5b:88:11:0a:4e:a0:fa:9d:29:56:46:f1:
c2:ef:44:5b:45:90:a5:20:88:2e:1d:c0:9b:ea:31:7e:76:52:
89:82:3f:ce:19:31:a2:03:03:48:f9:29:08:89:08:69:f9:1e:
f2:00:fa:24:9d:bf:4f:d4:b4:c2:6d:b4:c5:03:2e:22:1c:64:
31:22:8e:31:ee:3c:21:e9:89:ea:67:80:b4:1f:5a:8a:1c:b0:
66:e8:fd:7d:d6:4a:a3:d0:2c:87:a8:7c:65:85:a4:25:12:5f:
51:7a:4a:c0:ca:b0:f5:ce:04:7e:a5:9e:06:a5:ed:96:df:61:
a8:d2:2a:14:b8:64:1e:89:22:81:06:ad:b3:e5:0b:c2:d6:ac:
29:77:b0:b4:c2:bb:92:74:c8:87:a4:cf:71:cb:d9:9d:86:71:
73:56:4f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:59:24 2025 by rpki-client