Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
File: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft (raw, json)
Hash identifier: 2eT1otzltNrmgbve9xywSsqK6Y/f/BVt6moTFugnph0=
Subject key identifier: 65:6E:6D:B3:C6:0A:D6:77:36:5D:A4:51:AA:90:6E:98:DB:76:20:A4
Authority key identifier: E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
Certificate issuer: /CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Certificate serial: 0196BD49B03B2FA7F2A850849D5EA22CF38A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
Manifest number: 0FEA
Signing time: Sun 11 May 2025 03:00:45 +0000
Manifest this update: Sun 11 May 2025 03:00:45 +0000
Manifest next update: Mon 12 May 2025 03:00:45 +0000
Files and hashes: 1: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl (hash: dqdmJQC166zSgBng2cOqK5kNtiEkTHGLym3AyhqRsYs=)
2: V60g_4Hl1O4ws6xObJRepK5WbCI.roa (hash: WQJN9PGlNp52w8KNVApuftRmLkpbyYXJ0S9Q2EedPcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:b0:3b:2f:a7:f2:a8:50:84:9d:5e:a2:2c:f3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Validity
Not Before: May 11 03:00:45 2025 GMT
Not After : May 12 03:00:45 2025 GMT
Subject: CN=656e6db3c60ad677365da451aa906e98db7620a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9f:dc:a4:44:31:86:1d:d0:96:b8:9b:45:5c:
1c:78:1c:6d:37:7f:8e:79:95:57:2d:08:18:54:39:
ae:6f:1b:d2:af:e4:cd:4d:18:0f:25:df:7a:8b:07:
3d:f3:8d:2a:02:d8:c3:d6:c5:db:37:fb:c5:1a:cd:
6e:84:0f:2b:2a:05:f4:87:fa:c8:c3:44:77:85:34:
a0:21:12:9b:d9:7c:ab:52:30:d2:b5:07:9a:f4:61:
aa:bb:06:af:89:58:20:10:12:80:91:6c:e5:5a:26:
55:87:0a:85:bf:01:ec:b8:e9:70:5b:cf:cc:a5:ce:
a3:a1:ff:2f:37:58:8b:c5:76:9c:05:d1:0d:b2:4f:
4d:af:01:16:8d:25:09:84:a2:14:9d:26:37:ad:05:
11:1a:14:e3:b6:02:2a:6b:7f:c5:d0:af:a0:20:1f:
41:1d:f1:88:9c:b6:e0:97:07:93:0d:dc:34:b2:4c:
5e:91:0e:8d:be:36:3f:77:09:01:d1:b3:ba:dc:6a:
fd:2e:af:d3:92:58:5c:46:f4:52:89:92:42:bb:9a:
2d:b3:b7:7b:fa:8b:0f:ea:22:57:cc:67:d9:3c:fa:
8b:ac:60:a0:0a:43:1b:bc:50:6b:ed:9b:0f:a8:e1:
30:f4:33:99:bb:b0:56:c7:33:fe:c0:48:e1:ed:85:
14:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6E:6D:B3:C6:0A:D6:77:36:5D:A4:51:AA:90:6E:98:DB:76:20:A4
X509v3 Authority Key Identifier:
keyid:E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:1d:02:dd:8b:00:ec:b7:a8:b6:4b:fe:11:4f:2c:c7:45:a0:
da:78:d5:94:dd:32:ab:26:88:ce:7a:ce:fb:43:f2:51:a4:be:
b3:be:b8:fe:35:e9:d0:f4:24:37:66:47:70:7d:80:89:3e:6f:
d4:88:f5:db:5d:47:b8:a8:99:73:60:78:7d:5d:40:9a:d4:da:
ff:44:65:9f:d7:41:e3:c5:07:d4:66:b8:c9:6e:90:d3:59:42:
e0:ee:dd:36:d6:28:e0:d5:a0:cb:b5:3d:c1:e7:5d:31:ca:05:
5e:7e:4f:02:4a:85:40:fa:57:c2:da:a1:91:3f:4f:2a:4a:d3:
2c:df:94:bd:e7:f5:6a:5f:43:ba:b8:46:1f:eb:a8:f7:0e:d1:
81:0f:67:e1:52:8e:1f:29:38:e5:9f:b7:71:c2:82:04:4a:e3:
e4:1e:4e:27:eb:b6:65:64:bb:2b:90:40:55:db:19:bc:f1:43:
2c:4d:b5:ba:d4:e6:61:9c:9e:28:e0:9c:6f:78:54:6f:58:02:
bb:0c:88:af:ff:6f:91:3b:6a:de:5f:7f:a4:10:c6:06:50:45:
6a:28:53:c2:58:2d:7b:36:22:b3:1f:65:8a:0f:f8:55:c7:d5:
72:45:8a:07:f4:ce:c4:bc:dc:9e:86:e2:45:e5:16:d6:f3:9b:
7a:7b:d3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:10:59 2025 by rpki-client