Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: 0yK8IuIhXA5sflYfBywyr6xOaPBx/5lsJdYLoGAXXJg=
Subject key identifier: 53:59:5B:17:8C:EB:9E:AB:60:83:D2:A6:CB:1F:D3:27:32:F7:48:C0
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 0196BDEE2873D6247DDBCF5D71DEF1ACDE61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 05C7
Signing time: Sun 11 May 2025 06:00:23 +0000
Manifest this update: Sun 11 May 2025 06:00:23 +0000
Manifest next update: Mon 12 May 2025 06:00:23 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: 629+KqGpYmuWm067T6XPsByXxFjJjPnl+T68+PWHZoQ=)
2: FUn2t9ppYu0Wn0pkoCRZ-HiUy7U.roa (hash: IgKhBAHaInAK8D+wEDHgOoVh2qEqWhDFRzWVOdnNaSE=)
3: H4hpUNA2nrrRur4Tk2W8HjJVqu4.roa (hash: oa7awxP7blKcpEGQ8hgbpBoX6kUOq34Ta41x1XECaFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:28:73:d6:24:7d:db:cf:5d:71:de:f1:ac:de:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: May 11 06:00:23 2025 GMT
Not After : May 12 06:00:23 2025 GMT
Subject: CN=53595b178ceb9eab6083d2a6cb1fd32732f748c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:c3:e0:85:d9:e8:6d:e9:49:32:cf:64:d8:
ed:2f:19:0b:87:cb:1b:96:69:6e:26:91:9d:df:9a:
9f:88:12:7b:a9:93:39:fb:b3:36:f1:58:7e:83:d1:
20:00:a0:bc:f4:c6:3c:e2:03:b1:b8:37:3f:ac:da:
a8:f9:08:7c:0f:8e:7b:fa:87:64:06:2a:54:36:57:
84:b4:48:e8:74:2e:33:8c:56:91:5a:a9:62:cd:ee:
92:da:50:ac:32:e9:64:cb:0f:2f:14:52:d3:21:4d:
92:3b:4b:e0:4f:8d:be:a2:6d:aa:b9:55:ba:50:2e:
75:79:03:3f:5b:9b:19:3e:0d:29:6a:24:a5:20:2c:
38:0d:72:c7:26:b2:18:f9:50:bd:e2:3c:85:ca:7a:
08:dc:f3:37:28:14:2c:b6:f1:fb:7b:7f:2a:17:64:
ac:9d:de:fe:78:86:7f:57:c8:49:75:af:6a:78:9e:
0f:64:7b:91:81:36:bd:83:4b:91:78:e0:36:81:0b:
d0:97:eb:a6:16:17:a4:04:39:b0:fa:4b:db:50:1c:
82:8c:f9:0e:53:a2:3a:39:86:5e:75:b8:5c:e3:89:
0f:ce:b5:f2:76:31:6e:26:62:54:72:33:bc:12:54:
47:b1:cb:09:d7:62:21:15:5b:1e:2c:7a:b7:2e:7c:
96:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:59:5B:17:8C:EB:9E:AB:60:83:D2:A6:CB:1F:D3:27:32:F7:48:C0
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b5:a4:c0:fd:4e:91:12:18:1e:c9:a4:39:04:33:58:53:fc:
1c:b4:68:92:62:57:aa:15:12:8d:6f:fe:f3:40:19:cc:05:a3:
dc:e0:e6:00:08:5f:c0:45:af:21:d1:fe:0d:5f:c0:46:6e:a9:
b8:04:27:07:e9:ba:48:29:be:a7:56:a6:a5:e6:18:60:ea:9b:
a0:f0:46:24:66:a3:f6:11:c3:af:f5:9f:19:6c:2e:e6:e6:30:
17:b9:37:cc:95:4a:97:05:19:ec:2d:5a:4d:3b:8e:de:86:b5:
ec:15:ec:6e:ff:95:79:58:ef:6a:31:37:d9:fd:dc:70:fa:64:
d7:19:5f:07:55:6c:41:64:d3:42:92:ed:80:71:03:b3:e5:1b:
c8:fe:c6:21:57:68:d1:7b:cb:ab:86:f9:b0:64:56:9f:65:78:
17:4b:b1:73:8d:d6:a3:18:3f:d8:f5:db:d8:b8:3a:54:fe:9c:
78:5d:2e:16:7c:1b:bd:22:4d:63:81:57:05:b8:eb:f8:f2:72:
0a:38:13:56:9e:41:5e:50:6e:73:01:35:d8:a3:49:76:81:02:
ce:71:22:a7:54:12:95:44:f0:31:86:5e:aa:09:c5:0b:44:a9:
07:85:c8:99:b6:08:9e:2a:a5:c5:86:fe:43:66:f0:63:17:d9:
38:32:6c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:47:43 2025 by rpki-client