Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
File: 5n17NXAHcGQBPaGOKeaQzUyb1xA.mft (raw, json)
Hash identifier: vAZNBYSxpzll7JhKtPW6O+Yt6ZBIrJxjdpe/Y+y6EVA=
Subject key identifier: 0E:02:80:78:24:3B:9F:95:0C:B0:8C:51:AC:6A:43:55:A8:9D:45:5F
Authority key identifier: E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
Certificate issuer: /CN=e67d7b3570077064013da18e29e690cd4c9bd710
Certificate serial: 019680C72A92B20D1BF7F57ADE17AEA39D93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
Manifest number: 01F8
Signing time: Tue 29 Apr 2025 09:00:58 +0000
Manifest this update: Tue 29 Apr 2025 09:00:58 +0000
Manifest next update: Wed 30 Apr 2025 09:00:58 +0000
Files and hashes: 1: 5n17NXAHcGQBPaGOKeaQzUyb1xA.crl (hash: SjdxmbURr51NScJyxxkpShhHjkLGybIAB2cMr5s9j+Q=)
2: UXfwFJz04X4XmU1ABHkr-Q0ovq0.roa (hash: vTofq9wYPlysSoUgx6HvDr7C9PTa+inohQrNa6Pfbqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c7:2a:92:b2:0d:1b:f7:f5:7a:de:17:ae:a3:9d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67d7b3570077064013da18e29e690cd4c9bd710
Validity
Not Before: Apr 29 09:00:58 2025 GMT
Not After : Apr 30 09:00:58 2025 GMT
Subject: CN=0e028078243b9f950cb08c51ac6a4355a89d455f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:39:a0:d7:77:68:df:d7:8e:ce:c8:b7:6a:
38:03:aa:4a:22:d8:79:a8:87:72:5f:6d:1a:a4:fc:
8e:36:d7:ab:86:98:a4:ad:98:15:19:d8:ae:cf:d3:
ee:21:66:eb:d0:09:5b:aa:87:16:e1:71:a5:cd:e4:
3e:62:dc:d1:45:ce:ec:5a:22:7f:a8:a5:17:2f:6c:
b9:e0:25:af:92:e2:b1:d1:e8:3a:15:92:e8:58:4d:
55:ff:01:35:4a:0c:e7:0b:d2:8f:2c:dc:36:c9:11:
f7:7e:e8:3e:99:34:54:eb:47:3b:f1:eb:5a:1f:9f:
e0:5e:73:d8:85:54:b4:b4:86:e4:ec:cf:9f:f1:a0:
23:e6:8b:cf:b5:a6:70:4c:f1:1e:6a:ab:74:09:60:
09:d5:42:64:5f:cb:e3:ee:d1:ab:80:4e:e2:e7:76:
c5:2d:64:d1:15:01:f5:39:11:3d:c7:7b:d8:ec:06:
01:46:96:db:cb:87:1e:66:8e:e0:b5:61:73:b0:9b:
1a:06:74:83:05:35:6b:d8:8f:5f:7d:fd:f0:2d:28:
a9:f1:de:e1:49:28:ac:a1:3a:5b:64:54:3d:aa:b7:
9e:6b:58:f6:55:44:e9:29:1c:35:0f:cc:ca:03:94:
dd:34:75:d5:61:73:c6:b9:bf:af:26:e7:5e:ef:3d:
6e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:02:80:78:24:3B:9F:95:0C:B0:8C:51:AC:6A:43:55:A8:9D:45:5F
X509v3 Authority Key Identifier:
keyid:E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7e:b7:66:1b:5a:5c:3b:cf:81:62:d1:32:00:96:b6:ba:d7:
8d:c1:09:2d:3a:e4:dd:ea:7e:57:36:65:db:28:3b:99:f1:00:
38:8e:71:1b:a4:73:0b:52:19:5b:a0:00:38:5d:f1:97:1c:a4:
09:f0:2d:47:fa:02:05:65:af:38:b6:e2:96:7b:d9:4b:01:e8:
ed:d7:1d:43:77:b2:22:b8:18:72:0a:27:72:67:07:36:38:07:
89:ee:0f:dd:66:b6:be:4e:58:e4:c8:cc:49:ee:42:f6:7a:15:
cf:13:7d:0d:ae:1e:11:4c:46:35:d3:33:5f:3a:4a:57:47:b2:
78:89:3a:21:c0:bf:d2:f8:2b:69:76:ad:c9:e8:8d:d2:02:c5:
76:93:8b:16:3a:0a:71:78:30:3c:8b:0e:25:41:a9:61:9a:c2:
1c:82:2d:37:ce:6d:1c:59:cf:d5:e2:43:cb:9b:25:f8:f2:99:
0b:a6:41:b9:89:a1:31:a7:a3:6d:59:23:a6:53:15:3b:2c:a7:
9c:47:c9:ab:c5:84:0a:0e:07:6a:6b:f5:08:a5:2b:64:66:ea:
5f:02:ce:c7:b5:8b:e3:d1:8e:ab:32:52:76:ba:e7:39:ed:0e:
c8:89:0a:2c:69:8b:f1:de:95:13:58:73:77:ee:3b:ee:c6:28:
96:21:84:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:41:07 2025 by rpki-client