Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
File: 5Icdjywm6nGuXBPIRUp70xhxkYQ.mft (raw, json)
Hash identifier: N1TPNcJW01mpNXiXZguPjJREshPOZDdukctTajSH98c=
Subject key identifier: C3:64:B8:80:06:76:DD:BC:A9:3B:E2:C5:15:77:DC:A5:61:EA:87:63
Authority key identifier: E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
Certificate issuer: /CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Certificate serial: 0196DD0B228DB4A8A3966416A1DD08BD26AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
Manifest number: 0CC4
Signing time: Sat 17 May 2025 07:00:16 +0000
Manifest this update: Sat 17 May 2025 07:00:16 +0000
Manifest next update: Sun 18 May 2025 07:00:16 +0000
Files and hashes: 1: 5Icdjywm6nGuXBPIRUp70xhxkYQ.crl (hash: G0JInhXkEECihSoxte+1x7zId1MgUDFQ9VzMvI7OJfM=)
2: ook9uIQAuCcVv2Fg0PJ5r3IwiNU.roa (hash: Y/wn2KIY7krXyisLSYMbczx5AjYDM8sXL4TRFNZpN6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dd:0b:22:8d:b4:a8:a3:96:64:16:a1:dd:08:bd:26:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Validity
Not Before: May 17 07:00:16 2025 GMT
Not After : May 18 07:00:16 2025 GMT
Subject: CN=c364b8800676ddbca93be2c51577dca561ea8763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:96:33:70:36:15:4e:44:6a:21:56:3e:a3:70:
95:94:f2:ac:87:aa:ca:94:f5:bb:3e:a3:0c:41:e5:
76:e7:a6:4a:1a:6a:22:75:e6:d3:c5:3b:c2:5b:93:
69:03:70:29:74:00:84:21:43:b2:87:4f:1e:bb:a8:
ab:dc:c9:b1:49:0e:0b:ad:9c:ff:01:98:fc:a3:81:
9c:ca:6e:5a:94:ea:c0:b1:c3:f5:b7:ed:31:3c:ee:
b7:45:51:59:44:cb:ec:67:de:6c:39:4b:69:d0:bc:
fa:86:5b:d3:4a:2f:63:91:7d:93:15:ed:75:b4:8c:
26:50:2d:5b:c1:cd:4e:5e:41:dc:61:49:24:84:e3:
e2:bc:14:9d:64:15:8a:be:59:5c:ef:41:c0:0b:38:
40:2c:ef:91:99:3f:cd:28:9b:3f:40:54:91:d7:2b:
e7:b6:61:be:2d:9e:84:53:52:59:00:1a:d7:58:d8:
6a:6b:53:46:6d:b0:86:e6:06:8b:fb:b4:d4:ec:ba:
03:bc:ca:f4:14:01:3e:90:6f:c3:a7:43:52:d7:dd:
30:2f:e9:6f:b2:93:c1:4a:d8:d2:f4:70:46:36:21:
a8:b1:8c:77:d1:70:bf:ea:51:c2:99:35:30:7f:99:
21:91:7f:42:02:87:e9:ed:92:d2:37:b3:2e:98:0c:
e2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:64:B8:80:06:76:DD:BC:A9:3B:E2:C5:15:77:DC:A5:61:EA:87:63
X509v3 Authority Key Identifier:
keyid:E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:11:bd:c4:ab:6b:f5:fc:79:52:83:68:92:69:eb:91:ab:68:
e7:ef:99:18:b6:99:19:7e:91:dd:4c:60:33:a3:82:71:cc:0b:
da:68:40:49:22:13:0c:b9:c4:7f:79:84:c6:04:0b:cd:ed:fc:
ae:28:64:82:24:82:2b:5a:1d:46:ab:2b:f2:35:44:d0:91:5d:
85:2b:3f:b4:fa:15:87:07:0e:e3:4b:a9:99:fe:5f:90:98:21:
17:1b:6b:dd:70:2e:3a:f0:05:77:9e:97:c6:78:d7:bd:0e:83:
d4:e8:3f:7d:43:3f:0f:83:0e:1c:0c:79:b8:d8:bf:79:64:51:
e5:d6:07:53:2f:f3:d6:38:c2:aa:7a:91:18:99:50:e6:f3:22:
66:e9:71:db:2c:98:cd:2d:79:77:00:88:e4:cd:8a:6b:b6:94:
46:1a:d2:82:ae:7d:e0:76:c0:79:61:20:22:dc:5c:e1:59:09:
66:d7:d5:89:28:73:a7:14:9d:10:56:b4:89:db:f6:14:01:15:
cb:b1:cd:9c:7e:09:9e:41:50:07:2b:ce:19:f5:2d:05:ae:91:
c9:70:dc:df:bd:5c:8b:fd:25:97:ab:60:0f:5e:69:aa:43:77:
5c:05:a8:55:44:4f:2b:e2:6e:a6:c9:37:f7:67:ad:4d:dc:12:
7c:08:02:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 11:26:18 2025 by rpki-client