Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
File: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft (raw, json)
Hash identifier: xa4bO6NSbkb3Rn75qYI+jKfHWQ4XVUF5mgDEbt+5KRs=
Subject key identifier: CF:40:B2:DD:F7:90:4E:B4:40:9C:5B:C6:4C:40:DC:64:C7:CF:70:86
Authority key identifier: E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
Certificate issuer: /CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Certificate serial: 0196A2E58D68F6E85DEE7D8D03C72CF38A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
Manifest number: 05B1
Signing time: Tue 06 May 2025 00:01:15 +0000
Manifest this update: Tue 06 May 2025 00:01:15 +0000
Manifest next update: Wed 07 May 2025 00:01:15 +0000
Files and hashes: 1: 00lUHR0HsWF62e0OhdTMmz1D8cI.roa (hash: 7/l5GLFu9biLRhRjYyy3+K05xs5xfnn4gHwWEjQvlNY=)
2: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl (hash: Hmoo/ZZi89vgdndHuXN4ianaeJMrgFM8or8uzAM8wOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:8d:68:f6:e8:5d:ee:7d:8d:03:c7:2c:f3:8a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Validity
Not Before: May 6 00:01:15 2025 GMT
Not After : May 7 00:01:15 2025 GMT
Subject: CN=cf40b2ddf7904eb4409c5bc64c40dc64c7cf7086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f2:5d:b0:d3:ca:98:d8:2e:06:d8:fd:53:83:
c3:4a:b4:f6:6e:02:d8:9f:c9:cd:30:d0:35:a3:79:
55:a9:dd:21:87:51:f9:24:3d:c7:cb:e4:30:64:f7:
18:68:7a:0c:17:2a:06:d6:79:00:52:70:29:95:b2:
17:dc:0b:ca:0c:72:31:61:6b:3f:ca:24:ac:44:ae:
59:29:48:43:24:0f:db:0a:67:59:a3:64:e3:0f:4f:
6d:26:a4:d7:bd:1a:e7:21:18:ef:76:73:8f:76:f5:
08:f1:56:f8:61:be:29:d6:22:c2:7d:d6:73:e9:47:
42:b5:a1:69:49:2a:c0:8c:0c:fa:bf:28:d0:15:57:
bf:8f:dd:85:22:d6:4a:ce:88:f9:ec:80:24:78:34:
22:f7:be:92:36:f3:7c:66:bd:a3:7e:e9:fa:89:4f:
4d:5d:0b:83:f2:aa:8d:96:03:c6:92:d9:1b:5e:e9:
af:13:23:96:33:f6:ee:81:f3:56:cd:d3:69:96:82:
17:88:01:18:5d:d7:ee:61:ac:78:28:9d:e7:8c:3f:
6e:57:cc:48:28:cb:9c:21:20:9c:ac:b0:81:51:0f:
70:69:fe:38:ba:f0:eb:ac:f9:1f:92:95:66:9e:0a:
f7:cb:df:da:ce:3b:e8:7d:60:99:35:65:5f:53:d7:
00:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:40:B2:DD:F7:90:4E:B4:40:9C:5B:C6:4C:40:DC:64:C7:CF:70:86
X509v3 Authority Key Identifier:
keyid:E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:aa:fe:50:f1:b9:d8:d2:e9:42:8e:d3:3f:41:1e:52:52:4c:
1c:04:fe:bc:fc:96:ad:91:55:b7:24:23:18:a5:b2:b2:13:8d:
55:d8:8c:ac:9c:17:5f:62:e4:c6:32:88:ef:f7:57:2c:41:58:
32:5e:84:3f:1a:38:45:ba:8f:bc:12:b1:3f:6e:aa:ff:2b:bd:
15:f2:99:52:84:64:a9:7d:31:bb:6f:83:c5:40:7c:ce:16:0b:
30:ce:29:43:ae:c7:29:37:e4:14:aa:81:8f:b8:92:9b:28:36:
57:c2:4e:be:c6:17:0a:2e:22:75:5b:b4:47:27:5c:0a:9e:80:
4d:fc:1d:f7:5d:ce:d7:25:3f:5e:30:ae:81:d5:cc:c8:91:10:
fa:89:1f:43:0b:53:2e:13:25:d0:be:6a:73:e4:56:ef:55:e1:
e5:24:8f:04:7e:fb:19:d6:a0:de:3b:67:97:c8:ac:00:63:f7:
0f:e7:f4:bf:1a:70:de:c0:ea:40:e1:b6:4c:74:46:bf:42:00:
63:59:5d:4a:f5:26:e7:ae:be:b6:99:a7:1c:5e:46:5e:d2:65:
3b:3b:95:1f:e9:8b:bd:8c:f2:d5:0a:30:7b:04:82:bd:b4:69:
61:3f:3c:a8:bb:c6:8e:2e:f0:3a:35:18:31:f3:24:a6:3a:98:
0d:01:19:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:19:36 2025 by rpki-client