Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
File: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft (raw, json)
Hash identifier: +IedA5y1RmSAuw0KPKOZw9nZH4GAzUkTuIrILvFoF9Q=
Subject key identifier: 98:6A:6B:7A:0F:FA:A7:9A:34:4D:3A:49:9B:ED:7D:AB:C1:0B:81:E8
Authority key identifier: E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
Certificate issuer: /CN=e67bc12b3685716d8ef6567e21904194377be1e5
Certificate serial: 01967E6AA69F78A0FDD47E70122E3143A9D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 22:00:40 +0000
Manifest this update: Mon 28 Apr 2025 22:00:40 +0000
Manifest next update: Tue 29 Apr 2025 22:00:40 +0000
Files and hashes: 1: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl (hash: M+Sztpk0Ma9BflXkzolg3EMWKFr05vAJkv7CZ4udRPo=)
2: CK8AO5cGK3UQexwKT4OQnvAc618.roa (hash: FFxKHiRId03ta3Wbr3GQyhjQH1qxb15B+KbsuejkB8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:a6:9f:78:a0:fd:d4:7e:70:12:2e:31:43:a9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67bc12b3685716d8ef6567e21904194377be1e5
Validity
Not Before: Apr 28 22:00:40 2025 GMT
Not After : Apr 29 22:00:40 2025 GMT
Subject: CN=986a6b7a0ffaa79a344d3a499bed7dabc10b81e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8f:53:64:f5:db:f5:7c:12:42:b8:d4:c9:08:
b8:e4:1a:b0:bf:cc:54:c2:f1:b2:5a:69:ad:45:20:
04:f3:cb:f8:64:4a:32:e6:5c:87:aa:01:2b:d1:14:
00:61:68:43:69:2b:f5:71:af:50:b1:07:00:83:88:
b9:6d:d2:12:34:c8:69:12:aa:8c:3a:7c:69:eb:84:
04:80:66:0c:23:b3:39:fc:74:ad:53:24:27:66:84:
af:21:61:11:04:39:88:91:96:b0:7a:c7:ca:a1:22:
01:5e:70:2f:fa:fd:d0:20:39:fd:e8:b5:98:0c:49:
40:b9:91:29:c4:89:0a:4e:72:82:df:d9:db:3f:76:
fd:b1:cb:e1:70:b6:4e:ce:09:4e:22:e1:98:9a:d7:
95:1f:71:aa:9b:03:12:62:10:67:9c:15:27:76:42:
78:b4:2a:62:88:20:c0:c0:47:00:6c:13:c6:6b:89:
d4:44:e0:13:a2:00:32:ea:2d:27:2b:0d:72:00:7d:
31:f5:75:a1:76:c3:3d:c8:e6:d7:ec:d8:f4:8d:d3:
be:ab:7e:03:b0:68:fb:44:b5:cb:47:ec:59:3b:55:
a5:17:e3:8b:df:c4:65:4e:2e:9e:91:22:3a:d0:69:
b9:d8:05:91:bf:25:70:ff:cb:14:49:d4:1e:11:82:
1b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6A:6B:7A:0F:FA:A7:9A:34:4D:3A:49:9B:ED:7D:AB:C1:0B:81:E8
X509v3 Authority Key Identifier:
keyid:E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:fd:e8:bc:6e:40:1c:73:5b:c0:42:c4:36:a2:f0:94:46:6c:
bd:ce:b0:9c:45:57:2b:06:3e:f1:53:ea:e2:53:c9:ce:c7:85:
79:1d:41:c0:7a:41:d8:98:6e:d3:2a:76:f2:e3:91:f6:c2:97:
8f:83:8e:15:0a:8b:57:f1:ef:bf:9e:3e:2c:83:9b:ff:71:5d:
cd:ee:6b:24:41:2d:5e:63:79:d5:95:34:25:c4:0c:d9:1f:e4:
51:c4:08:53:32:be:ac:90:56:3d:70:52:94:6d:24:d4:f8:c5:
52:da:88:29:06:b4:99:e8:7f:0d:ef:5b:50:14:13:9b:44:06:
38:d8:86:6b:e2:6a:b5:73:ba:9f:d4:aa:40:bf:a8:45:f2:39:
ce:b8:67:a5:5b:f2:1d:24:3e:01:89:2d:79:f6:bb:9b:c1:d5:
e0:8a:41:dc:66:99:6d:1e:d8:c1:99:f4:8d:ed:1c:66:df:89:
6c:4d:f9:d8:45:a1:bb:d3:45:82:2b:7d:28:eb:44:4d:fe:17:
ed:a9:07:1e:d8:8c:90:16:b7:aa:2f:fe:60:36:21:e1:42:e9:
13:b1:73:ac:6d:83:cc:4b:7d:4b:6a:ce:3d:04:ee:27:65:8a:
32:43:b8:40:d5:83:16:56:53:dc:64:46:42:02:5f:13:10:52:
54:1a:77:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:08:51 2025 by rpki-client