Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
File: 5-QyokmU5XnrJJmh9vNMZSEY40Q.mft (raw, json)
Hash identifier: 4RnM5X6XlLp7zjWMFwMdO1oscoIHY1qPBzrv3WhpiSI=
Subject key identifier: 90:78:0D:43:67:37:A6:F8:31:67:1E:6A:1D:A6:01:07:FF:E0:35:E0
Authority key identifier: E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
Certificate issuer: /CN=e7e432a24994e579eb2499a1f6f34c652118e344
Certificate serial: 01969E99FBE0CA3764FC1759CF74C52356EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
Manifest number: 14B7
Signing time: Mon 05 May 2025 04:00:13 +0000
Manifest this update: Mon 05 May 2025 04:00:13 +0000
Manifest next update: Tue 06 May 2025 04:00:13 +0000
Files and hashes: 1: 1ap-zhjP2xlpcyvljzd4At-hRqs.roa (hash: vy++CPahIzqV0ojk71CI64hyqugiBwjMnM2TKCrxcDM=)
2: 5-QyokmU5XnrJJmh9vNMZSEY40Q.crl (hash: 5zFzHB0iVymJJWCi9NBT4ZPRE0WexAHFBcatXpFzWWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:99:fb:e0:ca:37:64:fc:17:59:cf:74:c5:23:56:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e432a24994e579eb2499a1f6f34c652118e344
Validity
Not Before: May 5 04:00:13 2025 GMT
Not After : May 6 04:00:13 2025 GMT
Subject: CN=90780d436737a6f831671e6a1da60107ffe035e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:dc:32:3d:11:de:46:c9:71:2c:66:24:f6:
24:f1:ff:7f:14:85:e7:34:4e:ce:83:3f:08:0d:73:
cd:0a:22:be:0b:26:6f:5e:12:2d:0c:0e:ab:dd:7a:
0e:40:6b:2c:33:b1:a8:df:27:4e:e0:7c:9b:36:c7:
b4:57:a0:e1:e1:a6:2f:45:d8:e7:9b:16:8f:f9:4d:
23:76:36:54:4b:b8:14:c2:72:7d:c4:31:c4:78:c0:
97:37:b7:6a:3b:42:ec:ef:05:8a:a6:73:54:1b:af:
84:95:3e:b3:b4:64:91:9a:c8:f0:86:22:9d:db:d0:
dc:b8:12:8a:98:32:50:2a:10:43:b7:a6:89:05:b0:
f0:e0:da:0e:1f:3d:ef:ba:34:76:42:47:8f:0a:40:
df:e3:df:40:01:62:34:d2:37:2d:69:6d:46:dd:bd:
dc:a8:0d:e5:a1:7a:bd:48:00:2d:f7:f1:fc:50:d5:
05:c8:a3:c7:b3:2b:d6:94:ab:7f:d2:f6:15:85:87:
4d:1c:9d:1d:ba:44:75:7e:9e:18:1a:c5:fb:27:17:
97:c5:5b:33:8d:c6:6f:65:3e:4d:94:a9:05:8f:54:
1b:b7:21:78:48:8f:ed:ec:88:88:15:53:a5:3a:a0:
54:1e:3e:54:86:c3:c4:8d:33:86:a5:81:cb:10:8c:
bb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:78:0D:43:67:37:A6:F8:31:67:1E:6A:1D:A6:01:07:FF:E0:35:E0
X509v3 Authority Key Identifier:
keyid:E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:5a:11:98:ec:95:48:0d:1d:39:29:90:45:a7:cf:e4:6d:0a:
80:ed:19:86:6e:ca:ad:e1:06:3f:18:53:17:fe:bf:a1:12:cf:
56:1e:20:72:f4:8f:e0:aa:78:c3:13:96:c0:28:c3:96:80:05:
0c:2b:e1:36:87:df:31:a0:5d:23:1c:12:e1:f4:f3:5e:2d:20:
1e:f6:33:84:84:85:eb:25:cc:05:33:48:d9:66:c9:76:f4:30:
9a:e5:39:b2:37:e0:80:eb:52:c2:1a:1d:0c:af:94:74:27:9a:
db:28:42:a1:1f:e0:08:3a:b7:85:15:1d:f4:da:b4:2a:07:be:
f2:b7:79:75:e9:ba:49:91:2d:48:cd:1e:40:2b:d0:4f:d0:2f:
13:f3:c8:b5:16:ee:e0:df:7a:0f:2a:48:cd:5b:2d:6c:a0:dd:
ed:88:a8:a7:01:ad:a6:63:a0:59:6e:1e:0b:8d:1d:bb:e2:3c:
c0:e9:a3:11:1f:29:3f:b8:5a:26:58:9d:a3:82:26:4f:75:63:
a6:3c:ce:ad:35:5c:e0:c9:8c:84:ea:df:34:c0:99:30:29:24:
c9:22:36:6b:bc:06:fa:fa:d8:02:6f:2b:07:78:f3:86:1c:94:
a4:b1:ba:f0:cd:79:59:4b:65:8e:29:3f:aa:3b:51:07:00:87:
53:d0:71:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:10:12 2025 by rpki-client