Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier: Pq3SX8r8I0JXhqyla9I2UVdjo0sFXKIzFsqF2yGAgdA=
Subject key identifier: F5:5D:93:83:D3:CF:6D:14:AB:13:0B:9E:A3:DB:68:45:95:0C:37:16
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 0196821010115D7FA0D181ED3932C7F8AC3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 15:00:12 +0000
Manifest this update: Tue 29 Apr 2025 15:00:12 +0000
Manifest next update: Wed 30 Apr 2025 15:00:12 +0000
Files and hashes: 1: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: SSpBZ1B7T217z9kTBn0rDJ0KZ04RUvjk7R+qlzeX54g=)
2: FR3a7fbq59iIo0zAlvy5kzi1iZU.roa (hash: Z35c/JbC3hZCBf85VdNEpndC+c0TUxZMQxPjJSIsAQ0=)
3: suPxSfpNrh7z5_Ta2x6TjwnQ2sY.roa (hash: jrCuL3fpLVTl6VSsAmka/tgQrfuz/laa7SHWrZ9+ExE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:10:11:5d:7f:a0:d1:81:ed:39:32:c7:f8:ac:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Apr 29 15:00:12 2025 GMT
Not After : Apr 30 15:00:12 2025 GMT
Subject: CN=f55d9383d3cf6d14ab130b9ea3db6845950c3716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:00:9e:83:9b:0e:09:44:88:d1:f9:7d:01:
6c:42:92:6c:73:4e:2c:f8:34:7e:e9:4a:ba:dd:02:
7c:4d:be:ca:52:0c:e6:df:24:ee:ac:14:4e:a7:67:
69:cc:76:41:f5:7d:b1:92:a1:48:eb:25:bc:00:7e:
e7:f2:47:6c:62:d8:1f:1b:72:89:93:57:83:4a:79:
2d:74:3d:bd:48:55:33:2d:e5:32:30:36:b9:1b:91:
6d:ae:c7:31:50:54:48:7d:85:98:cd:86:e8:65:4f:
f1:fb:a2:e8:e9:41:49:78:fb:6f:9e:bf:38:34:97:
55:54:46:14:e8:f9:9e:3a:d6:4d:5a:03:71:9f:36:
52:89:a6:53:fc:1d:ec:a5:29:3a:52:61:16:e2:5a:
3c:0e:60:ad:e1:72:3a:1a:09:af:38:58:a0:b1:de:
48:e8:05:b5:43:d0:db:02:68:a2:fd:d5:14:37:e2:
46:5e:ca:00:be:29:bc:12:57:d5:de:a0:cb:0d:5d:
86:81:e1:e4:79:c4:d8:e4:f4:56:c6:c0:08:8e:80:
31:32:fa:62:c3:d8:35:e0:16:0f:f9:a8:4e:9e:69:
ff:16:15:74:79:b2:4e:c2:e8:ee:5b:3a:4e:fb:2d:
f9:92:46:c6:75:21:ab:8b:28:f6:f1:cb:4c:a7:fe:
d4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5D:93:83:D3:CF:6D:14:AB:13:0B:9E:A3:DB:68:45:95:0C:37:16
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:b7:ae:19:b4:b0:46:8b:9a:e2:43:36:b9:94:f8:a4:7c:89:
da:2a:42:45:ae:8e:99:21:38:f8:1e:57:30:f5:eb:89:cb:1d:
63:a6:9f:7a:62:ee:f1:3f:00:ee:48:b9:22:06:30:85:22:b7:
19:6a:f3:2f:7b:87:a3:ce:02:9c:61:4a:83:5f:3b:74:e7:ef:
1b:f9:54:f1:67:29:df:75:74:93:87:db:c5:91:93:85:fd:8d:
82:f3:c5:d3:19:d5:96:7b:5d:45:35:29:5a:36:a5:0d:d7:d4:
73:4e:5a:72:1a:d7:03:86:4a:3e:8a:9d:d1:5b:83:f8:91:5e:
84:a1:e3:27:53:88:ce:16:3f:f7:1a:f8:8b:9d:87:98:a0:5b:
f2:be:e2:55:1b:46:81:ea:42:36:da:81:48:0b:20:aa:85:68:
84:f7:53:c0:4f:76:e1:a5:15:88:ba:d4:78:46:89:1d:91:a2:
8c:89:54:3e:15:2d:a6:38:44:02:e9:65:2a:48:64:48:b0:8f:
4e:5d:75:be:a9:e0:13:db:ce:f9:0f:7d:41:5a:44:29:9d:8c:
b9:c5:df:b1:04:de:5c:71:77:4b:ad:14:a7:43:45:c7:74:b9:
10:98:55:c7:a9:2a:1d:3e:af:e9:25:36:56:cf:95:86:0c:c3:
39:4e:07:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:40:39 2025 by rpki-client