Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
File: 5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft (raw, json)
Hash identifier: tiFwXp3Jym/XLhHNWUQF0up4FE7B4G2zQgQe1fX1dqA=
Subject key identifier: D2:BE:C9:25:ED:CE:ED:43:3A:F9:BE:E3:1D:75:71:30:86:9F:E6:F0
Authority key identifier: E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
Certificate issuer: /CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Certificate serial: 0196C15DFBA659B007F2A00A96AB1EFD3B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 22:01:24 +0000
Manifest this update: Sun 11 May 2025 22:01:24 +0000
Manifest next update: Mon 12 May 2025 22:01:24 +0000
Files and hashes: 1: 1xvntgtwN598Xt12Wp30p-iFY40.roa (hash: Mu8yYMtQaTf8Y5ca71Jrhca8f7JY0TOmjgZFuk/22tE=)
2: 5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl (hash: Qg1GHEb9S3noQyd6Ur66Cj5Vcui+dNph48RN5YHk3rU=)
3: V_bFPJiZiN3dn69rtGf2PU2V_7s.roa (hash: yf/Df7sBD+Bl6bPwS7+5B7VNWvnFlcA8NvL0Ry+NDTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:fb:a6:59:b0:07:f2:a0:0a:96:ab:1e:fd:3b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Validity
Not Before: May 11 22:01:24 2025 GMT
Not After : May 12 22:01:24 2025 GMT
Subject: CN=d2bec925edceed433af9bee31d757130869fe6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:23:7b:cd:d7:27:4c:79:2e:ff:4a:28:be:72:
75:55:82:3e:b8:3d:65:28:93:14:08:8c:69:f1:59:
5b:6a:be:2f:f8:23:fd:3b:63:22:bd:7a:31:cd:b3:
f0:c0:cb:f2:cf:a8:24:35:b2:a6:8f:9a:5b:50:a0:
4e:1b:db:a0:8c:0f:54:5e:18:27:54:a4:b0:98:fe:
d9:99:cc:29:d8:02:b8:d7:68:c2:9b:3d:2f:8f:b8:
73:10:00:28:67:82:b5:36:18:12:a4:04:35:1a:eb:
85:37:f8:f7:45:52:08:4d:37:43:7b:ed:cd:84:ff:
76:0f:43:53:08:73:2b:af:23:3d:13:f2:80:87:8d:
db:58:5d:89:37:ee:29:27:8d:f3:f0:e6:9d:56:ce:
dc:28:ed:11:2c:95:db:26:f7:61:f1:4a:d3:48:8e:
ea:52:ab:7b:c3:2e:7e:0c:81:fc:38:a9:f9:5d:e0:
64:09:a6:a8:46:5e:fc:b8:fb:2b:8f:8a:d6:49:88:
f6:07:fe:79:be:17:83:73:f8:51:e6:f3:a0:b3:8d:
e0:dd:44:9d:fe:62:2b:e0:09:98:13:a7:52:f7:ff:
40:ac:01:d0:f0:33:c0:bd:9b:bd:bb:62:13:74:f6:
21:60:3b:d3:8d:99:fe:04:de:fb:5d:f2:f9:c4:ec:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BE:C9:25:ED:CE:ED:43:3A:F9:BE:E3:1D:75:71:30:86:9F:E6:F0
X509v3 Authority Key Identifier:
keyid:E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:80:9e:f7:0e:d6:94:0c:d3:c7:04:05:53:1f:e0:60:d9:a8:
5b:e0:13:c4:5f:e6:9a:8f:f9:7c:0d:65:9f:b1:3d:e5:4c:e3:
1b:39:d5:f8:bd:0d:03:00:cf:05:89:12:b2:1a:db:1a:35:cf:
ea:8d:97:37:58:2b:41:d4:3d:31:aa:f4:7a:80:6c:3c:52:d5:
c7:9d:a3:f2:e6:d6:0b:db:a8:a9:07:42:2f:e2:ae:ba:98:0c:
74:6d:41:5a:6f:71:78:7e:60:00:24:8d:00:93:9d:9e:1e:08:
5c:36:08:b4:a8:49:1d:51:85:53:34:3f:3c:ce:22:c8:6a:28:
37:32:cd:9f:6f:1d:08:b9:69:ab:10:01:35:1d:6c:b6:e0:6f:
ca:6f:ad:4d:e1:b6:16:09:d9:ff:e6:ac:18:bd:9c:5c:a7:34:
6c:88:54:79:04:1a:b3:cd:fa:d1:0d:da:26:aa:06:17:ac:dc:
d8:94:06:22:95:9d:34:e0:26:35:81:89:d0:cb:03:a3:1d:14:
6d:bb:67:d0:1f:9c:c9:7b:30:60:cc:5a:6c:a4:b3:48:3f:c0:
69:84:99:d6:c4:2e:fd:df:a5:35:aa:3a:6c:23:b8:df:41:c2:
31:a1:87:d4:6c:f3:c1:d6:c0:c4:ee:64:57:76:56:04:8e:52:
db:ca:2b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:20:58 2025 by rpki-client