Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File: 5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier: BEIC0vlqH8JGEvTKw474aPqK/VTIQMT4sw+ZAD7BK3A=
Subject key identifier: 0B:94:FF:98:D9:BA:72:0A:2B:53:88:8C:3F:20:AB:72:CA:35:98:4A
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer: /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial: 019682101165D0EFD652E5EDE2557E76012E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number: 0BA2
Signing time: Tue 29 Apr 2025 15:00:13 +0000
Manifest this update: Tue 29 Apr 2025 15:00:13 +0000
Manifest next update: Wed 30 Apr 2025 15:00:13 +0000
Files and hashes: 1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: AxTj9dbh7S2A8opCDiD1XpfFQsI7eHHEtRLGhqV5jz0=)
2: PPydfwM1qrJ_5LEP2Lu7pEc74lg.roa (hash: pMnth1QdrHrp1n0i0bRqhdBwVaon4su5sBWJ9WYdSts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:11:65:d0:ef:d6:52:e5:ed:e2:55:7e:76:01:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
Validity
Not Before: Apr 29 15:00:13 2025 GMT
Not After : Apr 30 15:00:13 2025 GMT
Subject: CN=0b94ff98d9ba720a2b53888c3f20ab72ca35984a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0b:3c:7d:f9:0d:29:75:dd:cf:9b:4d:3b:fb:
05:76:67:eb:6f:47:a3:75:4e:95:0f:4d:b8:78:53:
1e:23:6d:83:26:b9:80:93:fc:02:2a:55:e8:2d:f2:
ac:4d:42:04:6d:a5:2e:1d:17:05:ea:d5:08:ad:33:
d9:4f:00:91:48:33:3e:e7:44:9a:4c:59:ef:e6:b8:
35:b7:58:12:07:ec:1a:3f:ae:14:09:99:af:6e:5d:
1c:84:cd:fe:8e:e6:df:23:c2:da:42:b1:04:08:c8:
f6:85:18:db:e6:2a:15:13:fe:d6:b7:15:cb:24:9b:
9e:d9:67:a1:b7:14:7e:cf:d3:0a:f8:81:29:4c:56:
18:36:aa:76:4e:61:4c:6e:1e:20:a2:c5:2f:1f:4c:
33:e3:26:d6:f5:5b:76:4b:2f:8c:09:85:10:07:a9:
ac:d1:37:45:cc:77:f5:33:b5:dd:27:29:49:d2:43:
4c:06:44:9d:48:bb:66:6e:b0:9a:3c:08:56:0a:09:
6b:da:6b:98:b7:10:5e:89:18:66:6e:24:f6:bf:78:
86:a3:65:0c:ad:97:93:fc:e1:e9:b5:bf:cd:97:ab:
43:66:32:65:08:4e:e8:b2:d6:8a:25:64:be:df:f6:
a2:35:07:06:19:c5:84:97:bf:eb:47:69:82:d0:7d:
e9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:94:FF:98:D9:BA:72:0A:2B:53:88:8C:3F:20:AB:72:CA:35:98:4A
X509v3 Authority Key Identifier:
keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:22:17:bb:96:bd:73:df:fd:d6:75:86:ee:58:2f:98:41:cd:
2b:a9:06:0b:d0:e8:b9:36:ae:e0:f3:72:a9:f4:7d:d5:5f:04:
a2:73:49:be:07:91:8d:b0:18:7a:49:fe:0b:69:75:83:9b:96:
1b:ac:f3:81:ff:c2:f0:ea:af:02:5b:71:92:08:68:31:d4:52:
9b:ec:90:bd:b8:d0:b9:d3:d3:0d:b3:a4:6f:cb:62:40:e6:24:
34:f3:7d:89:0f:b6:19:f4:08:e4:de:45:34:b8:83:1c:ec:f2:
31:bf:88:a2:07:4a:64:bc:99:c8:92:4a:5e:cb:10:7b:c0:cb:
05:27:46:a3:a9:a1:4d:17:3b:9b:b2:e2:83:7d:a0:2a:19:fe:
d1:38:5b:37:6c:71:41:1c:dc:d5:c7:91:74:c0:2f:36:10:f0:
ab:35:39:68:81:97:a5:c4:92:31:d2:bd:ab:79:fa:62:5a:f6:
d7:73:7e:f0:35:5b:68:78:27:d0:83:58:63:8f:5a:ba:d4:29:
7d:ff:1e:09:ed:a2:7c:78:9b:20:7a:81:ad:dc:89:59:06:fd:
84:da:b7:04:4d:df:e3:6a:8f:53:aa:7e:a4:58:50:4b:63:c8:
44:07:03:87:2d:01:4c:47:f9:19:77:eb:c2:2e:06:a3:1a:ca:
e6:04:60:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:20:49 2025 by rpki-client