Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
File: 5vwXvqVVttODIflAKOUV-6T6dNw.mft (raw, json)
Hash identifier: Xxf0+H7KlNuWLm41mGFNqJhlG/D66iz1xZE65k/zVSY=
Subject key identifier: 5B:58:06:05:06:4F:7F:68:8C:F7:C0:EF:8C:04:BE:0A:84:D2:20:C6
Authority key identifier: E6:FC:17:BE:A5:55:B6:D3:83:21:F9:40:28:E5:15:FB:A4:FA:74:DC
Certificate issuer: /CN=e6fc17bea555b6d38321f94028e515fba4fa74dc
Certificate serial: 019679442EC1790CB6C6F73C6A6DF3BE6F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
Manifest number: 1515
Signing time: Sun 27 Apr 2025 22:00:33 +0000
Manifest this update: Sun 27 Apr 2025 22:00:33 +0000
Manifest next update: Mon 28 Apr 2025 22:00:33 +0000
Files and hashes: 1: 5vwXvqVVttODIflAKOUV-6T6dNw.crl (hash: 5RZmRn+JlUMhGFABDQMcFjHieq5vieOF6f9gq2zL9Pw=)
2: J1qh-XLlSb83Cvw0tPyOs7lbFV8.roa (hash: UbADxFQd1kOQt6qZzcUh4NVaCiaCa54WExVcxjT3EEU=)
3: kLrHkvE4C0vYJ_I9mm47FT5Tbv0.roa (hash: wliDZ4/aTNMerRMfSzhrbSpYGq5mGBX1nX+LRd2XWsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:2e:c1:79:0c:b6:c6:f7:3c:6a:6d:f3:be:6f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6fc17bea555b6d38321f94028e515fba4fa74dc
Validity
Not Before: Apr 27 22:00:33 2025 GMT
Not After : Apr 28 22:00:33 2025 GMT
Subject: CN=5b580605064f7f688cf7c0ef8c04be0a84d220c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:14:a7:d3:2c:7f:77:ba:ee:13:80:91:ca:46:
1e:54:35:71:4a:c0:bc:1c:18:07:80:47:bb:cd:01:
69:d1:75:ae:e3:0b:81:35:38:3f:6e:cc:81:30:a2:
99:ec:95:9e:f6:c8:52:b5:5e:78:f3:f6:3c:98:77:
5e:3b:01:6a:1b:94:32:dd:d8:12:8c:10:73:e2:cc:
59:58:5c:69:41:1b:97:33:48:ce:8b:c7:75:b8:d6:
51:03:0d:6b:f2:25:c1:88:50:af:c9:9d:fc:f9:bf:
c6:bf:db:eb:7e:b7:2a:e2:e4:f0:7f:d2:68:95:a4:
28:5c:07:6f:2c:bc:6a:15:77:82:3e:70:63:0f:72:
6b:12:53:5a:cb:42:aa:19:66:37:d1:e4:44:ce:74:
e0:93:03:24:4d:cf:86:69:42:0e:90:b1:20:8e:8b:
f5:37:b7:cf:d3:ff:10:05:68:f2:c2:cb:ed:20:4e:
58:58:8b:f4:eb:49:00:22:e4:77:f7:21:bc:32:6c:
a0:bc:f1:0e:c1:9e:02:3b:0b:18:e3:bd:5d:a4:1c:
3f:62:d5:65:c7:5b:3d:ed:26:cc:85:ff:b8:25:5a:
44:21:f9:46:df:19:68:7f:41:b3:a5:10:04:d7:2e:
5c:87:61:76:b4:b9:fa:8a:82:39:0b:b3:8d:9c:57:
1f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:58:06:05:06:4F:7F:68:8C:F7:C0:EF:8C:04:BE:0A:84:D2:20:C6
X509v3 Authority Key Identifier:
keyid:E6:FC:17:BE:A5:55:B6:D3:83:21:F9:40:28:E5:15:FB:A4:FA:74:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:87:ec:0d:bd:25:89:8e:33:c0:4f:75:d8:4a:85:65:66:8f:
fc:ad:db:d7:a5:dc:3a:c4:1f:1c:b9:84:3a:ec:84:98:2e:87:
4d:61:1a:1e:9b:b2:fe:b1:37:a7:1f:5f:e6:4d:9d:fb:17:53:
6e:ba:90:d1:b3:c5:78:59:0e:da:11:a7:90:8c:73:93:60:ba:
20:18:cb:89:9d:6d:a1:1d:90:9c:b9:c0:27:8d:8e:a8:29:af:
b8:2d:2c:24:c9:58:b5:15:fc:4f:26:c7:6f:d3:6b:3c:bd:b6:
5d:01:e6:01:9d:84:ac:b5:38:f2:a7:54:df:6c:5f:3d:ca:f7:
9b:9a:16:5b:ef:85:1b:2b:c4:6a:01:d7:ba:64:61:5b:94:cd:
87:19:54:a4:1c:47:31:89:b3:8a:53:72:4e:9c:7d:6f:9c:54:
fd:16:6c:9d:60:10:9b:77:91:e4:b9:d7:e0:9f:3c:72:08:4e:
da:37:06:4d:fb:32:7b:ef:fa:e9:04:82:ab:6b:de:a4:9d:78:
ad:73:79:c6:38:ee:62:b5:8a:98:6d:6c:e6:5c:3f:68:5e:77:
c2:fe:31:e6:23:03:ef:dc:c5:3d:d8:47:ff:47:18:e0:6e:d0:
27:29:23:40:5f:df:72:00:15:10:32:61:ec:e7:1d:ac:40:54:
1d:c7:4f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:46:24 2025 by rpki-client