Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
File: 5LTFOvZfC4OWuVtNB9TsTnvid-U.mft (raw, json)
Hash identifier: NKtXc2jlrAvbNATugmHQ3pqeuerkWmWWM5fGUOlTdpY=
Subject key identifier: 3E:B2:05:45:41:2D:A1:03:76:D7:6B:D9:85:9C:C0:5C:BF:E6:F5:EE
Authority key identifier: E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
Certificate issuer: /CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Certificate serial: 0196A24039FD699F61800357F35A1885A781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 21:00:40 +0000
Manifest this update: Mon 05 May 2025 21:00:40 +0000
Manifest next update: Tue 06 May 2025 21:00:40 +0000
Files and hashes: 1: 5LTFOvZfC4OWuVtNB9TsTnvid-U.crl (hash: QWdBk7ixb7msVldJwur8h4Bc0MJoQjnSiNTfPWM09A8=)
2: HPP-Y8CcP39de0XZZOWjFIJ96v4.roa (hash: wqE/NVLKIIjuJJuVTQbIHrmfJEIIZJeODzcidgoveO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:40:39:fd:69:9f:61:80:03:57:f3:5a:18:85:a7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Validity
Not Before: May 5 21:00:40 2025 GMT
Not After : May 6 21:00:40 2025 GMT
Subject: CN=3eb20545412da10376d76bd9859cc05cbfe6f5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:82:e2:f8:a1:4e:8e:f3:b7:fd:2c:58:51:
37:2f:2e:ac:d2:39:f5:94:85:4d:cd:7b:e2:db:4d:
8b:55:ed:a7:33:e4:f6:23:1a:d4:ef:75:7b:90:67:
73:96:eb:be:ce:66:8f:40:bb:d4:78:bf:87:86:da:
f4:59:b9:d5:84:73:ca:7e:69:e5:10:3d:dd:ef:5c:
75:aa:6a:b4:e5:b6:5a:a3:84:49:a5:fe:09:68:86:
16:f5:bb:0a:c8:c0:c7:38:ba:56:b6:58:ed:9d:92:
a9:a9:b8:b9:23:cc:53:b6:0e:47:36:a0:c8:e1:87:
29:3a:10:27:4d:39:d2:3a:25:11:d0:47:f9:da:59:
b6:da:3a:dc:0b:bc:0c:0e:45:ca:d5:05:32:cb:18:
f7:47:d1:da:b0:ab:9b:e1:be:20:72:33:a7:d7:c9:
ca:0a:26:b5:35:65:58:ff:40:57:97:02:0c:5c:07:
c2:d5:5c:a2:8b:8f:89:dc:e8:f5:9b:1d:04:e1:f5:
5b:30:fa:ba:cd:45:89:1b:b1:f4:59:5a:c8:41:80:
61:bf:4f:19:26:e7:a8:1e:82:cc:14:b6:4d:ba:be:
d4:1d:b2:4c:c1:66:93:3b:f2:71:4a:b5:7d:e7:06:
42:7d:d6:26:31:3c:7d:a3:f5:f6:f8:5a:cf:5c:4c:
09:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B2:05:45:41:2D:A1:03:76:D7:6B:D9:85:9C:C0:5C:BF:E6:F5:EE
X509v3 Authority Key Identifier:
keyid:E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a2:e0:b2:2e:96:4b:7f:0b:07:81:a2:3d:21:f1:f1:e5:73:
75:17:ad:a0:d6:a9:9d:a2:e8:1e:65:9e:4f:90:64:a9:c8:e5:
4b:76:47:05:9e:ff:58:f4:cd:3b:49:6a:af:5e:04:ac:cd:b3:
29:80:1f:7c:b1:a5:4d:1c:6e:55:19:6f:12:d8:e2:0e:73:e0:
47:f1:cc:cc:33:0f:d2:7e:a4:07:de:66:0e:b7:26:cd:6d:74:
f7:09:7f:e7:68:34:f6:70:bb:37:01:3d:c7:25:c1:24:9b:27:
b7:7e:f7:6f:1a:e7:e3:c0:cd:ae:34:4a:6c:2d:5e:4e:ab:3b:
18:41:8f:5d:3c:ff:98:bb:4c:6a:21:43:5c:23:95:93:ef:00:
3b:3f:c5:d7:06:b4:bb:5c:d5:bf:da:52:f5:d8:00:9e:07:40:
31:3d:42:14:9b:0a:d3:95:85:6a:ea:cf:f8:bb:41:ed:dc:fb:
43:39:cc:62:f1:e9:e4:07:bb:02:13:aa:5d:c9:d5:48:3e:fc:
fd:bf:ee:8a:93:ac:53:67:b5:c2:99:32:99:68:90:76:18:a7:
3b:0f:db:7a:92:39:80:fc:da:ec:fc:d9:f7:dd:6d:99:8b:09:
9f:7e:b6:c6:28:2a:6c:6f:03:32:61:bd:ad:97:c0:f4:21:dd:
17:ed:0a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:39:15 2025 by rpki-client