Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
File: 5nXaCc0660yTfGP1NfM_1X0MIZE.mft (raw, json)
Hash identifier: p47q+70gfMgY845bvl7yPZ5VIrqGQu5ii7trY3es+yM=
Subject key identifier: 9C:B7:9B:2F:3D:20:D7:7E:3A:C1:74:33:2D:17:1E:E4:78:97:72:2E
Authority key identifier: E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
Certificate issuer: /CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Certificate serial: 01967643169D3710422CDD0AD300440A6EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
Manifest number: 133B
Signing time: Sun 27 Apr 2025 08:00:30 +0000
Manifest this update: Sun 27 Apr 2025 08:00:30 +0000
Manifest next update: Mon 28 Apr 2025 08:00:30 +0000
Files and hashes: 1: 5nXaCc0660yTfGP1NfM_1X0MIZE.crl (hash: qCoI13ftyaApUHKmvUu5aWP8CPv+s1bZ3B11XC3eX+Y=)
2: oxEuvUfcJ-buwPGzC9O9kYsePss.roa (hash: CDgIKWYLWk0SZTYTZrPpXT0JXuPlKzi9XhIJznqGoHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:16:9d:37:10:42:2c:dd:0a:d3:00:44:0a:6e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Validity
Not Before: Apr 27 08:00:30 2025 GMT
Not After : Apr 28 08:00:30 2025 GMT
Subject: CN=9cb79b2f3d20d77e3ac174332d171ee47897722e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ab:e6:51:d5:45:0e:c5:16:f8:e1:99:6f:4d:
36:54:8b:d0:4e:2a:92:9a:75:60:c5:4c:52:5d:d1:
41:7a:3d:1d:99:f8:48:9a:aa:c7:c1:02:e3:6a:a6:
af:da:3d:fa:25:50:20:76:ff:07:c7:fc:24:f7:08:
c4:bd:d7:92:3e:72:d7:c4:2c:b6:39:52:1c:b4:25:
c6:8b:de:5e:bc:33:da:e3:b2:d6:2a:e8:43:8d:9a:
85:ea:e0:1a:98:62:d2:26:a0:ef:24:49:ac:d1:67:
95:8f:20:92:ee:98:85:9d:de:8a:0c:f9:e7:61:b2:
fd:fa:60:fd:77:d2:b3:7f:b2:02:35:15:43:0e:b7:
9b:52:d5:5e:f0:57:55:5c:57:2d:56:fe:a5:cf:c1:
c5:8d:3e:3a:a8:d4:eb:12:f6:5c:02:28:5b:a8:e7:
a0:ed:15:03:09:1a:b6:c2:d5:28:a9:6c:45:51:1f:
9c:aa:ae:c1:38:69:04:7e:3f:3f:74:e4:10:9f:ab:
7a:a6:49:d3:d0:fc:3e:5a:18:05:07:d5:6b:ef:75:
a3:a8:7f:c7:44:e3:33:82:13:d9:26:a8:d6:08:1a:
ce:07:3a:62:7a:a5:d0:a9:e4:c4:2e:b2:e8:c7:16:
58:d2:9a:a6:42:19:90:32:e0:f4:3a:05:f4:0b:7b:
9b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B7:9B:2F:3D:20:D7:7E:3A:C1:74:33:2D:17:1E:E4:78:97:72:2E
X509v3 Authority Key Identifier:
keyid:E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e8:b9:05:c3:0c:fa:5a:de:ee:42:99:20:79:28:a7:a9:7f:
4f:40:5d:68:3c:6b:bc:2a:0a:24:df:d1:f7:ef:22:b0:13:62:
b8:88:1a:19:ff:bb:fe:af:bc:9b:49:00:fd:3e:8e:23:27:f0:
52:29:48:9c:40:24:5b:61:f9:2e:d4:36:2a:c2:b5:23:e6:8e:
bd:38:d1:50:64:2d:81:5b:ce:55:b6:83:f2:a7:73:bc:dc:ad:
e7:e4:9b:c1:13:fd:f0:25:31:25:40:5c:10:7c:4a:a5:01:a4:
b9:90:b4:19:b9:64:91:fc:fe:f9:40:f8:c0:a2:9b:aa:f7:a8:
0f:c0:f4:51:5c:c2:2b:ee:47:68:be:41:d9:7d:53:5a:7e:b6:
97:d7:63:da:81:3f:ea:3a:65:9e:8a:0e:7a:de:46:54:ef:58:
1e:0d:24:bb:b5:8a:a4:63:bc:c2:f4:cd:15:a0:5a:d5:5f:fb:
18:ec:03:b7:ad:bf:11:72:9e:d7:39:84:47:31:e2:a4:02:a9:
0a:64:77:6c:62:68:2e:62:57:fe:83:fb:56:55:83:cb:55:aa:
fe:7f:7e:01:e8:9c:33:dc:81:2a:96:0a:03:df:d5:0d:63:9b:
ae:82:dc:48:e8:9f:93:0f:81:d5:5a:57:25:36:79:42:b1:3a:
49:2c:ce:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:34:37 2025 by rpki-client