Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
File: 5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json)
Hash identifier: Ef9+lhqK4CxFoE5Th/n8Em2HzhG/qPe240Wp6eZQSzI=
Subject key identifier: 20:A6:32:CE:9D:72:52:6F:99:92:A5:73:31:85:67:78:26:A6:39:31
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial: 0196CEE2D07F60B6E6434FA1F72D604A0A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
Manifest number: 153D
Signing time: Wed 14 May 2025 13:01:33 +0000
Manifest this update: Wed 14 May 2025 13:01:33 +0000
Manifest next update: Thu 15 May 2025 13:01:33 +0000
Files and hashes: 1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: tvON89cdy0pfu62TDOk4okYCHjM/czEbm87i4GaU8ow=)
2: O7xkMgYDWmT39_oyZPNETli4dGo.roa (hash: BJVxC4UljGsK/BbuRqwBk8+Scbbux5UgI7xaPeJbQCA=)
3: mTHF4xRS849mOw36faqzyw4dbV0.roa (hash: wG6gmT9BywW9Amqbl4suJT23ZQUJGIpmhCizynoZqms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:e2:d0:7f:60:b6:e6:43:4f:a1:f7:2d:60:4a:0a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Validity
Not Before: May 14 13:01:33 2025 GMT
Not After : May 15 13:01:33 2025 GMT
Subject: CN=20a632ce9d72526f9992a5733185677826a63931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:72:13:7f:3f:0a:81:4d:2d:16:14:c0:8c:
8f:1b:c7:1f:8f:f4:91:25:5c:86:c0:18:20:7f:7d:
ff:c2:dc:ee:74:6b:ff:d6:f5:2c:82:7f:b9:e6:3b:
82:71:c2:0a:11:1c:f4:87:31:03:78:0c:e7:00:d3:
3e:c4:26:53:2a:36:13:1f:bd:f4:8d:70:10:d0:03:
2e:e1:5c:f0:9e:e2:57:1f:6c:9a:db:eb:10:0b:6c:
60:b8:ee:36:87:a2:4b:13:33:e9:9e:3e:e2:2b:f6:
af:a9:3a:11:05:20:f6:d9:2d:9e:90:b8:65:01:70:
e1:bc:57:0c:6b:12:b0:fb:0b:24:99:d9:b1:9c:b1:
3c:96:36:b8:2c:c7:ae:3f:13:92:86:ce:69:06:08:
31:b2:2f:b3:39:31:f5:e7:7a:08:8c:2b:fe:3a:0a:
c7:cd:c7:23:8c:c7:4a:c4:fe:5e:96:50:b9:ae:5e:
4b:a2:18:0b:fd:0f:6f:71:7f:3e:0e:08:a3:e0:76:
07:0a:7f:49:68:62:81:a4:28:a7:73:34:75:f3:2b:
00:79:cc:9a:b4:9b:bb:b7:55:1f:72:a0:5d:70:43:
62:61:b8:d3:5e:6f:12:85:14:a9:fb:21:00:9a:bd:
c7:60:ac:d9:9c:d6:28:fb:be:a6:c7:9e:ee:54:96:
1b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A6:32:CE:9D:72:52:6F:99:92:A5:73:31:85:67:78:26:A6:39:31
X509v3 Authority Key Identifier:
keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:bd:46:da:0a:28:6b:4f:80:12:d0:e1:b5:e8:ff:f2:b8:ee:
83:44:03:d5:ab:ee:c2:40:2d:d1:36:b6:04:f7:27:ec:33:fb:
f4:a6:99:59:85:c6:a8:1d:9d:55:73:6c:e4:ca:e4:84:08:3d:
79:d5:c8:8c:4f:86:08:a6:a8:5e:2a:85:76:b0:08:b5:b7:c9:
fc:29:d4:07:ee:60:ca:4c:34:d5:4d:83:d9:0c:7f:2b:9c:d4:
1f:71:5a:03:52:43:dd:f3:10:a8:2f:11:c0:13:72:c9:eb:85:
d5:18:72:e5:97:65:3d:7f:b9:33:64:f0:ea:d7:42:2c:a2:a8:
75:9e:22:1f:8c:ad:03:c3:0b:b0:fd:6a:17:82:18:de:29:38:
87:24:23:10:d5:06:63:05:49:cd:97:3b:8c:4c:02:ac:46:91:
d8:bc:bf:47:47:d4:2d:1a:c1:98:e5:66:78:c3:c2:d4:02:e0:
d7:3b:d7:2f:c2:d1:41:94:04:e4:98:63:f0:a9:ed:37:76:b7:
2b:36:81:4a:0c:6e:c9:fc:9e:76:0c:d5:66:9a:6d:a7:b8:aa:
a6:fa:d2:57:3c:f0:1d:d2:9a:34:7c:4e:f7:1a:0b:bb:73:34:
7a:c6:e3:db:fd:1f:b7:af:6f:34:c5:9d:82:92:30:90:fa:67:
71:64:80:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:21:49 2025 by rpki-client