Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
File: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft (raw, json)
Hash identifier: xxkKLV7oLu8citbq1N6Q2kc6x/1itaYlPJK92b0t/Wk=
Subject key identifier: 34:00:E1:A3:8E:C7:2F:BD:31:42:8C:05:1A:67:60:D2:19:2A:8F:B4
Authority key identifier: E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
Certificate issuer: /CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Certificate serial: 01969A193405549271FFC0A0675C19FD04B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
Manifest number: 1522
Signing time: Sun 04 May 2025 07:01:05 +0000
Manifest this update: Sun 04 May 2025 07:01:05 +0000
Manifest next update: Mon 05 May 2025 07:01:05 +0000
Files and hashes: 1: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl (hash: 5JI1c9d7ItDHtVQFB67rDFoJOuWcULLLGRCBOWkxLX4=)
2: orFnLXI1TH7Jt_MUuyCNlezlJcQ.roa (hash: hsQhpxV8CsTitmZs0YwImGnMA+twiLDEhUnDv5rariM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:19:34:05:54:92:71:ff:c0:a0:67:5c:19:fd:04:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Validity
Not Before: May 4 07:01:05 2025 GMT
Not After : May 5 07:01:05 2025 GMT
Subject: CN=3400e1a38ec72fbd31428c051a6760d2192a8fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:ec:dd:d5:bd:77:01:ba:6a:9c:f9:1a:ca:
78:19:b2:b5:18:03:42:d6:64:8f:ab:5f:a0:d3:50:
4a:7b:78:3a:14:64:56:bf:6b:4a:77:72:22:ab:3c:
28:13:cb:41:f9:da:58:57:70:f2:f7:ac:ab:fb:e4:
f8:73:ff:f1:98:d0:07:9f:cb:e3:57:58:2a:5c:9f:
c4:69:c1:07:2e:45:c9:22:95:02:2d:9d:66:57:da:
84:12:15:d5:bf:eb:71:7a:39:10:d7:95:9f:46:08:
ff:bd:7c:fa:0d:91:5d:9a:0b:4f:2e:3a:b2:5b:99:
87:ac:20:a4:d1:f7:61:79:04:1e:ad:e7:f7:9d:01:
48:ac:92:70:ae:9f:49:29:8a:f9:fe:b2:e9:91:23:
69:b8:6d:95:24:4b:00:f7:b1:3d:03:3d:c1:dc:aa:
fa:27:59:c2:20:c9:12:8a:d2:2f:b9:c1:cd:18:69:
5b:18:35:b8:04:54:84:64:31:53:fa:5c:1e:ae:32:
2e:e2:9d:52:d1:9e:4d:3b:7a:dc:fe:ce:16:43:3b:
48:ac:6e:04:d6:08:8a:e5:cf:b1:3e:94:9d:0f:8a:
86:e5:b2:9b:a1:10:10:4a:9b:ed:bb:85:95:6c:2b:
53:e4:97:68:7e:a5:32:f8:44:49:c2:5e:07:6f:05:
d0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:00:E1:A3:8E:C7:2F:BD:31:42:8C:05:1A:67:60:D2:19:2A:8F:B4
X509v3 Authority Key Identifier:
keyid:E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1b:f8:02:94:21:b1:81:c0:97:b9:9a:99:6b:39:73:ee:af:
d0:8d:a4:af:3a:d4:50:82:58:7b:1d:9d:11:27:43:76:d9:b0:
2b:cf:80:f4:65:a1:57:c9:56:00:be:81:24:bb:45:48:d5:64:
28:e6:16:a0:9f:39:32:21:c1:03:b2:f0:cf:84:5c:f4:84:67:
58:8c:f2:18:d3:57:12:8a:4b:a7:2e:cd:bd:bc:3c:6a:7f:1a:
7d:71:39:e9:4e:53:53:40:24:03:86:2b:bd:9f:18:5f:27:59:
87:0a:ec:38:f5:91:57:f9:1a:86:f5:30:ae:74:5a:6c:fa:24:
d5:ec:f5:2d:0e:b8:30:73:11:23:28:08:2b:b1:d4:a9:da:d2:
61:cd:a2:6b:e9:2b:7a:1c:3a:0b:83:89:9d:9f:f0:b8:7e:a6:
63:d4:1e:b8:1a:b7:05:23:6c:c2:2f:63:e9:46:e7:62:c1:f9:
1c:c3:3b:b6:d0:1f:31:bd:1c:b9:25:e5:2d:00:47:bd:b6:b3:
80:c5:da:c9:19:89:71:96:78:43:48:c1:65:04:e4:8c:5d:a1:
f8:92:a1:cf:b8:f4:27:90:b2:72:b1:a9:fe:22:00:c3:ec:7a:
6b:17:c8:f7:16:62:c4:2d:e6:ea:e4:5f:64:75:5d:0f:98:a6:
ba:16:d6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 11:08:58 2025 by rpki-client