Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
File: 5UTiZtTrnMfe0pLBKwaxynvOp3g.mft (raw, json)
Hash identifier: /LLHUaRvKD8TxMON2CmNLfogpLUPmWa1o5PYolM/8no=
Subject key identifier: 5B:6F:3B:94:53:E1:E0:26:9D:C7:01:D8:31:11:B0:D9:7B:90:CF:58
Authority key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
Certificate issuer: /CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Certificate serial: 0196D69B4FBD5BA227F56D5854560FF09A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
Manifest number: 1543
Signing time: Fri 16 May 2025 01:00:24 +0000
Manifest this update: Fri 16 May 2025 01:00:24 +0000
Manifest next update: Sat 17 May 2025 01:00:24 +0000
Files and hashes: 1: 5UTiZtTrnMfe0pLBKwaxynvOp3g.crl (hash: BExex+H9faMrcgz8k7M4aD4LeiObIz17VweqauKq/oY=)
2: LeXJLi-TLu5NLRkSo2hJnEK9QDQ.roa (hash: 1KfkyTUePDTOuHMENqew1KmyeJrolI/GoAGN74JhXHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d6:9b:4f:bd:5b:a2:27:f5:6d:58:54:56:0f:f0:9a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Validity
Not Before: May 16 01:00:24 2025 GMT
Not After : May 17 01:00:24 2025 GMT
Subject: CN=5b6f3b9453e1e0269dc701d83111b0d97b90cf58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b7:e3:98:63:90:5e:61:82:87:20:53:61:e7:
3f:37:a1:1d:65:48:2e:d4:29:c9:5f:32:ee:b1:c6:
bd:16:c5:21:26:b6:fb:38:55:70:37:76:33:2f:8c:
3f:1b:5c:84:de:db:70:d8:ae:ca:c3:83:c1:a6:15:
b2:e8:e3:72:ca:e8:b3:bb:ca:d3:4e:d5:61:29:95:
ad:70:ab:e2:21:53:7a:db:19:e0:45:6a:58:e2:c2:
4c:32:36:de:7c:e1:19:0c:77:12:d4:ad:6d:37:22:
f4:37:fa:e3:eb:aa:d1:fc:21:35:8f:1f:79:22:99:
69:66:09:4e:fd:49:4a:23:54:b7:13:29:b2:56:9a:
43:c5:32:53:9d:39:e2:ae:26:d9:34:d4:b5:e0:f9:
72:fb:0d:0f:9d:d4:d1:ec:4a:68:e1:c8:64:9f:30:
76:28:81:99:c8:49:52:28:24:38:f0:cd:c3:88:b8:
bb:42:87:e9:25:d0:08:ad:66:47:72:14:76:2a:42:
64:92:cb:c4:c1:27:c0:1d:75:2a:a3:4d:64:19:88:
f8:d3:2b:ad:c5:51:99:c9:46:ec:a1:85:2a:ff:e6:
ab:e7:fc:c6:fc:cd:ca:f0:ce:6e:38:77:9e:15:55:
81:63:52:3e:98:26:92:eb:a2:c1:e5:40:f4:81:a2:
15:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6F:3B:94:53:E1:E0:26:9D:C7:01:D8:31:11:B0:D9:7B:90:CF:58
X509v3 Authority Key Identifier:
keyid:E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8d:0d:e5:3e:89:5b:e6:7c:bf:51:ea:f8:95:d4:36:e7:ba:
34:34:33:61:f6:01:00:25:b5:53:3b:4b:d7:02:6f:09:2f:d9:
8e:a0:b0:19:50:83:0a:65:a6:a0:36:74:0c:4e:75:2a:a6:ac:
f7:fb:67:b6:3a:dc:33:a5:e6:d5:03:fe:f1:bc:d0:41:77:ec:
68:b1:e5:41:f1:6a:4c:a0:cd:42:53:63:8b:5a:ec:df:cb:a4:
87:1c:a1:2e:ab:cc:72:92:d2:fd:ba:c1:18:ff:34:87:3b:11:
6d:9e:85:24:3f:9e:86:43:db:91:d9:7e:e2:77:2a:f1:6c:31:
ce:0b:3a:db:a4:f9:d2:5f:02:44:b7:b8:65:12:9a:de:3b:79:
5d:4c:05:08:14:80:0f:6f:c4:f7:d3:61:35:4c:d2:64:94:d3:
2f:d8:da:98:c3:58:8b:c8:0e:3c:0e:d8:ec:c4:14:9c:a3:36:
f4:16:46:c6:1b:56:07:1c:78:f0:18:cc:92:1b:a1:35:c1:1e:
95:7f:f4:9b:65:b1:d0:00:68:98:b2:0d:56:b3:93:06:16:9d:
49:37:05:d8:8f:07:34:f4:b0:49:94:a4:81:97:ad:4f:8b:2a:
21:3c:6e:76:0b:eb:68:88:ba:0f:e7:9a:56:31:eb:d7:d5:78:
a7:ae:4f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 09:32:28 2025 by rpki-client