Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
File: a5LPM5DKpYeedZcpzZAIxuylWic.mft (raw, json)
Hash identifier: V3w0yS3KPbV3NRvrOLRytE8Evtc6S4v5Fxute6T6XYM=
Subject key identifier: 5D:A3:71:E3:34:00:AC:B4:19:A6:5B:BF:0C:B1:EA:5A:B3:74:6C:E1
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Certificate issuer: /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial: 019672D43EEA1C3091D457211F7041976634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
Manifest number: 0538
Signing time: Sat 26 Apr 2025 16:00:34 +0000
Manifest this update: Sat 26 Apr 2025 16:00:34 +0000
Manifest next update: Sun 27 Apr 2025 16:00:34 +0000
Files and hashes: 1: MKVWoK3wRPR_92nYPkQa4dZVFlU.roa (hash: CUusBr3IW9QaEzh3QeMtC6ZDvXcFkIcu309/jIeDme8=)
2: UVKqbvOHvCn6HoAzG1ux5mNYX9U.roa (hash: zS7iofsDKAb9AZxOa/q1sMs1Br0lasrnbRlbpqfAq5w=)
3: a5LPM5DKpYeedZcpzZAIxuylWic.crl (hash: jzIqFlao+eaSivEKCgF4mUSho/ModcLCj6maBgBYmqU=)
4: nHW9BLq4zRW7_GDpHKk8LDtfSmI.roa (hash: wgNVfFr1EUmSTQMiYZD3CFdfwE6KU5e+fnSwgZEt6SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d4:3e:ea:1c:30:91:d4:57:21:1f:70:41:97:66:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Validity
Not Before: Apr 26 16:00:34 2025 GMT
Not After : Apr 27 16:00:34 2025 GMT
Subject: CN=5da371e33400acb419a65bbf0cb1ea5ab3746ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:19:10:10:21:98:f3:6c:4c:c3:cb:ff:d6:00:
2c:76:a9:29:fd:99:b4:00:57:fc:82:6e:49:3d:5e:
f6:36:5e:86:de:4f:ad:a9:4d:28:75:82:71:e4:15:
94:65:87:3c:c6:3a:24:30:a6:99:ac:24:a5:07:26:
d4:42:ea:1a:c0:2e:16:1c:fd:65:f3:50:93:02:0b:
1e:7c:86:ce:d2:9a:b4:48:89:66:ae:5a:4d:45:ba:
e4:f8:a1:31:ea:e7:9b:2a:b7:77:c1:03:8d:d2:2e:
62:9c:84:78:b9:30:49:b4:97:6c:da:c2:1d:f8:f1:
5d:c3:b2:6a:76:9b:77:c8:b5:5f:e7:21:dd:8c:eb:
0f:41:0a:be:a3:36:b3:dd:17:5b:f0:b6:d6:09:7f:
1a:52:94:56:d2:54:8f:21:3a:a8:3f:b1:fc:c8:b0:
4e:d9:a8:9a:72:3c:cd:78:d4:d5:ea:75:62:65:b2:
a5:3d:71:0a:01:75:82:fe:e8:53:e5:3a:84:b1:d0:
d3:65:6a:55:a9:7e:1f:0b:1b:87:c7:1f:81:3d:7a:
8a:2b:92:6f:5d:32:99:54:6f:b6:38:52:0f:c5:cd:
31:02:f4:13:03:87:f7:51:32:cd:4e:1b:e6:a5:33:
db:03:2e:cb:24:ab:89:0b:63:93:58:b1:7a:96:10:
94:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A3:71:E3:34:00:AC:B4:19:A6:5B:BF:0C:B1:EA:5A:B3:74:6C:E1
X509v3 Authority Key Identifier:
keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:53:c6:d4:37:ff:c7:d2:b7:f3:fc:39:62:db:a2:5a:3a:6f:
73:eb:25:02:eb:14:63:5a:b8:fe:93:ae:01:a1:9a:81:34:76:
82:6b:d4:48:86:89:7b:b6:14:df:bd:d4:d8:04:3b:b0:40:94:
e2:45:04:7e:ad:ca:90:7f:5e:39:fa:aa:7b:a4:14:1e:42:5d:
34:5b:be:ed:c6:09:16:7f:bb:6f:5f:b8:3d:7f:87:2e:3f:61:
75:d7:27:c6:e1:b4:70:df:af:2b:0a:c2:70:0d:55:93:65:2f:
b6:b7:38:c2:7d:1f:a9:1c:86:2c:41:0d:48:23:57:91:1b:f9:
e2:7c:74:be:62:30:fe:e7:d9:81:36:c0:7f:3b:7c:0f:5b:f4:
36:61:88:bf:f7:1b:ca:35:3d:8f:7d:70:aa:72:2d:2d:1e:0f:
ac:ee:6a:cd:12:b7:62:90:b5:07:57:d5:da:96:aa:72:70:03:
ee:ed:e3:06:bc:e0:4b:43:5b:16:48:90:6d:7e:40:3f:5b:c9:
49:2a:11:19:95:d1:b7:54:46:2c:5a:60:9e:b6:96:e6:71:0b:
62:7b:69:a3:42:a1:b8:ee:17:a5:5f:60:1e:f3:12:3b:08:d1:
7e:89:4b:b2:7b:b7:fc:e8:d9:4c:98:33:89:51:bb:20:ca:56:
3b:0b:6e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:03:21 2025 by rpki-client