Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
File: A5gx97o94vvvFtRkn9SGDBXp1sM.mft (raw, json)
Hash identifier: gvCI5B0ewFQGnB8HPVL9HzwV8J3LyX2vFQAcXeg/9uI=
Subject key identifier: 51:5A:8A:94:09:14:E7:8A:6C:B5:74:F6:D0:DA:2B:9A:1F:97:8A:96
Authority key identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
Certificate issuer: /CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Certificate serial: 0196CACE7661D4647BE7195F4373577BA24C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
Manifest number: 05A5
Signing time: Tue 13 May 2025 18:00:50 +0000
Manifest this update: Tue 13 May 2025 18:00:50 +0000
Manifest next update: Wed 14 May 2025 18:00:50 +0000
Files and hashes: 1: A5gx97o94vvvFtRkn9SGDBXp1sM.crl (hash: KOb828pZxeVSxkk4dX72lhNx0XfVCl9sDHSLLCassns=)
2: p0cL-vdhY3KSfcwz6s4koNapmbw.roa (hash: 9RImGj5UfNKUq/CzlTB6jfp8TR4Xc1sqYedIB3MDaIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:ce:76:61:d4:64:7b:e7:19:5f:43:73:57:7b:a2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Validity
Not Before: May 13 18:00:50 2025 GMT
Not After : May 14 18:00:50 2025 GMT
Subject: CN=515a8a940914e78a6cb574f6d0da2b9a1f978a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:83:be:a2:57:dc:df:14:b5:7a:5f:6e:da:
68:f1:08:a2:67:96:d6:f8:de:5c:0a:02:fc:8a:c7:
4d:b2:c3:14:46:2f:5d:5b:5a:05:76:ca:ad:ba:52:
af:c9:68:b8:2a:88:e5:f4:45:c0:58:4a:e6:d0:74:
95:04:79:22:74:95:c4:ed:1e:69:07:fa:1a:38:ee:
8d:d2:34:8a:95:2d:27:55:1a:47:17:f0:3d:fd:49:
ef:71:c5:73:f0:c6:82:89:15:0a:45:cc:ac:fa:ba:
7d:a2:36:5d:d1:2b:96:da:2c:22:51:0e:46:f7:61:
2d:b9:65:23:bd:ce:9c:8f:7a:02:8b:0a:fd:01:18:
3e:5d:34:60:d6:1b:93:5b:39:bd:0b:62:84:6b:7d:
6b:15:fd:26:96:e9:ac:68:a4:4a:f8:be:18:cf:f9:
e0:9c:f8:2a:87:b9:72:59:3e:93:ff:29:2a:94:15:
c0:76:27:3a:2a:8e:98:b3:6a:b4:d0:2c:14:ee:40:
81:30:69:97:58:f2:a5:86:28:03:29:3d:74:5c:20:
6a:55:30:0e:a6:29:d1:9a:94:78:02:c8:6f:9e:8b:
13:4b:a4:ac:9f:5f:ae:26:43:f8:95:5c:90:0b:88:
a0:02:dc:f5:02:f1:e1:10:db:a0:b5:8d:76:94:56:
27:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5A:8A:94:09:14:E7:8A:6C:B5:74:F6:D0:DA:2B:9A:1F:97:8A:96
X509v3 Authority Key Identifier:
keyid:03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:72:5e:dd:e3:6d:23:91:28:5e:74:c2:63:f3:45:5b:a6:bb:
05:d1:3e:eb:6c:60:4e:f3:92:dd:46:fe:d7:20:5b:b6:6a:7c:
49:b9:43:4a:d4:c2:9b:b3:55:6c:6e:ed:f2:c7:9e:2d:ab:12:
c9:03:7c:2d:40:cd:5c:30:dd:06:4a:95:82:a8:5c:1a:83:2f:
ba:6f:35:43:cc:be:84:ac:ec:d8:9d:e2:f0:a3:01:8d:6c:51:
13:d5:3f:1b:88:53:16:2e:b6:e0:3d:d1:03:4b:75:32:85:d3:
4f:17:19:1e:1e:bb:8f:2f:d8:3c:6a:a0:fb:7f:68:0b:39:c8:
3a:e6:35:c9:69:4b:82:cb:ec:33:e2:c1:fa:56:1d:af:3c:10:
b7:1e:59:b2:87:78:b4:0e:5a:b6:b6:33:2f:00:66:b3:a3:bd:
c0:79:2b:b3:8f:ac:e6:97:bf:67:f8:b8:8b:c8:c4:24:f3:cb:
83:d0:cb:7b:ac:0d:c6:f8:78:0c:39:0c:27:45:e1:18:15:ee:
26:4f:bd:af:72:f8:16:83:79:83:2e:9c:ad:3e:15:26:8c:c9:
b5:21:71:51:82:99:f0:20:e0:06:ed:8f:6c:12:a3:8f:79:de:
b4:5e:88:e9:18:76:58:e3:44:75:b1:a7:85:78:ce:23:db:56:
e4:f3:b2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:51:35 2025 by rpki-client