Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
File: 5fmtISzWWrTuK46bP4uDPDkA6n0.mft (raw, json)
Hash identifier: D/Ct51KrKEFb2eZP+EU2cH5f0buf1/tgPEWLYxMz+iM=
Subject key identifier: BF:18:15:A1:72:84:01:1E:97:EC:0C:DC:16:69:DD:8B:CB:E2:A6:70
Authority key identifier: E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
Certificate issuer: /CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
Certificate serial: 019688EE56A51C77371A4C6E2F8E9FE42FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
Manifest number: 085B
Signing time: Wed 30 Apr 2025 23:00:43 +0000
Manifest this update: Wed 30 Apr 2025 23:00:43 +0000
Manifest next update: Thu 01 May 2025 23:00:43 +0000
Files and hashes: 1: 5SbPyjmIYXelitOmA1AVO3bhm0Q.roa (hash: 1XIxpyYBD9DDRIa0BTpbMKp2ZvPzaojB9NovyRazhxQ=)
2: 5fmtISzWWrTuK46bP4uDPDkA6n0.crl (hash: QNL8jok7A08CmUrYivHS9Drxja6Xx9cVn7mgGyzSMr8=)
3: 7HHw1TGIKZGT4OMQXJ2kcRpWokQ.roa (hash: MAqlIYjH1775SsM1oEUQoqGZ7ZtgZ752pYJj6tU1DkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:ee:56:a5:1c:77:37:1a:4c:6e:2f:8e:9f:e4:2f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
Validity
Not Before: Apr 30 23:00:43 2025 GMT
Not After : May 1 23:00:43 2025 GMT
Subject: CN=bf1815a17284011e97ec0cdc1669dd8bcbe2a670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:95:53:f5:9d:bc:58:40:57:3d:32:42:76:67:
d3:c6:39:ea:b9:fa:90:47:4d:16:88:28:9a:df:2a:
95:da:d8:a1:65:ad:a6:3e:b2:6d:27:87:74:75:c9:
d7:3a:b1:a9:b1:b2:91:16:e6:fc:01:cd:ba:6f:02:
63:38:cf:b6:1c:ad:68:ae:75:e9:f2:87:08:bb:14:
bc:34:69:14:46:f1:28:ca:f8:d5:bc:ee:3b:cf:95:
34:9b:9a:fd:b6:60:6a:bc:72:5a:a9:aa:a0:7e:ac:
1e:b8:20:a9:2c:97:a5:ec:c7:59:05:3c:66:81:ea:
58:7e:84:e3:02:77:71:a3:cf:5f:1d:b4:bc:b9:82:
1a:58:36:cd:af:df:38:9f:7c:fd:1b:2e:d7:71:a5:
5b:86:83:42:da:f0:6c:c9:14:86:2b:d3:cc:40:84:
ae:4f:c0:26:76:a4:af:36:4d:d4:76:f6:e4:2f:54:
af:e6:ee:d8:0b:53:0c:db:c7:d0:85:30:61:4a:0a:
9e:81:46:bb:f3:a5:9c:63:e8:ff:46:4d:c7:88:aa:
c3:60:36:18:8c:18:cf:dc:74:7e:f6:5e:13:85:d4:
bc:c9:28:13:d1:ed:b6:51:0d:1a:be:fc:db:ce:d1:
de:b1:85:c9:54:f1:fc:7d:a8:d5:a5:7b:d2:d7:ad:
62:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:18:15:A1:72:84:01:1E:97:EC:0C:DC:16:69:DD:8B:CB:E2:A6:70
X509v3 Authority Key Identifier:
keyid:E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e4:bd:f3:a9:a7:71:cf:6c:da:90:c5:fa:d9:42:9b:26:b6:
f0:4c:ab:24:a3:82:12:02:5b:da:b3:4f:fc:93:a0:fa:85:bd:
af:f4:23:e0:12:48:3f:8a:41:17:2d:eb:4a:c5:21:44:70:c1:
56:01:bc:f1:9e:36:5e:c9:b9:dd:14:29:14:bd:8b:48:a8:21:
e3:e9:4d:f1:30:ca:bd:40:d6:26:5a:c7:1d:01:c3:48:7e:5d:
81:7c:3b:cf:3c:21:88:79:cd:e2:80:7d:d0:8b:c8:6b:5b:22:
ac:e1:e2:cc:43:d2:e9:98:c3:11:02:9c:9d:14:21:7a:ba:4c:
f4:71:f8:2d:19:2d:7e:16:2d:ef:85:d7:8f:df:cb:fa:c0:ec:
dd:0c:65:e5:62:e9:65:df:4e:79:a8:f9:51:d1:f3:f9:e8:ad:
a7:fe:d6:89:ae:72:79:dd:1d:77:6c:94:d4:e7:ce:90:f5:12:
44:99:6f:43:6e:03:69:33:e4:ea:5d:46:c6:34:e0:f9:a9:65:
f4:cb:2f:e2:f4:8e:fd:75:03:9e:8c:94:ce:99:a6:99:fa:5f:
72:75:86:67:8f:a6:c1:d6:ec:10:f3:ca:f6:08:25:1a:f6:e5:
6b:4d:c6:24:f5:92:97:82:76:66:75:20:f6:47:64:eb:0c:c8:
92:dd:d4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:31:40 2025 by rpki-client