Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
File: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft (raw, json)
Hash identifier: kA5rQqOk51Ajav4m4GXOj8SMR/K6dXnuPk2xRNZXJbw=
Subject key identifier: A4:D1:03:11:D7:B2:04:75:C8:F3:7C:4E:75:B3:15:86:25:6D:D5:CD
Authority key identifier: 9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A
Certificate issuer: /CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
Certificate serial: 0196A954B9FEA447450C63683E55B656CC4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
Manifest number: 0492
Signing time: Wed 07 May 2025 06:00:24 +0000
Manifest this update: Wed 07 May 2025 06:00:24 +0000
Manifest next update: Thu 08 May 2025 06:00:24 +0000
Files and hashes: 1: FKRN7VX-M9zNuJ0Xi5mXAJ-i93Y.roa (hash: tPWo9Bc4jubOwnfbiLhbqZLh4bX+yga6cCmXXhQ2NPA=)
2: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl (hash: x1KWrvCbL+lPyObEohxov00YfjFRBAg07VUdVS2dbj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:54:b9:fe:a4:47:45:0c:63:68:3e:55:b6:56:cc:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
Validity
Not Before: May 7 06:00:24 2025 GMT
Not After : May 8 06:00:24 2025 GMT
Subject: CN=a4d10311d7b20475c8f37c4e75b31586256dd5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:95:d1:c5:4b:3d:bb:0c:55:8a:29:88:5c:52:
5c:10:b9:c0:12:c4:7a:58:0e:08:48:b9:e3:bf:63:
6d:93:e3:8a:e4:49:0f:2f:64:fd:a5:3d:20:99:a9:
30:11:c2:ed:97:74:49:f4:34:e8:02:8d:4e:63:6b:
0e:29:b8:7f:57:1f:61:14:24:81:58:1e:eb:8d:a0:
77:6a:93:9c:78:80:4c:45:1c:23:64:a5:57:b3:82:
d9:a5:b2:fc:3f:fd:90:63:7e:0c:9c:84:9e:ba:82:
1f:12:eb:6b:d3:d9:cd:29:b8:ad:a1:c3:79:23:6d:
f6:d9:21:df:cf:d1:7e:5e:89:00:28:85:1c:ec:31:
ff:84:b7:b8:59:bd:28:a7:0c:d9:81:2e:a3:9c:8f:
23:f6:cc:2d:5b:9a:da:da:c2:82:9e:b4:ee:ba:23:
bf:db:73:4f:bc:fc:be:69:00:92:64:38:c6:b1:82:
cc:98:fe:49:b4:c9:2f:d3:95:16:2a:e8:e4:6c:e8:
91:70:3b:e4:f4:7c:c7:3d:c9:17:8d:1c:d0:d5:72:
39:c0:32:39:c9:89:c5:3e:73:5c:66:3c:92:6c:80:
05:90:d8:97:28:4c:00:51:4f:c7:03:9b:b0:53:97:
ea:49:b3:17:60:8b:ac:d0:4c:1f:54:91:b5:9c:1c:
b5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D1:03:11:D7:B2:04:75:C8:F3:7C:4E:75:B3:15:86:25:6D:D5:CD
X509v3 Authority Key Identifier:
keyid:9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:db:e6:0a:3b:2c:4d:2a:1c:7f:8d:ce:da:46:3e:0b:03:9a:
a4:b3:5b:a4:7f:49:3c:45:e8:a4:a3:d3:1f:08:01:75:a7:1a:
92:8e:b1:1f:2c:31:aa:41:54:d1:5f:f8:73:fa:bc:dd:6b:24:
b6:f3:b6:fe:f4:c9:70:82:f7:c0:6c:ee:42:f4:05:e9:23:c7:
43:93:99:a5:4c:b7:bd:54:50:e9:a8:65:62:b1:8a:78:b7:6e:
61:ed:2f:c0:9b:3d:9c:41:ca:bc:be:10:ef:08:17:a8:6f:47:
bb:2f:79:63:52:52:b5:c9:a5:87:77:d5:3f:f9:70:4b:75:ff:
eb:d0:e4:d1:4d:94:c8:4c:d8:67:a3:ff:af:88:4a:c3:ee:ce:
d7:7b:79:80:ff:44:ec:06:e6:0d:92:ee:d8:80:15:af:dd:4a:
b0:74:44:a9:a6:2a:97:14:b1:54:10:78:e2:0a:22:4b:1b:20:
91:86:cb:21:0a:df:6a:34:a9:fe:0c:62:ea:93:ab:43:10:9b:
ee:37:2d:6a:d2:7b:b5:44:24:b3:dc:25:64:ad:dc:45:ff:95:
4e:33:58:6c:67:3d:3b:3d:48:49:c2:dd:e4:50:43:be:80:81:
79:97:ce:1a:92:05:08:b3:2b:2d:3a:dd:36:0d:d7:ef:40:14:
bb:4f:74:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:45:41 2025 by rpki-client