Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: j4lU0ie6I1RiF3pEX7BUO9K1c9DBjkPP5JPH52AaRQs=
Subject key identifier: 4D:59:23:4F:04:EE:40:E9:8D:BC:BE:77:A2:15:A3:D6:7A:C6:A5:BB
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 019686C8AFAFE13CE414CAD6B8B99EE726BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 151B
Signing time: Wed 30 Apr 2025 13:00:21 +0000
Manifest this update: Wed 30 Apr 2025 13:00:21 +0000
Manifest next update: Thu 01 May 2025 13:00:21 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: suoYFvz/f7Def6QhoCfMYGKAC83Tysc2MmjA2ZvHsrA=)
2: 6UYJYSp_H1qb-Z1ShFc_cXl87FI.roa (hash: 7Wjn3rvrdmK/H1wlwqE+Z2pd0NQT1fwp/AaKLM/IzPg=)
3: jISWNsTxPdEjjPdMy-Whzlvb0Ac.roa (hash: La/cVhkJ14UaJXVbjX6BzXzgOteVwnmYx6tdmiaM0OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c8:af:af:e1:3c:e4:14:ca:d6:b8:b9:9e:e7:26:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Apr 30 13:00:21 2025 GMT
Not After : May 1 13:00:21 2025 GMT
Subject: CN=4d59234f04ee40e98dbcbe77a215a3d67ac6a5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:f9:cf:d7:6d:3c:98:7a:eb:76:fc:ac:75:
23:9a:de:35:d3:01:07:e0:78:91:95:98:0a:64:bc:
21:59:87:f1:b2:87:6b:ac:32:ec:51:c6:2f:70:5d:
49:97:42:a1:43:81:73:39:a2:95:a7:30:a8:b2:b6:
ba:9c:f8:b2:28:f4:01:40:bd:51:47:3f:c7:ad:11:
f7:41:3b:53:da:78:39:d4:dc:f0:14:55:a3:5f:b4:
87:56:5a:ce:81:9e:01:dd:f5:b7:a7:a6:5f:37:3d:
69:63:4f:80:ad:90:dd:3c:a9:62:67:da:4f:87:dc:
26:3c:8c:bb:7c:23:d5:36:55:7e:09:ef:0c:94:ba:
12:62:68:3d:72:04:85:cf:22:59:ab:e3:a6:ed:fa:
05:b1:35:8d:77:39:ba:08:37:fa:05:b7:79:1f:ad:
68:69:2d:42:a5:90:59:b3:7b:03:f1:5f:ac:84:d7:
3e:b6:58:2a:e1:82:b7:ec:e5:4e:56:3b:f5:41:a0:
60:f5:7d:aa:a9:04:8b:bc:82:b0:76:00:6e:4a:04:
f0:f2:4c:53:b5:91:9d:7e:d0:86:0b:a2:cc:16:64:
4a:16:8c:93:73:e9:0f:29:99:d6:f5:60:54:4c:b6:
ff:b1:b3:de:a5:b3:7f:f3:4b:b1:a0:6b:f3:91:fd:
9e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:59:23:4F:04:EE:40:E9:8D:BC:BE:77:A2:15:A3:D6:7A:C6:A5:BB
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0f:bf:e2:4b:88:ac:23:31:aa:f6:2a:ad:85:09:69:56:f2:
1d:d8:1b:d5:a8:55:bc:12:2e:c0:b1:f0:15:e1:10:79:4d:1b:
f1:5e:d4:19:3b:c3:18:ce:5d:ce:69:84:01:ff:cd:35:d1:a7:
5e:58:e6:da:33:b1:01:14:80:e7:44:5d:f5:13:03:4d:1b:5e:
6a:a2:34:f4:59:62:92:07:b4:1a:13:df:f1:e5:8c:bc:12:35:
c7:ac:3b:e9:88:d5:07:a5:55:0a:c3:61:b2:bf:ec:ad:3c:a6:
ae:f7:65:2e:11:dd:11:0e:98:98:86:d5:a4:30:28:76:7e:ae:
42:3a:89:d7:4e:f8:b5:66:9f:2c:a6:58:81:0a:d2:d4:41:ee:
47:7b:8a:d4:62:3c:91:d7:7c:30:76:1d:39:26:bc:27:16:77:
77:f2:86:dd:5b:92:84:ea:8a:0b:41:60:bd:9b:cb:1c:85:bd:
6f:54:c3:ae:75:a7:a9:70:d0:55:7b:54:b5:30:db:ba:fc:9b:
17:ae:0a:43:3e:3e:be:58:9c:e0:34:f7:08:51:0c:b3:47:29:
c7:cf:23:d1:7d:a5:b6:ba:9f:9f:84:98:7d:ec:9a:fc:c6:46:
d8:a3:71:91:de:15:5d:3a:6e:1e:6a:f3:4a:4d:e3:a3:61:69:
37:c5:f6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:47:54 2025 by rpki-client