Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
File: 5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json)
Hash identifier: xTNzygUiT1r0eDaF6CCght1Sm46yqPcTpqS20ZtTsmE=
Subject key identifier: C0:23:15:7E:D8:05:1C:60:0E:AF:D2:F8:7B:0F:E8:34:5A:0D:71:BE
Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Certificate serial: 01967C4578C2519DDF693FEC9D94EC2871D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
Manifest number: 0649
Signing time: Mon 28 Apr 2025 12:00:49 +0000
Manifest this update: Mon 28 Apr 2025 12:00:49 +0000
Manifest next update: Tue 29 Apr 2025 12:00:49 +0000
Files and hashes: 1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: KWeKRAvw1Cjl51kzUVll4WVTt2cClsPyfBcic9G6fMs=)
2: KFEMCZhH126h5EdMOEzOYR3jl7A.roa (hash: i0lu4HO1DlJaiLzdVoxYyKbrNJlxsepiYz5nfS8kc00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:78:c2:51:9d:df:69:3f:ec:9d:94:ec:28:71:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Validity
Not Before: Apr 28 12:00:49 2025 GMT
Not After : Apr 29 12:00:49 2025 GMT
Subject: CN=c023157ed8051c600eafd2f87b0fe8345a0d71be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:34:ee:ee:a6:d9:59:5e:f3:61:6e:3d:97:
dc:09:61:91:b1:d8:49:49:54:c4:16:e7:97:f1:4e:
32:8f:e3:4f:e8:d2:6d:7c:c2:13:f6:32:08:30:33:
4f:0c:90:92:b3:92:7d:69:56:35:b7:f2:9d:73:40:
e2:5f:9e:12:b1:c4:5d:04:d8:53:30:f8:9d:fb:7b:
36:da:1f:6f:fc:9d:76:b5:7e:b8:53:4d:83:10:72:
d6:4b:df:a2:68:94:f6:53:de:56:4c:75:20:53:dc:
34:65:1d:29:e0:81:44:3e:fc:60:81:32:51:95:03:
19:15:86:03:fa:67:fd:a5:0b:b7:ae:1f:92:54:5b:
e9:84:ed:54:af:19:18:3e:c8:a8:9e:bf:4e:89:d5:
07:6c:ac:6e:26:65:e8:66:ab:dc:b2:99:f9:00:58:
4f:5c:88:92:1e:1e:5c:39:81:12:38:4d:ee:68:37:
af:1b:7f:3d:1f:e0:b5:d8:15:46:0f:13:bf:24:a0:
a5:68:6a:ec:66:37:a8:5b:2e:88:3e:9b:3a:f1:52:
c5:7c:ef:87:53:24:5f:87:a8:9a:ba:a0:fb:d7:f1:
be:75:c9:4b:e6:ba:57:fa:9a:d7:0b:72:86:ad:2a:
23:98:60:21:ed:18:2d:fe:91:03:be:2a:6f:4b:41:
7c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:23:15:7E:D8:05:1C:60:0E:AF:D2:F8:7B:0F:E8:34:5A:0D:71:BE
X509v3 Authority Key Identifier:
keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c9:bf:5e:60:20:3a:d6:bc:d6:9f:68:bd:ad:f8:55:84:bb:
82:aa:6f:b2:b0:3d:e7:d8:c0:a1:6e:e0:db:be:71:7e:e5:46:
62:39:41:2d:50:29:63:08:65:f9:43:e7:c2:56:9c:61:97:24:
5e:4b:3d:c3:9e:16:71:bb:43:c2:d8:9b:45:4c:83:07:b7:ec:
f4:3a:18:60:06:c4:d6:4f:58:a7:50:80:4b:e8:21:9f:00:05:
8c:fb:94:6f:8b:71:eb:b3:3e:9b:77:6d:b8:03:da:9b:5e:b3:
07:cc:82:51:6d:d7:be:6f:59:0b:62:b6:30:da:d6:15:47:57:
a9:20:88:bd:95:06:bd:1a:54:a5:b8:16:ab:8c:db:5a:4c:75:
46:63:3f:6f:36:74:e6:94:92:2e:0f:31:2a:c7:97:cb:58:5f:
ea:ca:89:63:8a:18:4c:54:0c:90:45:19:cf:f6:8c:ee:03:1b:
87:d1:21:0a:63:b0:df:13:2b:b9:7b:9e:f9:09:e0:64:c8:f8:
57:83:df:c4:a7:8a:94:a4:ed:36:aa:0d:e3:6f:fe:33:62:55:
f4:6f:c9:4f:2c:d2:91:62:aa:15:21:5c:69:01:f5:93:63:65:
7b:75:e0:d5:b7:42:dd:d3:5e:7c:58:29:3f:72:24:5e:ce:db:
14:2f:66:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:31:07 2025 by rpki-client