Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
File: 5llE5PrhnBWib8tfJzL_G6I9NU0.mft (raw, json)
Hash identifier: PcpUbyO7G75BHpdJnlpkOwDTfFauIiHvouJnR2furbI=
Subject key identifier: 12:E7:CC:5D:E6:7A:09:0A:80:E4:0B:2D:50:55:F8:9B:E1:0C:34:35
Authority key identifier: E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D
Certificate issuer: /CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d
Certificate serial: 0196BC0052BA37CE76D0432D0A9AA4D034BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
Manifest number: 01F2
Signing time: Sat 10 May 2025 21:00:59 +0000
Manifest this update: Sat 10 May 2025 21:00:59 +0000
Manifest next update: Sun 11 May 2025 21:00:59 +0000
Files and hashes: 1: 5llE5PrhnBWib8tfJzL_G6I9NU0.crl (hash: EDmXiIvjI3IAFjrSczw1iZHl5N9OWB34tBOxF0ggWw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:52:ba:37:ce:76:d0:43:2d:0a:9a:a4:d0:34:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d
Validity
Not Before: May 10 21:00:59 2025 GMT
Not After : May 11 21:00:59 2025 GMT
Subject: CN=12e7cc5de67a090a80e40b2d5055f89be10c3435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:13:86:d2:62:ab:c6:ef:c2:8d:43:9a:48:
62:0a:6b:44:ae:29:86:1f:2e:ab:3c:7f:e2:29:aa:
8a:9f:fd:28:fe:a9:87:56:9e:85:6e:26:db:ef:96:
9a:a7:f8:f2:12:e4:5a:a9:e8:11:17:21:28:f7:e7:
31:61:db:e5:71:b1:a1:55:b4:70:bf:dc:5c:fe:12:
72:24:2f:87:01:f3:c3:cf:c9:5d:51:89:b4:cd:d3:
c8:d3:ae:0c:82:c8:59:ad:3d:78:af:fe:ff:06:62:
38:68:e2:55:41:58:ca:4b:3b:ae:87:b4:0e:34:5d:
bf:c0:89:9e:94:74:2a:d4:f9:84:6c:58:f2:2a:24:
5d:fb:04:ca:d9:a3:12:f4:48:09:47:d3:e1:73:7d:
62:9b:d2:80:fa:95:ad:69:ec:75:25:95:27:ca:82:
0a:23:66:1b:94:f6:bc:04:63:ba:cf:c4:93:4d:b0:
82:b9:f1:80:5b:86:78:19:f7:ea:c0:f4:76:34:ba:
40:e9:7f:11:53:36:08:60:11:aa:57:9b:cd:ef:2e:
fb:5e:45:32:54:62:3d:1f:46:88:ed:74:70:2e:51:
25:a7:36:a6:73:78:16:75:8a:b5:83:71:54:5f:99:
7a:cb:d4:c3:8b:e5:33:6d:0e:19:ec:65:5c:1b:7d:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E7:CC:5D:E6:7A:09:0A:80:E4:0B:2D:50:55:F8:9B:E1:0C:34:35
X509v3 Authority Key Identifier:
keyid:E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:34:d6:60:c1:2e:bb:69:64:25:83:d0:a0:e3:84:51:fe:62:
ce:d9:4f:b3:df:4f:61:0e:53:a7:48:7a:63:07:2a:6f:9b:3f:
8d:f8:43:e7:9a:96:2e:e1:24:c7:72:f2:cf:d3:63:62:89:95:
c8:77:bf:82:d4:9c:4b:f9:0d:47:81:45:96:a3:68:23:7b:dd:
d0:fb:d2:0b:d4:a7:ea:35:42:e1:07:fe:b7:86:c2:4b:9b:37:
80:43:d5:ef:fa:36:fa:7d:f8:6e:11:1b:a3:68:fd:c6:3d:55:
2c:09:c7:fb:40:d5:86:b0:0d:54:0b:e6:fe:73:18:53:16:a6:
1a:5e:c0:de:9f:cc:11:88:ed:ce:03:48:ab:c3:0c:70:91:be:
e0:c4:3e:2b:61:19:b7:1b:67:48:13:3a:37:2d:9c:8d:c2:1a:
e9:f3:a3:7b:13:09:0a:c5:73:72:64:e4:85:cd:bb:09:7d:15:
fd:19:30:70:ba:6a:a8:36:48:38:65:a3:fe:1f:9c:52:86:f9:
6b:de:89:a5:fa:98:94:a6:ea:93:39:cc:52:f5:c4:0e:1f:ad:
85:12:89:49:61:79:5a:70:cb:0c:58:b3:df:13:3d:55:b3:c4:
0c:32:e0:0d:2e:65:7a:c9:35:4a:88:a6:bf:cd:25:e0:de:31:
28:87:11:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:26:46 2025 by rpki-client