Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
File: 5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft (raw, json)
Hash identifier: VJjS1Fn8hCwb2OjFyYA33EtP+f+ndY88JJqJgA38KMA=
Subject key identifier: 68:89:D2:C7:47:06:52:21:0E:68:DB:F1:F1:A8:ED:82:DC:A0:97:F2
Authority key identifier: E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3
Certificate issuer: /CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3
Certificate serial: 0196C34BB211F87308135AB497C4BE93358F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
Manifest number: 084A
Signing time: Mon 12 May 2025 07:00:39 +0000
Manifest this update: Mon 12 May 2025 07:00:39 +0000
Manifest next update: Tue 13 May 2025 07:00:39 +0000
Files and hashes: 1: 5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl (hash: zz0DaygMLCgopknACrm2T84j+iKtrMa/O6ooM5xzmIQ=)
2: 6xUnoc1wAnSrf2dpU2UTzibFAZU.roa (hash: tiXyyLUhxSiIfoFFtQDRMAVp44XARQDTShxLyIGBRKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:b2:11:f8:73:08:13:5a:b4:97:c4:be:93:35:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3
Validity
Not Before: May 12 07:00:39 2025 GMT
Not After : May 13 07:00:39 2025 GMT
Subject: CN=6889d2c7470652210e68dbf1f1a8ed82dca097f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1c:92:08:c7:3c:c1:91:6c:36:84:46:ff:61:
71:a0:b9:3b:ed:e7:ba:8f:4e:52:55:73:0b:92:74:
ec:fc:d8:f9:65:6a:4c:68:ae:5f:9b:eb:81:e1:f6:
60:d3:87:1b:c7:59:73:e9:e5:3f:34:37:d6:79:e7:
5d:fd:00:1a:e7:da:85:b4:c1:85:f0:ff:25:9b:fc:
90:97:a2:95:dd:a0:dd:fa:75:d2:96:75:fb:48:73:
dc:35:a9:d0:3a:ad:df:b4:14:7e:20:79:f0:83:1f:
84:ad:30:41:09:2d:20:52:ae:8d:8e:08:c5:19:0e:
08:da:67:57:e9:6c:70:a7:cf:7a:bd:6c:2b:41:1c:
6f:98:61:60:35:e9:be:73:dc:2f:47:6f:cd:b6:f6:
dd:9b:a4:29:81:8e:0a:c8:0d:37:d3:94:71:7d:34:
79:4b:41:63:7a:bc:ea:39:32:25:20:74:de:3f:f4:
8c:23:f9:0b:6e:59:9d:56:dc:96:ea:c2:13:e0:ad:
15:75:54:bf:5a:8e:d1:3b:47:a7:9f:fb:61:cb:5d:
d8:9f:7d:1e:93:d1:98:de:df:0a:ce:dc:bd:8d:60:
11:12:99:b1:56:e0:68:7d:70:3a:4e:ea:af:fa:5c:
ce:a7:05:c3:e5:44:24:6c:46:92:fd:23:c9:38:13:
93:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:89:D2:C7:47:06:52:21:0E:68:DB:F1:F1:A8:ED:82:DC:A0:97:F2
X509v3 Authority Key Identifier:
keyid:E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:2b:cc:7f:a8:93:ca:68:8d:d1:15:ea:e6:cb:e6:3f:8b:bb:
2c:ee:0a:c7:14:d1:1d:dd:0b:76:ad:6d:af:0d:a4:0e:33:b4:
28:93:b8:75:b0:e7:49:61:7e:30:5b:2a:de:de:a6:f6:f1:a8:
c1:89:0d:bf:29:ba:80:97:72:3e:e0:95:ae:d5:3e:99:5c:82:
a9:cb:ba:16:f0:da:a9:02:f0:e1:db:37:86:41:05:ad:0d:0a:
6d:e6:d7:89:ab:78:d6:87:14:61:8b:ea:2d:f4:68:12:8b:74:
d8:b0:2a:a7:cf:bc:52:fd:f0:32:66:ef:87:d7:bc:12:84:7d:
7b:93:48:76:80:9a:b9:60:04:47:d9:e1:83:5e:d6:48:5f:23:
74:0e:09:0c:2d:16:cb:18:7b:a5:00:c6:18:f1:dd:9b:d2:6a:
1d:5f:dd:eb:f9:f9:ed:7e:a0:dc:6a:a6:0c:21:ae:a9:6a:c7:
eb:80:84:11:02:92:5e:6b:04:cc:e2:8d:47:04:e6:05:a2:8e:
e9:7e:7c:89:cf:bd:2f:f2:12:df:2b:49:bd:cb:94:ed:d9:26:
fb:67:db:dc:bd:66:1e:27:08:aa:50:56:f8:7d:d4:b0:e8:45:
c2:51:39:7e:58:49:e0:f2:30:6c:e5:8b:f4:e7:8d:77:16:ea:
45:a0:37:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:43:04 2025 by rpki-client