Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
File: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json)
Hash identifier: YHYGrTrdY3uLFd1Z40RGR+F6geaNQMAbNIcQQ78Duwk=
Subject key identifier: A1:CF:7F:56:78:EB:82:D6:8E:59:55:5F:3A:FC:40:36:AE:08:05:63
Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Certificate serial: 0196CB7374D6C6D3CFD8065AD04D13CF5E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
Manifest number: 153D
Signing time: Tue 13 May 2025 21:01:03 +0000
Manifest this update: Tue 13 May 2025 21:01:03 +0000
Manifest next update: Wed 14 May 2025 21:01:03 +0000
Files and hashes: 1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: nAcixxlvVwNFwFE3q+vPDjs0Nmi/S2QOatuHGd3LwRQ=)
2: dq4NGDrJihdpAYEQ3owreA6iQU4.roa (hash: 1bpSRQ6nEHSR6H3DF+6pLQte0es+3qQ4qeng8ZdjLzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:73:74:d6:c6:d3:cf:d8:06:5a:d0:4d:13:cf:5e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Validity
Not Before: May 13 21:01:03 2025 GMT
Not After : May 14 21:01:03 2025 GMT
Subject: CN=a1cf7f5678eb82d68e59555f3afc4036ae080563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4a:09:c0:33:9a:df:ca:f7:f9:54:25:79:38:
9f:cd:62:6c:f3:07:25:a9:d7:b2:dc:24:1b:9d:37:
57:f6:96:84:b5:d7:73:cb:e9:24:26:e2:42:5c:ff:
c9:20:5f:90:3e:aa:1b:89:14:b4:49:b4:00:6d:84:
93:e9:0e:b3:91:05:fe:37:c7:91:3e:7d:21:f6:e0:
32:78:6e:3c:c2:4d:5d:4a:27:e9:50:3d:38:e3:b9:
a7:5f:45:b6:5c:04:01:e1:53:33:8e:e8:04:0e:0a:
17:98:b3:ef:2e:69:d6:e0:88:b8:e3:08:fc:a2:6f:
05:99:90:55:d4:4b:f1:ed:56:85:b2:51:06:d2:9c:
91:e1:34:e5:9b:a4:99:2a:dd:a6:3d:b3:47:54:0e:
74:14:cc:ca:ea:7c:33:03:7f:15:e0:22:5e:74:94:
41:ca:e9:3a:80:d2:17:96:40:7b:2b:82:28:35:82:
75:4f:80:38:42:bd:ab:04:69:7a:9e:c9:60:3e:10:
16:d1:c9:8f:89:c0:e2:e7:14:aa:ed:85:1d:a1:3c:
c5:e9:82:da:1e:f9:5a:ec:f9:4f:44:66:d2:35:71:
13:7a:05:e9:7b:6b:c1:f7:91:7b:1a:22:89:21:1c:
3e:4f:f2:7d:41:26:12:f9:fe:7e:ea:5e:5a:a6:28:
c3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CF:7F:56:78:EB:82:D6:8E:59:55:5F:3A:FC:40:36:AE:08:05:63
X509v3 Authority Key Identifier:
keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:db:4e:c0:dd:d0:f3:49:41:b7:21:12:a9:0f:b7:23:d2:1d:
d2:11:fd:62:96:a9:7b:71:2e:1a:ca:99:8e:60:9e:cb:65:93:
59:f6:c1:01:75:61:a2:dc:e6:b7:d5:15:23:9a:9a:e7:d0:01:
96:0f:38:1e:e3:d7:5b:ff:dd:ba:ad:d8:08:ff:8c:ce:ff:a4:
d3:af:23:bc:28:cc:f9:cb:96:e6:ed:0b:ba:e7:aa:ec:7f:11:
d8:ba:bd:ba:07:60:1e:f9:c1:44:fe:fa:93:27:d2:e9:e3:b4:
fc:72:5f:a4:2c:0b:4c:ad:62:a1:35:c0:af:b5:9a:d6:59:d9:
44:af:a5:71:fc:16:ce:88:04:8e:fd:25:2b:98:20:f9:d9:d1:
0f:ca:eb:fc:88:35:e6:7e:45:fe:49:cd:93:ab:c1:00:9a:64:
5f:da:05:38:cb:a8:22:78:8a:be:55:99:76:be:49:cd:d0:26:
61:a0:84:bf:95:e5:12:d6:94:a2:88:11:c0:9b:6e:6a:66:6e:
93:d6:57:cc:d8:27:7a:45:4d:94:3c:47:69:b8:88:c7:19:2b:
f9:1d:86:87:80:d8:cc:c8:ec:88:a6:a8:af:5b:a6:69:3e:93:
9e:27:52:44:0c:bd:fc:6f:fe:40:dc:d3:53:9b:bd:5f:df:e1:
c4:16:7d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:21:19 2025 by rpki-client