Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
File: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft (raw, json)
Hash identifier: gshQB8qjo/urvPFV/9VWvJAh30ES+fouDsh/0uE3RT8=
Subject key identifier: E6:58:01:A3:2A:DA:B3:0D:9A:42:7D:E5:0F:CA:B0:49:BB:F3:93:02
Authority key identifier: E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
Certificate issuer: /CN=e58ff73925a23692847ed92bc66613fd47068dcf
Certificate serial: 01968B4AFA14BC12189A1FD1DD2D04311EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
Manifest number: 01E8
Signing time: Thu 01 May 2025 10:01:08 +0000
Manifest this update: Thu 01 May 2025 10:01:08 +0000
Manifest next update: Fri 02 May 2025 10:01:08 +0000
Files and hashes: 1: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl (hash: /3Dyag6FAaSF5btAXY/rleV2IUqmBsxuVguwxOGdFYQ=)
2: LyUeFaQumjkEXGwuTN3adk_CmUQ.roa (hash: 1oee/niCKCFU/8iZhol3JSIxvOFh3whzL0NQ6+tUdxg=)
3: ldrAy5A_M0tg2d0BXg7t_q2mTmY.roa (hash: PzgoMs0khlbRVil+vbEFVoeQZaszoG+3sW3UoJkJrfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:fa:14:bc:12:18:9a:1f:d1:dd:2d:04:31:1e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58ff73925a23692847ed92bc66613fd47068dcf
Validity
Not Before: May 1 10:01:08 2025 GMT
Not After : May 2 10:01:08 2025 GMT
Subject: CN=e65801a32adab30d9a427de50fcab049bbf39302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f7:2d:c5:8b:31:83:d9:55:f6:6e:83:67:0e:
ac:34:71:45:41:cb:cb:37:61:80:d9:3b:f8:33:87:
bc:5e:ac:ce:15:0a:45:52:aa:4d:bc:23:9c:d4:33:
bf:cb:7a:40:3e:b8:0d:8e:95:67:c6:7b:27:67:27:
76:30:e6:f7:24:99:fa:22:4c:6c:d4:36:05:6e:1a:
a9:6e:37:80:9a:ba:0b:fb:89:2f:06:60:e0:64:21:
9c:05:22:0c:20:8a:08:9b:de:8e:64:97:3e:7f:bd:
45:90:6d:df:69:7c:9b:37:eb:47:d3:c9:bb:cf:44:
18:34:ee:13:8b:02:a7:ab:d4:84:f2:94:78:6f:a1:
7c:eb:6c:75:ba:5e:6b:d7:f0:34:10:42:36:cc:f5:
8f:8f:85:c6:e3:df:e4:5f:04:df:92:0d:72:a1:8e:
5b:7e:df:b8:4a:00:13:22:41:38:c2:19:38:9d:42:
47:8e:73:b9:57:66:43:f5:be:61:e4:fa:1a:f1:81:
32:99:01:da:05:f0:36:8d:de:a3:42:74:b9:aa:e9:
b0:d7:29:7e:e0:9e:7f:c1:a9:8e:73:1c:00:97:c0:
00:f8:99:03:8b:3f:23:ff:c1:79:88:6f:1c:7b:7e:
7d:76:53:1e:7c:9a:76:e5:55:be:4b:99:b3:2e:cb:
e9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:58:01:A3:2A:DA:B3:0D:9A:42:7D:E5:0F:CA:B0:49:BB:F3:93:02
X509v3 Authority Key Identifier:
keyid:E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f9:99:b9:0f:7f:5f:ab:4a:89:c3:06:ee:98:e7:d6:a5:83:
86:f7:2e:3c:c2:6b:8d:86:1e:f8:35:45:85:55:6b:c2:e4:af:
86:61:0e:8c:ff:f7:d7:ab:25:5b:e0:0b:0b:a6:f9:d8:65:57:
ad:f7:f5:53:dc:b4:c5:b2:e2:77:3e:6e:3a:16:01:63:3d:d9:
1e:37:53:33:1c:20:48:c1:ec:98:56:ab:3e:79:5f:f3:94:15:
43:92:e9:89:3f:d5:24:82:cd:56:e5:e0:a3:ba:61:e8:b9:79:
74:ee:ef:1a:b2:0b:ff:06:b9:bd:31:38:de:f4:10:03:1a:6a:
f3:75:8f:a3:9a:f1:2d:47:ad:45:f5:b3:45:01:fe:96:37:99:
5a:b1:91:43:f6:7b:c8:c8:1b:08:6d:c2:a1:bc:aa:ce:8a:60:
a4:40:db:7e:67:e8:be:ea:69:06:b9:49:4a:04:35:15:87:0f:
30:53:3f:50:67:b3:ec:97:d5:a9:ab:d7:52:92:35:69:2e:ab:
f7:19:85:c0:bd:4c:b0:49:c0:06:a0:de:5a:66:99:31:04:70:
3c:c9:d9:e1:dc:d8:33:88:b8:cf:1e:93:93:10:70:19:cb:fb:
c8:d6:8d:9c:77:cb:07:8c:c6:39:39:da:7c:d3:88:fd:3b:ba:
a3:c9:12:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:29:50 2025 by rpki-client