Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
File: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft (raw, json)
Hash identifier: LJhjPzzHJlHiH+nSmcRZWW7r9Q6XNlgT+cJo1rXrguE=
Subject key identifier: FA:41:A8:C1:15:C5:8B:0B:2C:BB:76:E9:FA:69:65:5D:74:31:B4:F4
Authority key identifier: E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04
Certificate issuer: /CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
Certificate serial: 0196CFBE04CB7865EF4AF223FE95BFE9F57F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
Manifest number: 153A
Signing time: Wed 14 May 2025 17:00:58 +0000
Manifest this update: Wed 14 May 2025 17:00:58 +0000
Manifest next update: Thu 15 May 2025 17:00:58 +0000
Files and hashes: 1: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl (hash: f7rExYm9qXLvUYuxyH3HIT8u5JKjDgGYN0Bu6gpInUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:be:04:cb:78:65:ef:4a:f2:23:fe:95:bf:e9:f5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
Validity
Not Before: May 14 17:00:58 2025 GMT
Not After : May 15 17:00:58 2025 GMT
Subject: CN=fa41a8c115c58b0b2cbb76e9fa69655d7431b4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:21:53:d9:6a:47:e2:76:28:fe:63:7d:a3:86:
40:2a:0e:f2:03:4b:d0:f9:86:fe:b8:3a:3a:25:89:
96:df:7f:31:b8:af:28:ae:dc:1f:4a:98:22:af:bc:
e7:8b:0b:5b:50:6a:b7:72:18:9b:c7:be:48:24:3c:
65:0c:1b:01:a1:be:ef:7d:bc:69:6e:2c:e4:fa:89:
e1:c3:b1:de:b7:b5:48:2c:ba:59:af:15:e7:f3:e1:
ab:b5:bf:db:08:07:9a:e1:a0:75:c7:c4:e9:ce:d3:
dd:ac:9e:90:5f:f6:a5:0d:e9:f9:7f:fd:cf:3e:42:
bd:10:73:b4:0f:81:da:d6:78:d3:b8:ab:40:71:ae:
dd:63:6c:c3:df:ad:db:f2:f3:f3:4b:ad:d2:30:44:
32:3e:2d:7c:87:69:db:c4:21:19:43:dd:96:e4:f0:
34:5c:63:cb:c7:b8:c4:e7:a9:8d:0b:20:76:a5:e4:
78:90:2c:d1:3c:af:78:6a:89:48:3f:1b:a0:f1:49:
9c:48:1a:54:b0:08:59:5e:4c:7d:57:0a:83:71:a0:
4e:49:af:e4:5c:72:c2:23:69:53:b9:a2:16:a1:22:
94:89:50:9d:10:a2:1a:e7:cc:87:8a:6e:35:3d:7f:
32:1e:af:12:99:e8:2e:eb:44:99:31:cb:c3:07:62:
d5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:41:A8:C1:15:C5:8B:0B:2C:BB:76:E9:FA:69:65:5D:74:31:B4:F4
X509v3 Authority Key Identifier:
keyid:E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c3:e9:40:45:ab:cc:41:41:30:6a:c4:a6:f8:5a:b1:78:68:
28:e5:2f:25:6e:82:60:9b:05:91:93:86:63:8e:ad:6c:76:a6:
f2:9b:22:db:11:d1:a9:b0:c9:5f:ff:28:6c:3d:90:e5:e3:4e:
97:96:9e:1f:1e:dc:82:b9:d9:0e:08:1b:58:9a:20:51:7a:2b:
4b:40:5e:b7:87:4c:e1:0f:77:65:03:26:1f:c0:96:d3:7f:aa:
94:7d:3d:77:63:16:25:42:db:7e:0b:97:95:f5:4b:6b:a0:ac:
30:7e:51:dd:3a:1f:47:01:7a:7e:82:41:aa:e2:12:45:05:0d:
51:4c:74:dc:a8:9b:c7:89:13:d0:88:20:70:37:96:55:44:63:
c3:58:6e:31:60:d8:6f:58:ba:d9:d7:65:99:52:ce:d8:55:48:
d1:7b:77:70:66:36:fc:b8:4a:47:fe:00:f9:b4:a1:1c:4f:29:
8b:e8:16:27:98:dd:2d:1f:fd:a5:b6:a4:3c:c9:38:fa:23:64:
91:e6:ea:fc:d8:3f:a5:c0:ef:a1:bf:f5:d8:38:24:2c:61:0b:
d3:3f:10:02:ff:9e:45:9e:68:a1:8c:10:90:7b:4d:da:a2:db:
9e:70:0b:11:0b:6b:92:02:70:f8:7c:f9:19:c5:0a:57:b5:16:
92:3f:c7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:22:59 2025 by rpki-client