Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
File: 5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json)
Hash identifier: q6mv40pdAujfC0B4Cqp/LOqaMAC5VVC9lfgUSh4wmyE=
Subject key identifier: 68:DC:32:A6:CA:07:2D:89:18:AE:31:D8:2E:6C:C5:4E:C4:59:79:FA
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial: 01967F0F044DF7427931093C5D548D0E629D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
Manifest number: 11C0
Signing time: Tue 29 Apr 2025 01:00:12 +0000
Manifest this update: Tue 29 Apr 2025 01:00:12 +0000
Manifest next update: Wed 30 Apr 2025 01:00:12 +0000
Files and hashes: 1: 1-KxbHOd8IAxtF53PSxnQK1T4mVs.roa (hash: kPs2MrTsmIOrVH1y0/AHb3IDoxZ35cj2beaiWFS9sJI=)
2: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: v9JEbj8EeC71gGbxSJTF8/LaNSdEVNXX4Iu8pVtUHxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 01:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:04:4d:f7:42:79:31:09:3c:5d:54:8d:0e:62:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Validity
Not Before: Apr 29 01:00:12 2025 GMT
Not After : Apr 30 01:00:12 2025 GMT
Subject: CN=68dc32a6ca072d8918ae31d82e6cc54ec45979fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:19:e8:37:22:28:39:94:6c:9d:7e:f3:fe:4e:
aa:9b:68:c4:4b:03:51:7d:53:cb:c4:12:fc:ba:ea:
f7:34:c9:e8:5e:af:6d:fb:06:de:a3:20:a8:05:a5:
19:8a:9e:83:da:12:e8:97:2d:07:bf:f3:96:cb:b6:
a2:c5:90:ef:61:20:76:41:ae:28:cb:52:4d:6f:7d:
a6:3e:66:17:c7:0a:34:bf:bd:be:29:70:e9:3b:4a:
d9:a6:a0:57:88:21:c9:37:ed:fe:10:6f:a7:15:ad:
bc:51:4e:48:9b:0d:9b:8e:94:d1:9a:e7:c4:34:a3:
35:68:1b:e1:62:85:53:ba:88:9a:36:e5:73:95:72:
ad:92:0c:c1:2c:ba:cd:b0:79:c9:98:d2:61:34:9f:
e9:c7:ca:19:79:d6:e4:6b:02:cd:cf:0c:b9:dc:ee:
9b:a9:40:14:9c:ea:37:ef:fb:5f:eb:da:e9:c8:66:
a0:bd:aa:c0:47:e7:27:fc:83:5b:b7:41:b8:92:9c:
58:ee:60:1b:f0:23:c8:27:c6:bd:dd:6c:ba:9d:0f:
40:4a:f8:93:c2:6e:6d:ad:ae:8b:17:d2:57:f6:bf:
ec:99:ba:f2:36:b9:6d:5c:d2:b6:f9:80:05:c9:e4:
19:0d:7a:5d:5a:4c:19:94:b9:eb:d7:35:2a:7d:36:
d2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DC:32:A6:CA:07:2D:89:18:AE:31:D8:2E:6C:C5:4E:C4:59:79:FA
X509v3 Authority Key Identifier:
keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:81:15:5d:2e:ca:c4:19:48:08:8c:fc:c8:1d:8d:f2:60:fa:
0b:ae:08:cc:73:7a:c4:72:48:43:cf:84:40:1c:4b:b1:77:79:
5b:e8:36:d4:7c:e2:91:36:c8:e9:ad:0b:8a:14:e4:76:28:7a:
db:ea:96:5a:95:f7:82:73:dc:bf:45:51:d4:55:e6:4b:27:28:
f7:f9:a7:64:02:d7:7b:73:cc:b8:ff:d6:e7:4b:26:77:35:21:
d7:1d:b3:0d:08:7c:5c:dd:9b:03:d0:9e:2f:0c:23:67:94:6a:
66:e8:57:0a:73:b7:50:fa:3f:77:bd:25:0e:90:46:43:3d:04:
22:21:1e:89:2a:d2:eb:17:86:52:9f:b9:6a:8b:7c:c9:ff:bf:
8c:fc:e9:d9:a4:c9:c3:5d:1d:21:c6:8c:85:fe:3a:f6:a6:a9:
5a:ce:54:f5:71:da:1e:f4:a0:ea:16:54:9e:1f:bc:32:df:8f:
1f:3d:c8:ee:22:5e:de:03:db:17:2c:c2:35:c4:f7:e2:35:64:
e7:8b:00:c4:22:2b:7d:0e:40:6c:af:c2:02:4c:35:33:9a:19:
0e:67:d0:bf:74:6f:3f:ec:e9:7f:fe:60:eb:cb:ed:79:a4:7a:
51:de:59:81:96:82:f4:e5:50:5c:05:1b:e1:bc:7b:40:a6:0b:
73:5d:ca:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:27:49 2025 by rpki-client