Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
File: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft (raw, json)
Hash identifier: wLhdlGrDJdop3nvB9RP8Ur4PIjmDJoGoZo0osyQRcFA=
Subject key identifier: DD:A7:53:66:02:42:8B:8E:39:77:BD:EC:EA:FD:35:80:78:7A:1B:EA
Authority key identifier: E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
Certificate issuer: /CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Certificate serial: 01967943F931D1372964CE863E293D219C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
Manifest number: 09C5
Signing time: Sun 27 Apr 2025 22:00:19 +0000
Manifest this update: Sun 27 Apr 2025 22:00:19 +0000
Manifest next update: Mon 28 Apr 2025 22:00:19 +0000
Files and hashes: 1: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl (hash: LitT2ZXGzAxybolq/45Bot5qHa+jxMOqCdFAE37GAWI=)
2: uzOfDn3na_0H4FMYAvULbyI0B6c.roa (hash: uAuwh9KcLGGG4HeIvB3vA//BXxot+F12ayTtv/6riqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:43:f9:31:d1:37:29:64:ce:86:3e:29:3d:21:9c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Validity
Not Before: Apr 27 22:00:19 2025 GMT
Not After : Apr 28 22:00:19 2025 GMT
Subject: CN=dda7536602428b8e3977bdeceafd3580787a1bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:ee:ce:9b:7a:9b:65:8f:ab:17:c4:88:82:
59:ce:5f:b7:79:25:cc:14:4a:aa:83:e1:97:a0:07:
42:8f:c7:7a:fc:fe:20:e1:94:5a:7f:c4:42:d0:87:
34:82:ce:f2:08:42:6b:fa:d3:38:85:b2:14:29:06:
80:71:85:28:e7:64:23:be:22:00:81:89:67:08:f9:
c2:0b:3f:30:13:fa:6c:d3:51:69:9a:23:12:e6:4b:
0c:4b:db:59:14:44:3e:13:7e:92:33:73:6d:d2:55:
a3:84:c2:c5:e5:91:21:e0:dd:3a:45:a6:e4:58:ec:
89:86:e8:0d:ea:8e:fe:af:a7:65:36:db:26:c0:d6:
b5:a2:7e:5e:80:c7:1e:e3:45:a6:b1:45:71:ec:30:
80:e0:b8:6d:82:a2:94:e1:21:53:43:57:9f:a8:e4:
cb:01:b4:e4:0f:dc:29:cf:7a:ed:bb:0d:67:1f:49:
4c:fe:ae:85:23:4c:0a:07:3c:b5:b6:55:44:ad:18:
93:dd:7d:bf:8a:c2:8b:7d:64:ef:4e:4e:3d:ee:fb:
0b:11:84:58:af:d5:a5:39:0d:82:3a:58:35:c8:5b:
ed:b0:70:42:d7:1a:f4:a0:ee:a3:fc:6b:c9:58:bf:
0c:7c:b6:e6:1f:3e:76:7a:1a:ab:4e:73:87:19:d3:
6f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A7:53:66:02:42:8B:8E:39:77:BD:EC:EA:FD:35:80:78:7A:1B:EA
X509v3 Authority Key Identifier:
keyid:E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b9:f9:26:8f:90:85:67:b7:1d:78:dc:df:db:3b:6f:4d:0d:
29:b1:2b:4f:fc:a5:24:85:cd:65:e9:b5:40:f8:95:c6:bf:85:
b0:28:72:92:df:79:29:02:f6:03:ea:5e:d6:80:50:31:b0:3c:
f6:3d:7d:ac:98:50:ec:20:dd:79:58:59:e7:1d:10:f7:31:bc:
c2:56:91:14:34:12:f5:c6:4f:c5:ef:1e:c4:8e:78:74:73:8b:
58:6d:b0:60:cf:9b:1c:6f:36:85:7a:85:ec:5a:87:1a:fa:1e:
b7:87:34:6f:ef:75:53:01:be:2b:dd:15:87:8e:5d:ac:63:e2:
aa:43:de:e6:b2:d4:ff:3c:be:85:9e:61:a7:92:62:84:26:35:
1d:b7:86:d7:72:44:a1:69:50:65:15:6d:3a:fa:c2:73:51:44:
fa:b6:63:eb:12:ff:e0:5d:35:e5:61:23:ee:4f:79:6b:c3:0b:
db:b0:10:db:52:d8:40:66:ff:16:fc:1a:12:5c:10:4e:c9:e7:
9b:46:54:f4:12:63:3d:58:2a:cd:d0:0f:07:57:fd:75:fe:06:
cb:51:1e:e3:03:5b:28:6f:fc:90:30:06:ac:98:b5:9f:65:f3:
5a:28:36:ad:98:81:89:b5:0e:c5:9a:fd:46:86:35:30:c6:76:
c0:2d:f7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:31:50 2025 by rpki-client