Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
File: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft (raw, json)
Hash identifier: 4omCKpzaD9J+CdACWocgm+H3HsswjApmuKDBmhviTiY=
Subject key identifier: 22:30:FB:13:C5:49:81:8C:83:53:BE:C5:F2:F9:CA:7F:4A:3D:0D:84
Authority key identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
Certificate issuer: /CN=e578bc065072b40baf08416e216a1307b24bc44b
Certificate serial: 0196BF6F84821114D40C404B71BD6F9EC67C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
Manifest number: 1532
Signing time: Sun 11 May 2025 13:01:18 +0000
Manifest this update: Sun 11 May 2025 13:01:18 +0000
Manifest next update: Mon 12 May 2025 13:01:18 +0000
Files and hashes: 1: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl (hash: 2cxuHLYdTPwqHtpcL3luFxumOdImH3AitIrmj54gigw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:84:82:11:14:d4:0c:40:4b:71:bd:6f:9e:c6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e578bc065072b40baf08416e216a1307b24bc44b
Validity
Not Before: May 11 13:01:18 2025 GMT
Not After : May 12 13:01:18 2025 GMT
Subject: CN=2230fb13c549818c8353bec5f2f9ca7f4a3d0d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:18:b6:51:a3:9c:0d:39:28:23:a8:e8:a4:6c:
2b:48:07:5c:a3:7e:c7:b6:f8:12:80:db:50:41:04:
72:5f:31:9c:21:e3:67:da:98:69:d6:ab:aa:45:e6:
e4:d9:cd:fb:a4:d7:b4:68:b6:29:47:3d:05:31:74:
ff:b2:44:b4:df:22:a7:ce:e4:ad:1b:f9:94:2a:e2:
5c:81:a5:22:05:29:42:95:8e:b8:eb:dd:90:83:b0:
e0:aa:2e:22:2f:9b:7e:24:70:7e:81:04:bb:e0:94:
0d:cd:86:5c:c9:51:e7:31:e6:3d:b7:a5:20:f3:be:
b5:b7:8b:af:d6:b6:67:21:a4:eb:1d:ff:9e:11:17:
cf:8c:6e:e3:ab:5c:4a:ce:3d:c8:a6:d5:3f:48:dd:
e6:b7:0d:ff:19:3a:42:31:ce:75:10:b6:c2:9d:d0:
77:a8:91:14:0d:73:5e:a4:6a:99:a8:0a:aa:f2:49:
3e:32:95:a7:66:27:63:05:ac:95:b1:8a:36:3d:89:
6e:e1:78:9a:a2:ba:28:db:84:e5:cc:54:b9:dc:fb:
bf:89:7e:60:b8:04:35:39:43:58:e1:c9:f0:fa:c6:
44:95:ce:6f:53:0a:a0:d8:26:ae:38:4d:b5:c6:68:
ea:8a:9c:36:e0:19:1b:6c:a1:40:75:8e:13:31:01:
7f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:30:FB:13:C5:49:81:8C:83:53:BE:C5:F2:F9:CA:7F:4A:3D:0D:84
X509v3 Authority Key Identifier:
keyid:E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:82:dd:74:51:40:ef:7a:f9:5c:81:6f:f9:da:89:14:11:b3:
11:39:89:db:66:3b:50:1d:03:d3:8a:5f:19:f9:b3:cb:f4:3e:
47:71:6d:c3:06:e8:b6:25:4f:f7:67:db:5e:22:00:62:8c:b0:
38:36:ae:a5:63:aa:68:8d:7a:20:75:15:bb:2e:af:e0:61:6e:
8a:c7:3a:1f:24:b7:25:82:8f:a4:bd:89:a4:cd:fd:65:45:55:
bc:52:c9:de:75:9c:88:77:d6:ca:76:07:5b:0f:5a:4a:27:34:
93:f7:91:de:9a:fa:4d:9c:4d:81:06:91:ac:34:b3:35:17:10:
d4:7f:cd:92:29:6d:77:16:1c:65:6f:20:c8:61:d5:e2:cb:e8:
60:8a:66:54:0d:a5:e5:cc:ef:11:28:1f:90:61:9a:39:28:96:
81:4c:48:0c:b0:6f:0a:61:ca:b8:f9:bb:cd:91:b8:95:03:44:
05:ce:47:5a:ec:51:f4:83:3d:3f:f4:14:32:72:29:6b:a1:a8:
57:bc:44:54:5d:cd:b0:2d:3b:eb:fc:46:6d:21:c3:e2:f8:fc:
6b:35:be:63:14:d9:74:d7:ce:ec:51:4c:2e:08:64:c3:ee:db:
ce:1a:65:77:e7:40:27:84:fa:39:30:eb:4e:8a:97:71:cc:e7:
b0:63:41:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:40:36 2025 by rpki-client