Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
File: 5aHlGcnOd1ddifB89xjzsMyG7FU.mft (raw, json)
Hash identifier: axaAUNLAN2BJWaPY4468PQbXiEKdYos4ewzB4IokD8c=
Subject key identifier: 93:2D:03:8F:EC:A5:2A:DC:C8:5E:3E:26:EC:C7:36:BF:CE:00:A1:9E
Authority key identifier: E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
Certificate issuer: /CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Certificate serial: 01969E9A6692E744DA6F765A8DA3DB344A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
Manifest number: 1522
Signing time: Mon 05 May 2025 04:00:40 +0000
Manifest this update: Mon 05 May 2025 04:00:40 +0000
Manifest next update: Tue 06 May 2025 04:00:40 +0000
Files and hashes: 1: 5aHlGcnOd1ddifB89xjzsMyG7FU.crl (hash: gboJfFRofOCLltJrMarS1kVcvjrKgzrUzDjPbQbHIDQ=)
2: uu25l9W5gSZu_tAy5o8jy6VhkvE.roa (hash: Mo0sHJu2Fpws6Go/Wkd7BWgvp/SCXCkUPd0a54ZzbWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:66:92:e7:44:da:6f:76:5a:8d:a3:db:34:4a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Validity
Not Before: May 5 04:00:40 2025 GMT
Not After : May 6 04:00:40 2025 GMT
Subject: CN=932d038feca52adcc85e3e26ecc736bfce00a19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:09:47:28:aa:4a:d6:df:69:73:d1:01:bd:f9:
bc:2a:84:72:6f:ad:77:32:a0:e2:0a:4c:4d:7f:0c:
56:18:34:90:3d:39:09:60:6b:17:1e:6d:70:f3:b1:
49:35:aa:15:5d:04:dd:e9:90:f4:ad:2c:a3:85:e0:
d1:64:f1:21:cb:93:ee:38:3c:b7:a2:e9:0b:30:4c:
78:cb:08:d9:db:50:76:50:a7:2c:46:98:bf:83:42:
bc:9a:78:08:f6:98:55:e5:82:62:14:75:e6:35:d7:
8d:ec:fd:42:b3:c1:ae:41:d8:a6:0a:28:8d:e7:f8:
08:66:e8:4d:68:3f:fd:9d:e0:00:0c:eb:77:46:86:
2d:e4:fe:7f:76:12:e5:91:1d:3a:32:6f:ae:ba:2d:
77:65:2f:c4:33:63:d0:11:d7:23:e1:6f:ba:4f:48:
95:ed:e3:fa:e5:fd:fc:1c:49:dd:e9:ee:17:55:f1:
f5:d9:f5:97:b2:00:07:bb:d5:a5:e2:c8:de:a5:b3:
88:4a:c6:df:ed:b2:0d:ab:c8:63:bf:9a:b1:db:75:
fa:20:65:2f:38:5d:2b:42:01:ff:c2:15:73:09:a1:
a7:28:80:a5:ad:14:ae:7f:f9:c5:78:fd:ba:90:8d:
af:26:c8:8c:5b:47:1e:2d:24:d3:b0:79:4d:97:37:
15:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2D:03:8F:EC:A5:2A:DC:C8:5E:3E:26:EC:C7:36:BF:CE:00:A1:9E
X509v3 Authority Key Identifier:
keyid:E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6e:7a:fe:30:68:25:0f:e1:1f:ae:c9:b2:bd:da:b2:26:56:
57:e3:de:1f:a3:27:02:8b:19:3f:1f:95:4c:9f:65:b4:d1:50:
eb:ee:db:52:5f:7f:5a:73:24:ff:7a:d7:3a:e6:90:16:a8:07:
26:c4:8c:9e:04:9a:a5:90:f3:5f:7f:d4:a2:5c:97:05:18:8e:
eb:7e:32:9f:ad:3e:db:2b:16:e4:b0:26:62:3a:b9:6d:d7:9f:
7f:3c:b3:a6:ca:9c:60:32:61:0a:47:31:26:17:30:95:9c:57:
96:af:48:f3:49:0b:b0:29:e6:7e:8d:fe:cb:fb:1b:89:3f:b9:
9d:93:c4:14:64:c0:cf:fe:c5:9c:6e:10:92:3b:69:ad:30:9e:
c1:51:29:40:bf:05:e1:3e:3c:52:21:0f:85:b5:80:95:c5:0e:
53:d7:ef:ae:2a:77:c5:c8:30:4d:12:2f:f9:70:3f:74:0c:b7:
fe:d3:97:34:b8:14:f2:47:bf:92:7c:5b:e6:8c:08:ea:1d:db:
17:c9:9d:7e:5b:d2:be:c3:9a:b1:85:ed:70:70:61:6b:1f:90:
00:ba:1f:ef:d8:73:7a:91:3b:54:f8:ac:52:d6:11:4b:4e:0a:
94:e2:79:ff:4a:a1:65:8b:8c:b1:7a:5c:e6:90:89:2d:b9:14:
bd:55:0b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:24:51 2025 by rpki-client