Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
File: r5VJF2-WbToiFBAHkJfIfw4dILE.mft (raw, json)
Hash identifier: gJ42BH/s3LGAS+O4NL35qKra3et5rnXqRAM+XHHRv40=
Subject key identifier: 4F:D5:3A:3C:B8:AF:1A:56:6B:83:56:36:2E:09:6E:7A:46:95:6A:E3
Authority key identifier: AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
Certificate issuer: /CN=af9549176f966d3a221410079097c87f0e1d20b1
Certificate serial: 01968210CB4BEE1C74E59CDED50BEC4CBC37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
Manifest number: 0C77
Signing time: Tue 29 Apr 2025 15:01:00 +0000
Manifest this update: Tue 29 Apr 2025 15:01:00 +0000
Manifest next update: Wed 30 Apr 2025 15:01:00 +0000
Files and hashes: 1: 1n_N6auYiXQ1pyBQYj7m3QI_dSs.roa (hash: LsHjMOF74kduMAehGu3uEfQUdY1PYN7E293m6Bfa2Jo=)
2: r5VJF2-WbToiFBAHkJfIfw4dILE.crl (hash: O/uvoQN1vA0jvOF0wMWAjCXfSOGlUyW+qJh6cjecQ/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:cb:4b:ee:1c:74:e5:9c:de:d5:0b:ec:4c:bc:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9549176f966d3a221410079097c87f0e1d20b1
Validity
Not Before: Apr 29 15:01:00 2025 GMT
Not After : Apr 30 15:01:00 2025 GMT
Subject: CN=4fd53a3cb8af1a566b8356362e096e7a46956ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a5:01:1a:d8:7c:09:4c:de:99:95:e1:8b:93:
c6:9f:8a:ce:41:23:ce:c2:6e:23:9c:da:c4:3d:ac:
04:60:2f:2a:85:04:7b:d9:02:5e:da:a4:1f:3c:08:
d1:ae:c8:6e:86:24:61:5a:2f:f3:8b:3c:ad:47:a6:
36:b9:3b:a3:ad:9e:58:30:6b:3f:4f:e8:93:fa:58:
f1:e2:d8:58:82:42:e6:d8:47:ef:dd:79:69:23:61:
aa:44:45:27:e8:4e:d2:81:71:4f:be:21:dc:e6:c0:
b8:5a:76:9e:b7:4c:d5:76:45:85:34:33:81:23:30:
a9:3b:76:c3:66:38:de:2f:5b:7b:b9:32:1c:ce:ef:
8e:4b:a7:85:07:53:14:a4:0b:fa:8d:b4:44:77:95:
02:96:9f:34:21:ef:2a:02:f0:91:3b:b2:6c:a9:61:
23:33:25:eb:d8:96:aa:41:ae:f4:e5:6b:38:a8:20:
e9:fe:7d:47:a8:79:09:d8:25:fd:1d:10:6a:e4:7e:
02:b6:46:53:c3:39:03:3a:ac:0d:4f:5c:7c:46:50:
1d:86:bc:38:a2:4d:47:cd:34:22:ca:be:ec:c6:b9:
47:6a:13:6e:eb:90:13:cd:c7:4a:8e:8a:a0:01:70:
bf:a6:c2:f6:4f:ac:3d:2a:d2:42:0a:10:2c:0c:52:
57:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D5:3A:3C:B8:AF:1A:56:6B:83:56:36:2E:09:6E:7A:46:95:6A:E3
X509v3 Authority Key Identifier:
keyid:AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9e:49:b0:2b:cf:7f:76:5e:cb:2c:45:97:17:22:8f:f6:cb:
a1:d8:fb:36:4f:a6:e5:56:a0:99:a4:33:a4:ec:84:80:1a:24:
d7:e0:c9:06:f8:3c:6e:64:47:3e:d2:07:f4:8e:7a:ec:fe:8c:
9f:2b:a6:f3:a1:1a:bb:bb:df:e0:e8:00:b9:ff:d6:04:a2:d0:
3f:16:de:75:27:5c:cb:0e:91:ee:e3:29:05:af:8f:97:f2:cb:
d2:8e:b9:c2:ff:52:1f:a4:72:e1:80:93:e8:2c:64:c7:4b:a8:
8c:96:92:5b:9e:05:d1:ab:5e:b1:57:42:9c:26:b9:70:d5:a0:
a5:54:1d:47:b6:7f:44:cc:2d:7f:b0:fb:8c:f3:62:6b:6c:8f:
8c:43:cd:ad:4a:29:68:c7:28:d2:bd:aa:47:a6:55:4d:2c:c6:
11:39:66:d7:63:d9:62:96:48:a8:d0:96:76:2c:a3:88:b3:94:
d0:90:e1:42:b8:7e:16:1d:9c:6a:cd:c9:23:20:fd:5f:9b:91:
bd:1e:ff:26:a3:82:7c:d3:b0:8d:94:6f:30:e5:2e:a5:ff:db:
61:bc:3b:27:a9:d5:d4:7d:23:54:41:3f:1d:d5:b9:74:20:35:
f7:46:0b:6e:3e:67:c1:82:d4:80:19:7c:df:84:e9:d9:13:72:
92:e5:04:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:14:53 2025 by rpki-client