Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
File: 5MzXNQiptZmF1Vl4aOOl1ex0X14.mft (raw, json)
Hash identifier: b7rupOxtYs8KisdO/6m8kCbOwGaaCRxSS6T6VeB9XQA=
Subject key identifier: 6C:4B:3A:B1:5B:01:9F:9C:AD:F9:33:7E:A0:A3:7E:63:BC:2F:5D:1B
Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Certificate serial: 0196BCDBAC1A5A3BD83288C7554090EE64B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
Manifest number: 0D02
Signing time: Sun 11 May 2025 01:00:35 +0000
Manifest this update: Sun 11 May 2025 01:00:35 +0000
Manifest next update: Mon 12 May 2025 01:00:35 +0000
Files and hashes: 1: 5MzXNQiptZmF1Vl4aOOl1ex0X14.crl (hash: mlSvEXR/W4ntajZ+8Dm+CBfCxupWSRMrMRi8zRgFh28=)
2: XKgFLRL69SL60NdfQXwm1QTIJjA.roa (hash: gmsw3/0a1oqoWvmsXkV41iDiqrBjRS4S2LvnTqx2H9E=)
3: olWcwiaAoq2wbYuXrz1GVqOmILU.roa (hash: Elg7s5AYrUxQTxV0rajyo3IZzGiW80+xg0M4V3aItiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:ac:1a:5a:3b:d8:32:88:c7:55:40:90:ee:64:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Validity
Not Before: May 11 01:00:35 2025 GMT
Not After : May 12 01:00:35 2025 GMT
Subject: CN=6c4b3ab15b019f9cadf9337ea0a37e63bc2f5d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7c:31:c5:f3:a0:69:73:8c:f2:f2:ea:b9:9d:
f1:bc:56:54:94:f4:2d:af:b2:37:31:f0:a6:a0:7f:
df:60:31:07:ee:29:7d:bc:45:2f:4e:91:2b:f2:d7:
79:25:2a:9b:47:4b:e8:45:32:d8:f0:8f:d2:5b:48:
fe:b6:74:8e:ae:c9:48:b3:14:16:29:d8:90:92:c5:
b5:cb:ef:b8:42:11:5d:5f:75:81:c8:ad:f4:c6:91:
00:ed:80:98:5a:30:4c:b3:b4:9a:00:cd:25:b3:7e:
74:a8:2c:d8:88:b3:e6:77:2f:8a:37:84:15:bf:20:
09:5b:61:77:e9:8e:ec:11:e9:3a:13:89:8d:db:d1:
ce:00:de:4c:f3:47:81:cc:eb:85:a8:96:e7:1c:1a:
6d:86:a0:58:7f:77:1b:9b:ae:2a:7f:29:23:6e:fc:
90:09:f4:98:77:01:ed:88:96:71:fe:0e:1e:56:03:
c9:b5:ff:99:50:58:cd:7e:d7:43:35:e6:93:93:03:
35:73:10:53:6c:9a:d0:62:26:9f:91:01:8c:f7:60:
f4:ee:1c:93:42:16:79:bc:e4:ad:7b:b0:e3:ab:ed:
a2:11:20:44:38:a9:78:5c:f6:b2:08:00:af:02:9d:
65:cd:9d:35:99:c3:eb:09:cf:ba:a1:15:e2:4a:eb:
05:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4B:3A:B1:5B:01:9F:9C:AD:F9:33:7E:A0:A3:7E:63:BC:2F:5D:1B
X509v3 Authority Key Identifier:
keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0b:73:c9:3c:25:e1:df:53:20:d9:5e:a0:89:6a:96:c0:dd:
db:4d:17:2b:61:f5:4a:92:02:eb:df:9e:b7:4c:cd:48:4d:a7:
b5:13:7f:83:c3:d3:e0:55:14:c0:81:d0:28:9f:ec:8f:91:ca:
3f:79:48:c6:fb:93:66:22:d7:bc:1c:d9:fd:2b:2d:52:9e:bd:
79:39:99:6b:52:e4:63:8a:50:a7:81:a5:2c:bf:90:b1:64:47:
89:4c:3e:2b:2a:bf:bb:51:58:d9:d9:56:0f:e2:45:0c:5f:36:
fa:e6:bb:57:72:0a:4e:cb:db:f2:09:f2:24:1b:56:7d:4f:dd:
c6:31:1c:9d:47:14:3e:04:74:e5:8f:2c:03:38:fd:91:ce:ff:
85:b6:13:8a:f0:0b:2d:13:f6:fe:b8:8b:32:5e:05:2e:30:9b:
31:79:c8:53:68:d1:c3:a7:f7:c7:69:2e:10:50:93:39:bd:fa:
5b:2c:58:ff:b4:b1:0b:9d:d8:7d:8d:6e:6a:2e:d4:d1:55:9b:
5b:e7:47:f4:66:7f:2b:f0:4f:04:1c:28:3f:9f:f9:09:29:70:
be:fb:91:b6:6f:2f:42:2a:17:ea:2a:99:b8:b8:96:73:9f:d4:
76:82:f0:b1:8a:ad:79:84:96:f8:e4:4f:53:72:a7:f9:59:9a:
5d:fb:f4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:22:50 2025 by rpki-client