Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
File: 5dJyqNwEH1rcer0A1k0_MsIE2rI.mft (raw, json)
Hash identifier: FWVVsjd57bBnEcduxhlQk3Bfuq8hlpPw+jNXdnt9JP0=
Subject key identifier: B4:A4:9F:B5:AB:EE:79:68:26:A4:D0:45:08:5F:1D:00:62:24:D0:4F
Authority key identifier: E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
Certificate issuer: /CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Certificate serial: 0196BE25722E258D7090EBF7AED67D75F9FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
Manifest number: 0BEE
Signing time: Sun 11 May 2025 07:00:47 +0000
Manifest this update: Sun 11 May 2025 07:00:47 +0000
Manifest next update: Mon 12 May 2025 07:00:47 +0000
Files and hashes: 1: 5dJyqNwEH1rcer0A1k0_MsIE2rI.crl (hash: Fnw01yNDn0emFSugxBGrlmYowJbGXjOs8Ruc6q+Adgs=)
2: BSxB6YJq2jQPtYNgk4RjDz0LLwo.roa (hash: 0H0jQmEDdYcS0G88hDG7z0fv29sDbdsIXn2r0lKdjdI=)
3: DOxLN4SU2YKVe0VPHjqcaGZlpe0.roa (hash: SrolEIibncQUXL/HWDj/0Ei9nEoCbSOrTFYN2mtGMDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:72:2e:25:8d:70:90:eb:f7:ae:d6:7d:75:f9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Validity
Not Before: May 11 07:00:47 2025 GMT
Not After : May 12 07:00:47 2025 GMT
Subject: CN=b4a49fb5abee796826a4d045085f1d006224d04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:2a:e3:f0:02:25:c8:a4:b0:3c:c3:34:e5:
65:66:9e:79:a7:d1:e0:a1:4d:5b:3a:bf:6c:6c:3d:
72:c4:10:ba:fd:23:f6:00:47:ab:c8:51:3e:ab:2e:
30:e8:0f:0b:99:af:03:c6:a8:52:28:03:bf:23:39:
44:4a:54:0b:bf:9e:5e:4b:03:8d:46:ed:93:d4:05:
77:a4:c4:e1:cd:03:38:66:ee:c6:29:9c:64:c1:32:
9b:43:bb:e8:77:8f:5a:c1:f1:e8:2c:40:7a:09:5e:
b8:8e:a9:f0:5a:a5:5a:eb:4c:35:47:38:d4:e7:60:
95:8b:ca:dc:dc:82:90:c9:91:ea:ba:d5:5d:e0:0a:
2a:1a:b1:ae:ba:0a:42:79:92:50:78:23:91:82:47:
2a:73:7d:6f:08:a1:fe:07:ca:49:24:2d:82:37:aa:
73:e1:a9:d5:22:4f:68:0d:de:f9:88:c1:f7:18:54:
fa:61:07:8a:9e:ec:36:de:06:a6:f3:c8:aa:c9:4d:
e5:62:c8:83:5c:4e:57:7d:12:89:cf:0d:0a:22:42:
27:6f:d1:05:13:df:4d:2e:7c:43:72:8e:8f:a7:49:
02:5e:71:ba:95:17:e5:7c:17:64:20:f6:79:0a:89:
19:22:ff:36:24:49:2b:22:51:26:4b:07:ef:2b:1f:
d2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A4:9F:B5:AB:EE:79:68:26:A4:D0:45:08:5F:1D:00:62:24:D0:4F
X509v3 Authority Key Identifier:
keyid:E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:36:a5:20:9f:90:92:40:8e:f8:3d:33:f2:22:d3:6f:d4:72:
b5:81:1d:86:42:a3:20:18:91:e5:04:a7:45:fd:bc:a6:4a:04:
d9:82:fd:39:4f:34:b4:f3:a6:33:b9:af:24:4b:66:84:be:95:
7b:ec:46:02:af:03:fa:f2:3b:92:42:85:31:71:cb:69:31:05:
4e:d4:a0:3f:90:fb:2c:9c:10:52:4e:84:41:7d:4e:1b:cc:13:
5b:b4:54:cb:2c:cb:07:28:3b:06:4e:df:99:a6:43:80:bc:e3:
f7:6d:7c:96:50:ca:64:41:1a:c1:d8:c0:f6:87:e3:05:3f:e1:
89:2c:04:dd:b6:ca:96:f1:30:69:6f:dd:4f:d8:4a:07:ac:bf:
8c:0e:1f:29:94:7b:77:5b:90:0f:b0:da:fa:f8:e6:1d:e0:7a:
41:3c:fc:05:55:1d:67:17:3c:9a:2a:62:9d:00:81:8c:85:61:
52:e3:9f:d0:2c:94:b5:7e:7e:19:33:a4:f6:b7:e3:d5:b1:af:
00:c5:a0:d2:0a:b7:07:fd:69:2a:70:7c:9c:bc:16:f6:b1:1d:
cf:c6:30:3c:46:5d:d5:e8:bf:d4:eb:94:2e:4a:87:3c:75:51:
01:14:b1:c9:49:e4:d9:95:18:22:eb:19:48:0c:e3:3c:db:4b:
12:39:a3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:47:36 2025 by rpki-client