Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
File: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json)
Hash identifier: rB48mVHotAjpVqpR9ImP55YI2I3z1UhjxbXt78AQgDA=
Subject key identifier: 70:54:BD:02:98:7B:96:87:B2:90:D5:36:98:93:2F:95:75:E2:38:EE
Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Certificate issuer: /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Certificate serial: 0196A98BA928A55718A0149435209CC8A88C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
Manifest number: 0A4C
Signing time: Wed 07 May 2025 07:00:24 +0000
Manifest this update: Wed 07 May 2025 07:00:24 +0000
Manifest next update: Thu 08 May 2025 07:00:24 +0000
Files and hashes: 1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: 8MXjOksz5lmMeuPzco2AM5+8D+KP23RmGxHrNnWPHig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:8b:a9:28:a5:57:18:a0:14:94:35:20:9c:c8:a8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Validity
Not Before: May 7 07:00:24 2025 GMT
Not After : May 8 07:00:24 2025 GMT
Subject: CN=7054bd02987b9687b290d53698932f9575e238ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:80:e3:9e:1b:8f:0e:e0:44:2b:f9:fa:8e:
08:bb:94:9f:bd:2e:62:f2:c6:87:9a:c3:fe:65:f2:
ee:8d:e7:6e:4a:dd:e8:fb:77:c0:e3:9b:ca:5f:24:
14:4f:c1:eb:43:fc:1d:ce:db:c4:b1:ea:ed:1d:90:
92:cc:e8:9a:d9:f0:92:c7:c0:00:25:b8:c9:05:96:
4d:54:21:91:0c:db:16:4b:7f:00:ae:d2:db:6e:7f:
65:a5:b7:87:e1:2a:e2:c0:27:ae:25:b9:fa:da:c7:
bc:56:0a:ee:68:35:f0:2f:1d:4e:5a:5a:80:ea:50:
6c:ef:93:56:21:71:35:fd:17:19:99:fb:d3:6e:b3:
e9:e6:bd:bc:c9:ec:38:8c:56:7d:77:16:04:8f:ae:
e5:4f:98:1e:33:5d:d0:d9:00:c9:75:6e:17:87:83:
df:df:6b:ce:fc:89:f7:2c:c6:a1:b4:e8:36:62:18:
aa:69:5f:b3:b3:bf:20:c5:64:f6:4c:e9:6b:df:17:
5e:66:2e:22:d3:12:3a:cb:ae:a7:30:21:14:27:c1:
06:2d:7b:06:90:fe:9c:a5:33:08:d5:e9:15:a4:0f:
29:d6:77:d9:1b:93:11:2d:ca:d8:ee:bc:0a:c7:1e:
ba:12:9c:3f:c4:a4:57:ea:00:08:f6:c4:36:10:4f:
22:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:54:BD:02:98:7B:96:87:B2:90:D5:36:98:93:2F:95:75:E2:38:EE
X509v3 Authority Key Identifier:
keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a4:31:72:df:c1:c9:c6:b3:ae:64:84:e7:a1:73:48:8c:0b:
cb:1a:c7:23:60:90:5a:ef:ea:30:ad:85:60:bc:0f:6a:b6:0a:
93:db:8c:9b:16:46:8c:19:24:0a:9e:eb:7b:e1:a5:46:cc:37:
3c:c3:5d:6f:82:12:a6:19:6a:2c:06:28:f2:1d:5c:da:02:ae:
d1:d4:1b:3e:95:a0:a3:dc:f5:de:93:4e:b0:ce:3b:7b:a9:d6:
bf:f8:fe:20:ec:99:2f:63:c5:6b:cb:e7:17:c7:fe:d7:71:e4:
8a:53:e0:90:ae:0b:e7:2d:b6:97:8a:2d:28:21:d6:0a:3a:ad:
a5:52:2e:6f:ef:4e:6f:cc:ad:01:24:f0:43:f3:f6:18:ee:91:
41:f8:a8:3d:b0:a3:ab:c1:6b:63:bf:4f:44:50:c8:a9:41:f7:
cc:70:be:aa:87:b7:4d:a7:62:62:52:c2:69:10:78:45:11:56:
0a:de:c8:d9:d9:42:29:da:0c:d9:58:93:33:05:3c:4a:c8:a6:
0f:a7:f4:8a:d9:4b:0a:b3:cb:3a:80:ed:03:be:6a:6f:4e:43:
82:65:00:f0:6e:0d:af:cf:67:42:06:7f:fe:81:d4:99:8b:de:
7f:09:63:8a:ca:c4:28:1d:33:b2:9c:ec:1e:ee:26:2a:37:66:
fd:8b:85:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:47:39 2025 by rpki-client