Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.mft
File: g502OyjxyQhOHBmGh2u0CbeaE4w.mft (raw, json)
Hash identifier: 5KEHYrUQIKQoj1w5M//wYOPcX+eQ1zbPQxsu+kLcBfE=
Subject key identifier: 65:5F:45:29:1A:5A:E6:35:18:74:67:60:2D:AA:C4:8A:BD:90:ED:FE
Authority key identifier: 83:9D:36:3B:28:F1:C9:08:4E:1C:19:86:87:6B:B4:09:B7:9A:13:8C
Certificate issuer: /CN=839d363b28f1c9084e1c1986876bb409b79a138c
Certificate serial: 0196DE54AB5534A3078423163D38738B9226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g502OyjxyQhOHBmGh2u0CbeaE4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.mft
Manifest number: 0D30
Signing time: Sat 17 May 2025 13:00:12 +0000
Manifest this update: Sat 17 May 2025 13:00:12 +0000
Manifest next update: Sun 18 May 2025 13:00:12 +0000
Files and hashes: 1: g502OyjxyQhOHBmGh2u0CbeaE4w.crl (hash: PEQQe1WJWLLjRRo/r5O4qpk5wRrg+L861tgmjMU+ZZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/g502OyjxyQhOHBmGh2u0CbeaE4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:de:54:ab:55:34:a3:07:84:23:16:3d:38:73:8b:92:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839d363b28f1c9084e1c1986876bb409b79a138c
Validity
Not Before: May 17 13:00:12 2025 GMT
Not After : May 18 13:00:12 2025 GMT
Subject: CN=655f45291a5ae635187467602daac48abd90edfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0a:61:af:53:99:f8:0e:23:8c:61:8c:b8:3f:
a3:de:c4:95:63:a8:e2:c6:fa:9f:ff:10:8e:23:0e:
0d:e5:32:41:28:14:d8:5f:fe:1e:09:21:91:62:9f:
53:3c:39:3a:2f:f1:f4:d4:0b:b3:5e:e8:cd:08:4d:
75:7a:7a:bb:13:5f:94:28:0f:c1:30:6d:ab:3f:9d:
b9:cb:ac:6c:0d:32:1e:6c:a6:63:18:6e:2b:64:4c:
e3:70:7e:b5:e0:8f:84:4c:c1:e8:62:0f:13:fa:28:
9d:83:da:5c:71:c4:40:3c:92:af:8a:d8:92:d9:a2:
b5:3e:16:9e:b1:7d:e0:84:10:f3:4a:39:86:04:95:
ea:80:9a:03:f9:ee:50:ae:fb:3b:4a:62:46:1e:c2:
e1:02:46:3b:3e:c0:4e:be:d7:f1:dd:a9:e2:14:6e:
67:46:ef:92:fd:b5:53:a6:67:81:58:14:b4:56:e6:
cf:06:a1:f1:76:d7:13:75:94:b4:06:8c:ac:13:2a:
10:75:b0:05:69:db:49:6a:d9:48:d4:c2:65:ea:76:
c8:90:21:0a:90:79:93:ae:6e:bc:23:2b:10:bf:4f:
ee:45:07:81:8e:42:a6:0e:f5:ec:5a:40:10:0d:3d:
43:51:6c:35:1e:bd:20:da:ec:cd:74:c3:92:de:7b:
16:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5F:45:29:1A:5A:E6:35:18:74:67:60:2D:AA:C4:8A:BD:90:ED:FE
X509v3 Authority Key Identifier:
keyid:83:9D:36:3B:28:F1:C9:08:4E:1C:19:86:87:6B:B4:09:B7:9A:13:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g502OyjxyQhOHBmGh2u0CbeaE4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:55:fb:bd:9e:1b:3e:0d:c3:b4:7d:66:f8:24:7a:41:1d:76:
69:86:87:ce:4c:61:71:fd:3e:2f:7d:60:07:8d:54:91:7d:4b:
a9:91:3d:ed:b3:81:98:95:2f:c0:d9:88:5b:41:f7:fb:fa:eb:
fc:a1:a5:80:3b:e3:15:3e:58:56:6d:45:e4:1c:79:2e:b9:a4:
a7:e4:fb:03:8f:1e:08:bb:31:9b:8c:2c:59:a0:45:c5:fb:77:
30:a2:bd:4a:09:3b:4f:b5:26:df:11:e1:d7:45:4c:bb:06:12:
99:12:b7:00:bc:c1:d1:7c:74:e5:50:35:02:09:e0:75:d7:78:
36:f7:ef:e0:0e:33:65:d2:a8:2f:23:ef:57:c4:22:56:4a:5c:
e6:0d:9d:58:72:c0:11:12:4d:d6:a7:ba:cf:3f:03:19:0b:fe:
d6:75:80:23:da:14:e5:04:0f:55:4d:f4:0b:8a:09:a5:96:19:
94:6f:c9:a8:a9:43:a5:35:68:2f:cf:7e:b0:30:5b:e4:c0:27:
e9:96:be:86:df:ce:a5:f0:6e:07:41:8e:4f:75:16:6f:6a:9c:
3d:a2:83:93:9d:d5:b9:51:16:93:9f:dd:a4:d8:70:f0:d9:2d:
6f:28:eb:38:df:6b:69:b7:24:43:8d:06:9f:0e:33:4d:47:f3:
70:b6:50:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:48:40 2025 by rpki-client