Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
File: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft (raw, json)
Hash identifier: S0hcvAJqQOv11CszZQS5ZO6Nm6PRfgODI4AvA9Fqrkc=
Subject key identifier: AF:FA:BF:59:1A:A0:5B:52:B2:78:FB:AF:6B:AC:9D:3F:D1:19:98:4C
Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
Certificate issuer: /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Certificate serial: 01969303D5DF630EF9BE2AD2D27845B8235A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
Manifest number: 0EF1
Signing time: Fri 02 May 2025 22:00:24 +0000
Manifest this update: Fri 02 May 2025 22:00:24 +0000
Manifest next update: Sat 03 May 2025 22:00:24 +0000
Files and hashes: 1: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl (hash: U3QFW0cFfM8wCN1k0zPLyWv/5IACzeiEkbrOV625/3E=)
2: FrjAEg86v5SV-4VLldw-NEA5C1M.roa (hash: Rm7Xoat+7nBF56KNvwJMCJ6wscvSb/PfpXRNxa3KAIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:03:d5:df:63:0e:f9:be:2a:d2:d2:78:45:b8:23:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Validity
Not Before: May 2 22:00:24 2025 GMT
Not After : May 3 22:00:24 2025 GMT
Subject: CN=affabf591aa05b52b278fbaf6bac9d3fd119984c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1f:05:c6:fc:d5:bc:c7:22:00:cb:fb:02:5c:
bb:fe:66:b7:2d:6e:a3:21:d4:a0:d9:2e:65:93:df:
f7:be:74:85:b1:4e:9d:5c:ab:48:2d:8c:9f:e8:9a:
74:bf:0b:92:e9:1a:b4:33:1b:24:0b:9a:34:da:13:
31:45:2d:1a:58:6f:48:bc:92:0a:0e:eb:df:2e:fd:
49:40:6a:e5:79:98:5c:88:47:43:0a:77:6d:63:a0:
b5:7b:ff:b1:65:32:00:e5:6c:a9:87:84:d9:cc:21:
c0:c2:8e:b2:fc:e3:60:ff:e6:d1:8d:39:8e:f7:00:
39:cb:9b:fe:c4:18:d0:d8:00:75:40:4a:c5:65:3f:
98:02:7c:9c:a2:9e:ad:04:fb:c4:5c:11:6e:f5:f0:
41:7f:dd:e3:03:3d:40:c7:26:47:ac:5b:a8:ed:e5:
01:ef:da:cb:78:d7:a7:fa:45:39:19:37:9d:3e:87:
e2:52:df:03:29:59:95:52:d9:dc:16:96:77:d8:ff:
41:4a:65:5d:8b:8c:44:ef:0c:e5:7a:23:21:d7:74:
8c:c6:06:c8:41:96:a8:63:c1:14:7d:ce:0f:c8:74:
2c:00:9f:ba:5d:10:cd:ef:c1:d5:13:9a:fa:20:1d:
7e:1f:e1:66:e8:48:b3:02:3d:a0:b5:b1:50:94:95:
26:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FA:BF:59:1A:A0:5B:52:B2:78:FB:AF:6B:AC:9D:3F:D1:19:98:4C
X509v3 Authority Key Identifier:
keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:12:de:a6:23:76:39:a4:af:53:8b:58:cb:68:5c:39:32:4f:
41:aa:fb:ac:f3:10:2f:ad:ae:f3:21:c1:c0:d6:57:ee:4e:04:
c5:5c:44:5c:86:b1:31:0a:70:84:2c:cb:62:d0:45:dc:ae:b6:
e9:90:ea:fd:93:2f:94:47:03:d4:58:76:82:08:43:d9:b5:bd:
de:07:03:e6:65:cf:b0:bf:8e:08:2d:f4:0e:44:24:46:95:b7:
f0:ab:50:c1:68:76:eb:ac:43:fd:29:01:61:e0:37:c9:9a:1a:
31:e1:07:43:63:7d:6e:47:bb:f5:52:3e:6b:56:02:09:e8:8a:
38:13:5e:f4:02:e6:25:cf:82:cb:9c:0c:5b:a5:4f:c1:c6:02:
2f:32:33:0f:ba:72:5c:fe:c5:4d:25:fb:88:8e:e0:d2:34:af:
be:20:0e:96:54:11:18:0b:5c:3b:37:f9:29:a4:34:7e:fe:4b:
b4:b3:f9:7e:37:07:b8:c2:8d:9c:ce:43:ef:c0:16:d3:86:cb:
fd:bd:e4:dc:85:4c:44:35:a9:96:e0:b4:f5:0e:9c:cc:bf:65:
2d:5d:2b:89:27:25:f3:4a:da:86:a3:09:73:8e:c6:bd:75:7b:
80:61:48:c4:5b:d3:d3:19:fb:a8:d0:a0:7f:58:17:39:91:20:
ad:1c:e8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:17:26 2025 by rpki-client