Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
File: 5RgEXPvZajduyY4_Xosq-xTMqTw.mft (raw, json)
Hash identifier: wDgiAFiCM00VeBoifuVGqHhy11FkTwDoJCUD7imUgXo=
Subject key identifier: 40:B6:BB:47:FC:D9:73:CE:5A:58:4D:A9:B6:D9:2D:82:08:F8:43:E0
Authority key identifier: E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
Certificate issuer: /CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Certificate serial: 019673AFF8BF7945477775502C545652E0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
Manifest number: 150F
Signing time: Sat 26 Apr 2025 20:00:34 +0000
Manifest this update: Sat 26 Apr 2025 20:00:34 +0000
Manifest next update: Sun 27 Apr 2025 20:00:34 +0000
Files and hashes: 1: 5RgEXPvZajduyY4_Xosq-xTMqTw.crl (hash: DR/VYKS8fDtXGegjrv6B5Zr3LtMAARSTvuFsKZL4dlg=)
2: OHRptNvQN7btyzlZYvC9PKCpnpY.roa (hash: mAc+fZIgpvpgde9/WLkYrKDLdCBnkog0duL73LIoIB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:af:f8:bf:79:45:47:77:75:50:2c:54:56:52:e0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Validity
Not Before: Apr 26 20:00:34 2025 GMT
Not After : Apr 27 20:00:34 2025 GMT
Subject: CN=40b6bb47fcd973ce5a584da9b6d92d8208f843e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7f:10:e0:57:ff:df:33:81:ab:2f:81:55:20:
1d:01:e5:60:88:4e:04:f5:40:24:9f:0f:8c:45:64:
fe:e7:93:01:35:af:5c:74:a3:cb:60:a3:e3:69:0d:
66:19:59:77:58:7c:ae:f6:65:ae:fe:6c:62:f9:51:
c4:0a:c1:17:6e:eb:fc:80:6b:71:17:3d:0a:12:4a:
10:c6:92:52:9c:e5:68:7d:7b:31:23:e1:d0:67:c2:
58:57:bf:ef:bc:f0:50:27:fe:2b:71:1d:fc:7a:60:
01:98:3a:cb:61:1c:92:55:99:14:b6:81:7c:9f:5b:
4f:02:cd:59:60:3b:7a:45:58:81:2c:45:fe:50:72:
a2:31:ca:60:e7:81:ac:49:ba:65:66:b0:e3:c8:07:
1a:75:e5:9b:b2:96:4c:0f:d9:ed:69:38:7e:e9:a8:
73:c2:04:b3:55:a5:29:c8:e6:4d:e4:77:b3:4e:18:
3e:7e:4c:ab:3c:13:2c:e9:3f:dc:f0:9d:a0:01:08:
ee:54:55:b1:86:8e:3a:e8:c8:81:c2:29:ac:7b:97:
12:74:4e:d8:0c:cf:2d:f1:03:04:a4:bb:1d:51:8a:
0b:98:aa:dd:d6:d0:e4:b4:a9:04:ca:8e:95:32:d6:
d6:ba:e5:62:d3:30:13:00:46:8a:3e:16:f5:76:ae:
fa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B6:BB:47:FC:D9:73:CE:5A:58:4D:A9:B6:D9:2D:82:08:F8:43:E0
X509v3 Authority Key Identifier:
keyid:E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:00:98:40:58:82:94:8b:3e:2d:93:48:a3:90:48:75:19:c2:
d9:60:06:6f:e6:b2:2a:5e:9e:7b:14:09:01:3f:ec:8d:c2:a6:
66:ee:e0:b0:19:12:38:11:6c:ee:76:6f:55:1a:71:a2:28:18:
92:90:a9:21:19:82:db:26:85:aa:09:aa:f8:e4:92:ab:a5:29:
de:1e:5c:07:c3:4e:41:e9:39:18:3c:79:67:51:ba:e0:87:41:
48:75:64:b4:32:de:ec:8e:f3:11:35:f5:57:f1:e8:2c:5a:7a:
6d:e4:65:48:d5:17:8a:b3:3b:07:a2:66:90:06:f6:9f:c6:50:
fc:89:d2:ee:b4:2b:9c:45:c0:a6:f5:ba:2e:45:4b:3b:91:50:
d1:37:9c:0c:9c:50:c4:78:2c:3a:f7:fe:2f:b5:c4:14:1c:21:
28:bc:fb:a6:cc:c6:d6:34:a1:d5:02:d8:7e:6f:0c:18:3b:a5:
55:fd:27:e3:40:a0:ba:75:b9:ea:e7:ca:56:d5:9d:5a:c0:91:
9c:62:cc:a4:e8:6f:98:4f:aa:bd:b9:98:24:c1:99:28:61:07:
4e:b2:22:9a:9b:3c:54:86:7e:7b:14:c5:18:2d:f4:09:3b:c2:
9d:45:22:68:00:14:be:dd:58:be:f9:e7:32:34:d7:07:ac:f8:
aa:11:b1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:21 2025 by rpki-client