Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
File: 5KnudPLZhMiKs7ma5x0LfHuvgVA.mft (raw, json)
Hash identifier: 4hP0paMCiMMbnMZu16MUhDKO4EIFM7I4z34KKCutrDM=
Subject key identifier: 9C:CC:BB:AF:C7:9D:86:BF:10:CC:02:D2:DE:0B:E7:91:B8:F7:5D:08
Authority key identifier: E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
Certificate issuer: /CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Certificate serial: 0196857F25C35F3C8C6A9F9E22BDB208C6ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
Manifest number: 1519
Signing time: Wed 30 Apr 2025 07:00:24 +0000
Manifest this update: Wed 30 Apr 2025 07:00:24 +0000
Manifest next update: Thu 01 May 2025 07:00:24 +0000
Files and hashes: 1: 1kmQygnKJuFomMWscO7_tmV5MPY.roa (hash: 1R7F/hqJ/U8XRXU5qTBNp/iBMwQ2HNOAJ68qC4TlDwI=)
2: 5KnudPLZhMiKs7ma5x0LfHuvgVA.crl (hash: x1aNRGjgsmgMaBGb8sR/+8tZVRYSYCQj1a9u4BYT61U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:25:c3:5f:3c:8c:6a:9f:9e:22:bd:b2:08:c6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Validity
Not Before: Apr 30 07:00:24 2025 GMT
Not After : May 1 07:00:24 2025 GMT
Subject: CN=9cccbbafc79d86bf10cc02d2de0be791b8f75d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:77:db:69:35:fc:1d:d0:04:d6:a9:e3:c4:54:
9b:b6:7c:56:73:69:61:4b:6a:ae:18:a4:75:42:0b:
16:79:33:5a:5d:3a:d9:7a:25:ef:00:fc:14:78:de:
44:ce:96:b7:34:a0:dc:77:6f:d1:66:3b:59:3a:16:
d2:f6:07:a6:ea:d3:fe:f5:d8:85:3a:7d:18:b0:05:
bb:81:c3:e2:33:96:46:6a:07:0c:58:7d:b7:9b:70:
07:bf:80:29:b0:08:dc:c8:62:79:05:73:33:5c:36:
9a:f5:92:db:19:7c:fe:b1:83:7a:bd:96:97:54:6b:
ea:c5:80:b8:72:b5:73:a8:1a:6d:ba:ec:3b:36:5d:
c6:fb:db:42:4b:bd:a2:4c:83:b0:53:33:d1:c7:e8:
46:00:b8:4b:41:16:ec:93:b8:84:b6:ce:07:b8:53:
cb:18:29:a3:01:e6:2f:db:ff:cc:bd:c3:b8:aa:65:
a8:b9:f1:57:20:81:65:3f:96:53:e7:17:46:72:82:
68:64:78:0c:de:cc:92:e4:01:00:54:71:28:8f:2e:
c3:4f:d0:e4:4d:5d:d1:0c:6a:96:7b:05:3d:3a:1d:
ff:32:26:1e:76:06:5d:be:93:27:d4:83:63:30:d9:
89:c9:24:31:37:5a:2f:3c:dd:aa:42:fa:d2:b7:fd:
df:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CC:BB:AF:C7:9D:86:BF:10:CC:02:D2:DE:0B:E7:91:B8:F7:5D:08
X509v3 Authority Key Identifier:
keyid:E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:96:d3:f0:5b:de:fd:4b:db:7a:bb:7c:46:c4:f3:dd:d2:f6:
6e:6d:4b:91:86:3a:d0:90:5b:9c:a4:a7:45:97:10:51:d1:b0:
ca:ef:76:78:f6:7b:ca:7c:58:87:f6:f7:16:67:24:b5:69:83:
57:93:79:fe:cc:a8:dc:74:13:df:1a:a7:d2:07:1c:c4:8b:23:
e3:b5:7c:df:3e:00:84:0d:b1:60:3c:f1:8b:3f:b2:a6:80:34:
4c:ab:c7:01:21:eb:1c:99:d8:46:cd:05:34:d1:1a:f7:86:7a:
c5:b0:4d:6a:73:49:11:ed:a8:b4:a3:94:89:22:78:19:9c:8c:
5e:90:9a:80:23:07:be:80:9f:9c:a1:b6:f7:b8:88:b3:da:a7:
a8:e5:ee:eb:8f:12:5e:ca:5b:63:be:66:2b:b8:8c:2e:64:9d:
9c:bd:72:fe:9d:c7:db:70:b3:0b:d8:73:61:34:06:cf:43:48:
ec:4a:79:2a:78:d8:6d:d7:f2:92:9a:e7:89:fe:a4:45:bd:75:
45:45:d8:32:6a:84:21:25:15:f5:ce:71:d0:8d:f9:3a:57:57:
a3:be:83:a0:97:70:d1:dc:78:95:26:3d:19:9c:8b:13:a1:a6:
15:61:20:73:ea:59:fd:e2:a4:91:26:77:c5:a7:b4:56:16:06:
51:b0:b3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 11:51:04 2025 by rpki-client