Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
File: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft (raw, json)
Hash identifier: O2P8o4AaihjCi2cfhIg4HcCOEejkvzUwKg+bpJv3S0k=
Subject key identifier: A9:F8:46:D4:39:42:67:62:50:7C:83:54:5B:CC:FD:8F:B6:F9:C1:50
Authority key identifier: E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
Certificate issuer: /CN=e6a54852077a007838303c1f61c84387cccdd684
Certificate serial: 0196D2876419C540511D20588B301E1A047D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
Manifest number: 02CA
Signing time: Thu 15 May 2025 06:00:10 +0000
Manifest this update: Thu 15 May 2025 06:00:10 +0000
Manifest next update: Fri 16 May 2025 06:00:10 +0000
Files and hashes: 1: 3cGSK8NVA9eNtztBrAr51UavoEk.roa (hash: pMEP1TJfXu1V+w800yX1v0YDExi+6bPx0cct+Fh5aw4=)
2: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl (hash: Em4btvrCA6E8v6dMpjeffuti4NjUvVxTyS0U2MYmDEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:87:64:19:c5:40:51:1d:20:58:8b:30:1e:1a:04:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a54852077a007838303c1f61c84387cccdd684
Validity
Not Before: May 15 06:00:10 2025 GMT
Not After : May 16 06:00:10 2025 GMT
Subject: CN=a9f846d439426762507c83545bccfd8fb6f9c150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:04:df:d4:ca:28:c2:ea:61:ac:b0:4d:c1:
9f:42:4e:8b:f3:11:dd:88:ce:9f:e7:2a:a1:0b:97:
2e:ec:2a:af:f7:b4:bf:f0:34:92:83:54:a0:32:f4:
ad:92:87:d7:9c:15:55:e1:59:fc:3c:99:a9:d3:b4:
44:52:95:b2:e5:36:fe:e0:30:ae:cb:8d:5f:83:5e:
e4:ba:36:3c:a6:d6:94:9c:90:89:39:e6:fc:64:10:
73:5a:37:ee:ef:25:90:17:03:20:28:c7:e3:af:2f:
b4:ed:51:93:5a:4a:92:de:d7:cc:61:ec:c1:5e:92:
6c:6d:d1:fd:fb:c5:2b:9e:c1:92:c6:f5:85:ed:b6:
ab:6d:7b:d7:d9:2b:1d:16:d8:04:ae:50:e9:40:7f:
04:c9:17:cb:27:cc:50:83:64:84:9a:32:3c:28:e3:
b2:3e:ea:8f:19:3d:57:8b:dc:c1:19:62:20:ae:c3:
9d:00:ab:8f:83:c0:58:8e:5e:84:97:df:4f:87:2f:
18:8a:51:b4:1a:04:ad:e1:96:4c:d7:33:2c:c1:3c:
d5:6b:96:d3:b9:98:8a:9a:53:5d:a2:3d:c9:f0:35:
ae:d4:5f:1e:c4:8c:94:26:79:89:a6:09:a1:11:39:
eb:b4:41:a6:35:aa:5b:fe:b8:67:cf:e4:ef:4c:9d:
ae:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F8:46:D4:39:42:67:62:50:7C:83:54:5B:CC:FD:8F:B6:F9:C1:50
X509v3 Authority Key Identifier:
keyid:E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:76:36:be:c3:83:c2:33:dd:9d:b8:97:66:f0:22:b8:23:0b:
e9:ca:c6:62:7c:ff:b7:20:99:b7:b0:91:61:65:d8:45:ab:cc:
5c:bd:2a:95:5f:0e:fb:85:fa:8c:ed:f1:07:ee:e3:03:45:d3:
6a:97:ef:cd:70:d9:a5:37:83:d8:cf:b2:7c:23:32:a6:50:2a:
af:27:78:c5:cf:d5:47:ab:5e:e6:6d:75:fc:2f:dc:e5:00:c3:
2a:c0:cf:bc:c7:dd:dd:dd:19:57:dc:8c:96:9b:ab:10:b8:99:
26:28:c7:c3:57:28:27:43:e3:a1:50:03:59:2a:9a:d6:3e:2a:
5c:6e:d2:7c:32:3b:49:13:56:9b:7c:53:53:42:0b:64:f2:e2:
40:5d:bd:b6:8a:ff:fa:61:5f:85:de:87:94:cd:73:02:2d:93:
36:fc:f0:ff:08:0f:0c:72:ff:40:3a:24:d9:43:6c:df:f3:50:
62:2a:01:2a:c3:7d:c3:bb:b3:16:ea:4f:a1:2d:ee:0b:2a:d0:
4c:07:93:2a:50:90:55:07:30:f1:ed:10:c9:bb:39:6d:24:d9:
32:49:09:99:e6:f6:3d:85:0f:9a:bf:c0:72:9f:ec:e6:73:4f:
24:02:c1:8b:f3:9b:0b:09:e1:23:36:91:db:c3:15:eb:d0:b5:
5e:ac:83:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 12:43:34 2025 by rpki-client