Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
File: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft (raw, json)
Hash identifier: gQYLNs/bcdxrwfEOndQ0h2g2oHZqV2ydczssjEoz63s=
Subject key identifier: 82:BF:E3:5F:A8:8C:A0:9C:A1:64:48:01:C4:47:F0:C8:3C:CB:95:C8
Authority key identifier: E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
Certificate issuer: /CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Certificate serial: 0196BA12165762D1BAEB78AE0689AC54DDEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
Manifest number: 01A2
Signing time: Sat 10 May 2025 12:01:09 +0000
Manifest this update: Sat 10 May 2025 12:01:09 +0000
Manifest next update: Sun 11 May 2025 12:01:09 +0000
Files and hashes: 1: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl (hash: v7vGNrKg4kU/blmfHcBI+ARi/o90PM1eJYXZI4AozNg=)
2: sh2pFLFRXQ_LNHY8Z6kE6uVGJsM.roa (hash: LOYuvxv+r/IWU8gCda5GHcFP5KoGM8hEkOX7ufXWF5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:12:16:57:62:d1:ba:eb:78:ae:06:89:ac:54:dd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Validity
Not Before: May 10 12:01:09 2025 GMT
Not After : May 11 12:01:09 2025 GMT
Subject: CN=82bfe35fa88ca09ca1644801c447f0c83ccb95c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9a:f2:6d:23:f5:d8:ff:68:0f:74:f8:0f:bb:
81:58:c1:de:d7:2b:03:b9:dd:15:7e:f8:19:69:5f:
29:54:9d:1c:9a:8a:20:00:65:c0:9d:d7:69:f2:cf:
f9:85:6a:f8:5b:b9:15:0e:2b:28:c2:7c:6c:07:b9:
42:1b:d9:30:21:f2:9d:2c:dc:ca:ca:df:a7:e4:a8:
c3:0e:f8:d8:ca:07:60:67:a8:81:ca:83:39:ba:c8:
0c:a3:98:ec:7c:a1:c8:f1:fc:67:b8:f1:df:5e:f6:
fd:42:5f:8e:df:b6:e1:ab:ec:90:da:a3:3b:ce:9f:
ea:2c:39:0f:87:d4:40:63:c3:16:00:37:f2:33:fb:
9c:4c:a7:d9:ab:96:86:bd:b6:e9:c6:98:e0:9e:65:
98:8d:e2:67:55:d3:8e:08:76:c5:89:db:ce:b9:89:
65:8f:80:d0:b7:d1:b4:f1:c9:12:57:bb:d6:35:7d:
d0:f0:99:c5:4e:9e:98:a2:ed:f5:9f:3a:d8:b1:a0:
69:26:0d:f0:45:41:ae:17:71:a0:73:fb:c9:55:80:
98:50:3b:9d:ef:0b:f2:ed:d1:e5:6d:2d:17:03:48:
f1:c3:aa:14:44:ac:e2:82:92:69:c3:71:2f:0a:ec:
ec:21:20:b7:c1:27:79:ba:2d:08:b9:11:3f:94:35:
d8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BF:E3:5F:A8:8C:A0:9C:A1:64:48:01:C4:47:F0:C8:3C:CB:95:C8
X509v3 Authority Key Identifier:
keyid:E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9a:b7:ab:dd:0e:8f:80:30:a5:7d:72:87:25:fa:9f:c3:60:
1c:fb:a1:82:b2:0b:cd:8e:e0:77:2a:eb:cd:59:53:99:73:f1:
9c:87:1c:fb:64:80:7a:87:2c:0a:b2:d8:d8:1e:15:33:e7:26:
99:bc:03:ca:86:b1:3d:f3:5d:eb:2c:6f:66:81:33:aa:34:c0:
81:4a:07:24:67:2f:99:73:bd:ee:5c:e0:a8:80:d0:81:41:fd:
84:77:94:89:51:81:45:54:c0:2d:d4:c6:0e:3f:d9:4f:1f:1b:
b5:5f:7b:32:69:d7:e2:f0:cd:35:e0:b3:79:8d:1f:71:1c:ae:
cc:b1:43:41:ee:ff:d0:75:3f:6e:e5:32:76:39:ed:93:ef:d4:
90:3f:bf:8d:6a:8d:35:7d:c5:92:80:10:c6:a6:ef:1d:8a:91:
3e:19:42:d9:d0:34:e0:5e:d5:a0:3e:bd:d9:f6:a9:e6:c9:57:
43:09:8d:d7:6b:79:6b:39:34:02:58:66:59:e4:a2:b8:9f:a3:
98:bf:86:6e:58:35:45:33:4f:43:b3:42:b2:a6:43:3d:be:09:
21:56:f8:45:d8:68:4e:82:e3:90:7e:a7:d9:3f:f9:c2:88:48:
d8:3b:8c:df:03:ea:a0:59:a3:86:da:fd:4e:f0:19:b4:60:18:
7c:60:e8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:52:17 2025 by rpki-client