Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
File: 5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft (raw, json)
Hash identifier: P4fGIo6u4+iVRaNMM1j+G+8GccRSfsOqqisrbZd4h+k=
Subject key identifier: 4F:B0:FF:4C:EA:4F:52:17:41:F7:B6:DA:BF:5C:A8:9A:46:8E:AD:41
Authority key identifier: E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
Certificate issuer: /CN=e5de0de73e73874bbc66738805d373cab833b7a5
Certificate serial: 0196722F7D2B4DF7DAA36BD8D5C704B539C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
Manifest number: 14C6
Signing time: Sat 26 Apr 2025 13:00:36 +0000
Manifest this update: Sat 26 Apr 2025 13:00:36 +0000
Manifest next update: Sun 27 Apr 2025 13:00:36 +0000
Files and hashes: 1: 5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl (hash: wdkGjSZN2zAmvjy8w4mqBQqvfbrZ4af0/X1aOuOqpS4=)
2: KRSzUBxyLebIHKF4Pc56YInJ7G4.roa (hash: bYjIh5qsMD47j13Dp6UvpgvAJLXcSZU6nC4Ef8AfKgY=)
3: twkvRlKBbWGvXorm0QWgUQL2aXw.roa (hash: RdMA83SLaDMkPV3ykgU6NQ7K1hlLuBXMiacxW37ziVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:2f:7d:2b:4d:f7:da:a3:6b:d8:d5:c7:04:b5:39:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5de0de73e73874bbc66738805d373cab833b7a5
Validity
Not Before: Apr 26 13:00:36 2025 GMT
Not After : Apr 27 13:00:36 2025 GMT
Subject: CN=4fb0ff4cea4f521741f7b6dabf5ca89a468ead41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fe:03:41:6e:4e:0e:ea:fd:ce:48:38:ac:39:
86:50:f0:93:4d:04:13:4d:f5:69:6f:f3:27:c1:90:
7e:81:34:0d:85:e0:53:18:32:54:62:22:1e:cc:1e:
74:1a:e2:a2:30:2e:36:d8:b1:a0:ea:d0:14:fd:01:
8f:0b:c7:09:a6:30:b5:6e:d7:59:2a:2d:eb:17:94:
db:01:68:84:ee:02:79:2e:c1:d0:b3:a4:6c:54:35:
83:3a:96:64:cc:87:cc:c8:41:f2:58:6d:50:22:b2:
8d:7e:66:dd:9e:59:3f:f0:3a:61:58:49:be:0e:cc:
8f:91:90:87:15:8e:c3:f3:ae:7b:94:26:13:2f:fa:
fb:b6:58:9d:a4:48:72:49:c6:c0:0b:de:34:7d:d5:
fb:9e:8d:07:c0:f8:e5:3b:10:47:3c:ac:e1:4e:44:
10:25:f2:12:a1:3b:49:64:3e:52:cc:aa:88:41:92:
71:f7:37:41:d1:69:01:d8:7a:81:25:93:95:13:85:
f3:44:df:89:b1:e7:ee:a8:b7:f8:94:8a:c0:5c:5f:
3b:e8:ad:d5:b6:34:ef:b2:ed:d7:34:df:d9:5b:0a:
25:35:57:a9:af:28:ee:78:95:cb:9f:0c:94:3e:17:
7a:8e:56:bf:49:f1:41:71:56:1b:c4:af:73:0a:c7:
03:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B0:FF:4C:EA:4F:52:17:41:F7:B6:DA:BF:5C:A8:9A:46:8E:AD:41
X509v3 Authority Key Identifier:
keyid:E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:05:63:6b:c8:51:b6:51:c9:5a:86:0e:7b:97:16:43:db:da:
5c:b9:2a:d4:82:03:f3:cb:3a:4c:39:c7:86:1e:ab:29:a1:08:
34:78:50:35:ac:e4:de:1e:0b:b9:34:8e:44:8a:96:03:49:0d:
98:dc:c1:f7:1b:a3:56:d0:26:77:35:f9:3d:3d:14:f4:47:0b:
9f:f6:c6:c1:e6:26:fd:b1:a3:3d:0d:c5:12:91:30:41:00:34:
19:81:12:89:bd:a4:c4:ff:f6:9f:fd:5a:c2:c9:28:d6:60:d6:
55:39:7c:10:2f:7c:3f:4c:3f:c8:08:b6:f5:36:93:98:60:50:
c7:57:55:17:95:57:d4:70:fe:19:45:09:90:3c:f9:20:0a:95:
6b:90:1b:e0:53:a1:12:df:a3:45:36:c6:e7:01:8a:3a:d7:78:
1a:4d:03:ad:b1:df:7f:fd:eb:18:8a:42:1b:75:42:4f:16:9b:
76:6a:8f:b7:19:2d:af:53:cf:9c:c0:e1:07:c7:98:05:cc:b8:
10:f1:ed:16:3f:41:16:19:08:dc:e2:db:0b:73:49:1d:85:64:
6a:bd:03:df:f0:4c:f1:b1:f6:be:51:81:31:5f:3f:9f:8a:96:
b8:03:4b:de:64:1b:f1:f8:da:81:db:b3:de:3e:a8:f5:4d:71:
1d:52:96:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:36:50 2025 by rpki-client