Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
File: 5_4i9VHpWw8VAzxQNVLkm8phfGo.mft (raw, json)
Hash identifier: Th2fHNPmQ+QbdWCL6MXEjBfafDuTBrvQwF0N10QYGhU=
Subject key identifier: 33:30:40:9E:4E:BD:9F:2E:0C:82:5D:CF:B9:6A:4A:51:2B:50:46:DB
Authority key identifier: E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
Certificate issuer: /CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Certificate serial: 0196B9DA7047E7BA7991414DD8508617B85F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
Manifest number: 019B
Signing time: Sat 10 May 2025 11:00:22 +0000
Manifest this update: Sat 10 May 2025 11:00:22 +0000
Manifest next update: Sun 11 May 2025 11:00:22 +0000
Files and hashes: 1: 5_4i9VHpWw8VAzxQNVLkm8phfGo.crl (hash: MhGaGf6GjVf0D4Zy4Q2FOii9GAwWw2lbl/x+Qu4gKXA=)
2: THghgq3_4L1NVnK6KOFYexQq5SI.roa (hash: /zrwFkLWh9pajQgZXuExr20G8aRLgJD9APPdVLa4mp8=)
3: teYc1cFeqUuzMd-dJeyJRJ9jp-k.roa (hash: SD6wWRBAQPvJFZ63a4Ws+sFA/hBOJ/3xD8PJ20JClwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:70:47:e7:ba:79:91:41:4d:d8:50:86:17:b8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Validity
Not Before: May 10 11:00:22 2025 GMT
Not After : May 11 11:00:22 2025 GMT
Subject: CN=3330409e4ebd9f2e0c825dcfb96a4a512b5046db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:03:13:20:81:bb:6a:51:72:af:24:d0:a2:13:
f3:9c:a1:ba:c3:1f:73:5f:06:51:5b:0d:d3:92:40:
28:91:dc:75:fe:56:b6:a2:09:0c:6c:8b:0b:e4:f4:
11:6b:2d:fa:39:2e:fb:f0:17:34:8c:a0:c4:08:ba:
49:8c:bd:b8:37:22:b6:14:62:07:e1:6a:5d:67:71:
3a:c6:54:8c:75:79:f4:46:e1:5a:0a:99:70:4e:07:
d3:12:cb:24:76:de:48:e4:77:34:39:87:ab:49:21:
94:35:fb:61:97:4b:f9:b7:36:a8:69:09:20:35:e5:
6a:29:af:90:cc:c2:15:93:3e:c4:1d:46:c1:27:9c:
29:a6:97:1c:03:69:17:51:b5:45:b7:53:de:a5:c6:
e1:68:e4:be:57:98:b6:84:07:14:b5:76:b6:bd:e7:
0b:d2:e2:fd:97:fc:ca:f2:ce:be:a7:66:be:9c:d6:
66:1c:68:8c:7d:a7:8a:4f:7f:3c:1b:f7:48:c3:f7:
10:a3:94:88:77:bb:a4:46:94:d6:79:05:9f:62:dd:
a2:7d:0f:0f:cb:38:13:1d:b7:3d:26:eb:6d:d6:c6:
75:8d:ae:f6:bb:c7:17:52:3e:0d:9b:9c:19:f2:4b:
1d:9c:6d:93:8f:26:24:2c:5d:0f:2a:37:6e:c6:6f:
49:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:30:40:9E:4E:BD:9F:2E:0C:82:5D:CF:B9:6A:4A:51:2B:50:46:DB
X509v3 Authority Key Identifier:
keyid:E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:15:07:3d:5d:21:ee:eb:78:84:cb:d0:76:80:60:94:96:1f:
34:bb:8b:18:e9:17:b9:26:96:34:05:fa:89:1f:85:94:a6:41:
82:47:d5:be:a7:77:05:b4:f7:ea:de:27:9a:f9:2e:7a:d7:eb:
bf:11:e8:36:f4:4d:9c:ba:e7:1e:ae:34:52:6c:c9:43:13:0d:
ea:e8:b6:d2:57:c2:ec:c1:76:96:a0:01:52:f6:fb:b5:c7:9a:
7a:bf:fd:d3:0d:49:76:a5:c3:0f:a2:c1:62:9b:75:09:6a:e3:
02:1c:ce:0f:06:9e:96:20:06:04:dc:fd:93:36:57:a4:5e:b2:
f5:ee:84:a1:58:71:1d:65:f7:f9:fa:a8:d3:8a:10:23:02:8f:
c5:f9:4b:ff:6b:b5:97:90:23:8e:e2:ae:2b:6a:da:e1:c9:ba:
8b:49:e7:2c:01:c2:f5:e6:90:f9:47:98:5b:1d:40:b4:7a:df:
cd:7c:ea:a5:88:2c:58:f4:c0:f9:18:0d:30:a2:e7:fb:11:98:
82:12:94:08:de:00:00:e7:e7:91:c3:b4:ef:3e:57:98:ee:c5:
3d:d1:80:6c:4d:28:d5:0a:c0:96:ea:71:3d:5a:4a:51:f1:43:
77:94:9a:a4:30:4b:63:7f:2b:0a:3b:d8:39:82:33:fa:de:d4:
bb:db:a1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:14:13 2025 by rpki-client