Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
File: Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft (raw, json)
Hash identifier: 4WQ9amYcjpSSSkjzx5F6rHwCXFoSVTd2QoTKNdqlG8Q=
Subject key identifier: B9:FF:47:4D:FC:52:1F:69:68:42:88:50:E0:AE:8F:A0:0A:CE:1A:DE
Authority key identifier: 19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
Certificate issuer: /CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Certificate serial: 019676E8521877883D9520EA103EEAC29AA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
Manifest number: 05BE
Signing time: Sun 27 Apr 2025 11:00:58 +0000
Manifest this update: Sun 27 Apr 2025 11:00:58 +0000
Manifest next update: Mon 28 Apr 2025 11:00:58 +0000
Files and hashes: 1: Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl (hash: IUGpdxPqExE+GtjT+mdttkdcAI1AGjTWIsl+2PMNWtA=)
2: UDJ25qWD57Bw7FcU1JLbyObIuuo.roa (hash: DrbNben6Azyc3081NKjsbYp37NNjbptdcPBV8kesvaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:52:18:77:88:3d:95:20:ea:10:3e:ea:c2:9a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Validity
Not Before: Apr 27 11:00:58 2025 GMT
Not After : Apr 28 11:00:58 2025 GMT
Subject: CN=b9ff474dfc521f6968428850e0ae8fa00ace1ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:86:3a:66:28:3f:67:77:e4:d6:c0:c3:b9:55:
45:68:c8:fd:00:08:f9:37:45:32:d1:ce:67:49:7a:
2e:32:47:08:64:33:e6:ae:4e:77:03:7c:1e:fc:ac:
0e:97:6f:1c:ec:1c:1f:7d:82:f3:77:35:08:34:6a:
22:8e:e5:3f:b1:7e:43:b3:7a:fb:5f:7d:d8:43:53:
5d:fa:1c:96:bf:04:9f:64:b8:0b:64:f3:e5:f6:e7:
90:80:c7:53:3f:12:40:19:51:0d:bc:81:26:1f:14:
55:8e:9d:a0:36:53:63:0c:70:8c:76:cb:6b:ad:63:
98:00:94:c8:ee:eb:73:c0:52:d5:b2:42:da:bc:0d:
35:95:6e:b8:cd:95:73:17:9f:c8:cf:3f:5a:20:f6:
92:c3:f7:e5:7e:0d:0a:a3:aa:a8:e5:aa:ca:7f:c7:
f2:fa:62:d3:82:f8:22:d2:87:5a:cc:c1:ac:88:eb:
58:c5:bc:fc:9f:b0:d5:d2:2c:d1:0b:0d:5a:5d:1d:
7d:2d:9d:74:c8:03:9d:30:e7:47:b0:56:8f:8c:03:
76:96:33:4f:8a:bd:86:75:93:1f:b5:aa:9b:67:02:
33:e3:95:b7:02:9d:26:5e:98:93:30:40:3f:b3:90:
d0:f2:79:1f:5c:e0:cf:58:65:95:a7:65:e3:4f:6a:
91:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FF:47:4D:FC:52:1F:69:68:42:88:50:E0:AE:8F:A0:0A:CE:1A:DE
X509v3 Authority Key Identifier:
keyid:19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d1:d5:27:59:d7:9e:5f:c3:87:31:0c:38:69:18:66:5e:3a:
38:f1:05:7a:d5:14:82:38:5e:ee:f4:40:74:cc:07:37:75:30:
b4:0b:f4:b9:71:f4:7e:30:d2:69:69:45:19:66:00:c1:23:f2:
4d:6d:69:f5:5d:da:d5:9f:02:21:cd:23:cd:fc:3b:0d:b2:2d:
77:07:12:ab:17:2f:a2:bc:ec:cd:66:97:e1:e8:c5:ff:ff:4a:
ad:fa:fd:96:72:45:f3:9b:5e:66:d0:7f:5b:4b:18:3c:54:b4:
8a:6c:af:4e:34:b9:c8:e0:88:4f:66:72:e4:b5:e9:60:4d:65:
4b:d5:04:e3:3d:99:3e:81:84:dd:f6:8d:a4:c0:69:0c:d3:dc:
c2:72:ed:c1:94:67:69:b0:e5:86:26:bc:cf:49:4c:78:65:70:
7c:60:2f:d0:61:e6:b6:27:ae:4c:15:d8:90:ea:b5:51:f1:a9:
f6:ca:ab:b3:ab:f6:89:64:bd:56:27:31:ba:be:7a:91:da:98:
9a:78:5c:c1:fd:5e:e9:b1:f6:b7:81:cd:02:28:a6:c3:4b:97:
e0:4d:a7:1b:f7:ff:93:cc:0e:68:2f:44:bc:c6:84:29:45:89:
9e:b1:d9:77:8a:c0:f7:6a:c7:cb:55:35:e6:3e:c4:d2:e2:75:
30:97:1a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:59:02 2025 by rpki-client