Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
File: 5YBpdIdI6a69e-QFh9gUDv3lW2s.mft (raw, json)
Hash identifier: E2Rv1Gw8VPcm8XvlUbTyidlmu51mEKTdSKLKnu77jgo=
Subject key identifier: EB:77:BD:38:E0:81:5D:52:C3:09:88:F4:64:DE:61:E6:7E:DA:17:32
Authority key identifier: E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
Certificate issuer: /CN=e58069748748e9aebd7be40587d8140efde55b6b
Certificate serial: 0196865B759C7F7EB23F8C13FCCFF7C33128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
Manifest number: 14A9
Signing time: Wed 30 Apr 2025 11:01:02 +0000
Manifest this update: Wed 30 Apr 2025 11:01:02 +0000
Manifest next update: Thu 01 May 2025 11:01:02 +0000
Files and hashes: 1: 5YBpdIdI6a69e-QFh9gUDv3lW2s.crl (hash: 04aQ1f1EXttz646/P48YXl6X9LP4PtpFRGWR51wA1HM=)
2: vmkVgb9N_5wAEFtAOAjwuSdx1Xs.roa (hash: To73D5BDmwWuULrYV7q3UmXkLh1DadkYNkNoo+AcLqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5b:75:9c:7f:7e:b2:3f:8c:13:fc:cf:f7:c3:31:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58069748748e9aebd7be40587d8140efde55b6b
Validity
Not Before: Apr 30 11:01:02 2025 GMT
Not After : May 1 11:01:02 2025 GMT
Subject: CN=eb77bd38e0815d52c30988f464de61e67eda1732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f4:ba:76:43:ea:34:87:b1:6b:53:ae:43:22:
32:ee:9b:d9:1d:46:6e:f7:39:b8:a2:a0:b7:4d:8d:
d4:df:37:95:70:8f:cb:31:2b:db:bb:8a:c0:5e:b8:
50:36:33:18:dd:54:3e:66:a6:63:89:a5:6d:c0:39:
5c:b0:c5:9a:c0:76:ef:ba:69:a1:1e:e9:31:f0:2e:
05:4c:c6:a4:3e:8f:3b:a6:61:90:b1:f8:50:e9:82:
58:de:fa:84:b2:1d:ef:3f:88:77:0d:39:b6:b3:41:
bf:51:7b:fb:f1:e7:4e:8c:d6:e2:0e:5f:1e:3f:05:
1b:86:fc:0f:b5:47:fe:a7:46:f4:fd:e2:2b:53:de:
63:be:6f:5c:d4:31:53:bc:23:8e:4d:92:ab:19:72:
83:8d:8f:72:9e:12:a0:65:73:dd:e4:8d:91:88:f9:
cd:cf:32:bb:d6:b2:27:ad:64:23:34:e4:b2:6f:15:
50:63:94:e0:f7:bf:86:bb:47:47:bb:94:88:9e:ba:
00:bb:8d:fd:de:0f:a3:02:91:eb:3d:84:20:66:5a:
40:06:11:8f:98:bc:f9:2d:11:c1:b3:cb:26:0a:f3:
d1:21:e6:df:70:be:85:ff:fc:ff:9a:61:f9:99:19:
92:13:74:69:c2:10:c6:94:ed:b1:9f:22:91:22:fb:
64:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:77:BD:38:E0:81:5D:52:C3:09:88:F4:64:DE:61:E6:7E:DA:17:32
X509v3 Authority Key Identifier:
keyid:E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e1:d8:a9:e6:cc:c5:be:d4:eb:fd:07:4b:06:72:05:0f:13:
a7:28:38:c3:c1:d7:3a:b5:7d:27:5b:f3:19:ed:86:e8:57:7c:
02:49:d3:b0:0a:39:10:a9:94:c1:5b:e9:bc:9e:3c:76:9f:cf:
d6:22:2a:e5:8e:f7:64:b6:32:c8:21:c2:fe:b7:18:6c:3f:be:
36:ec:9c:92:6e:01:7c:b3:c5:b2:a6:e3:cd:b0:26:b5:72:ab:
11:d8:ce:8a:00:d0:ce:99:3b:86:90:ba:0d:06:fe:6a:19:db:
56:9b:7c:7d:31:e3:75:6c:8a:62:31:31:8e:bb:f6:b0:95:2f:
6a:ef:ea:7a:46:cd:d0:b3:f5:8a:a9:53:fc:d4:8c:78:fe:37:
9f:28:e6:73:1e:47:c3:d2:49:57:e8:33:af:f5:52:27:b6:d3:
5e:cb:33:55:ce:72:12:c8:c3:0f:27:59:37:32:f5:8a:cc:1f:
37:6e:95:6a:56:ab:1f:a7:c4:54:63:03:e4:86:35:d6:66:62:
d6:34:4a:3b:50:76:9e:92:3e:00:d8:4d:c4:e6:c8:36:57:a2:
c5:4f:24:ab:27:6e:62:ea:7d:1a:50:7b:a9:57:c8:20:d5:61:
27:2c:e4:84:db:03:fe:f1:9d:11:28:7b:2e:c3:b4:4b:db:e3:
e8:88:28:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:46:15 2025 by rpki-client