Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
File: 5wb8lykDS_sEZN1MmF8UuiEOgeM.mft (raw, json)
Hash identifier: aHGp5F8M6w2g2Jbk1usA6aCJy9cb5LItYpq4HaMJBLI=
Subject key identifier: 09:6F:9B:23:0D:F1:99:58:5F:C2:8A:51:76:BA:F6:43:99:9A:3C:8C
Authority key identifier: E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3
Certificate issuer: /CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
Certificate serial: 0196BDB74B75578B65BA7C78CA1BF83B91CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
Manifest number: 12F1
Signing time: Sun 11 May 2025 05:00:28 +0000
Manifest this update: Sun 11 May 2025 05:00:28 +0000
Manifest next update: Mon 12 May 2025 05:00:28 +0000
Files and hashes: 1: 5wb8lykDS_sEZN1MmF8UuiEOgeM.crl (hash: qp8ZgE5JFcSEu3rYBMitW1KK8c9iUZZKTcEM0EiTH5A=)
2: b37_mvewRVwCg1bn4EBDzO-L-T4.roa (hash: Se2kErf9iBL4UpQAgg1UiulAV/XRVJ5FdDxPc7oRHW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:4b:75:57:8b:65:ba:7c:78:ca:1b:f8:3b:91:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
Validity
Not Before: May 11 05:00:28 2025 GMT
Not After : May 12 05:00:28 2025 GMT
Subject: CN=096f9b230df199585fc28a5176baf643999a3c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c1:03:1a:f1:44:3e:13:23:00:9d:02:29:c7:
16:df:b3:1e:b2:54:23:97:e7:2b:b8:e9:88:44:a2:
8b:22:9d:8d:1b:f4:f1:7b:b2:c9:19:ff:54:ce:5c:
42:32:59:2b:26:fa:5d:19:1c:a1:33:5b:cc:64:90:
38:cd:62:d2:0e:17:0e:6e:77:e7:44:7a:47:23:5c:
91:b9:6c:8a:c4:09:cf:e7:ae:01:82:64:33:62:6f:
c0:49:c3:1b:79:d7:2e:f7:97:9a:38:ba:ca:f4:8e:
18:65:3a:f6:c5:3b:bd:dc:92:40:5e:11:54:03:5a:
b3:42:44:0a:a4:88:97:e1:37:1a:75:7a:09:26:e2:
71:79:28:a6:77:a8:99:97:a0:a6:71:91:f4:43:70:
b3:75:b1:b3:be:48:ac:39:fe:8d:47:f7:e8:00:9e:
be:2e:bd:81:fd:fc:6a:77:ed:e6:b1:3e:86:e8:8d:
b1:47:68:95:46:3c:e2:ef:ac:91:36:00:74:13:53:
7b:7b:5d:61:93:63:81:5c:23:e0:4b:a4:99:ad:90:
39:d0:32:81:57:9b:80:d7:2f:6c:fb:25:6b:f8:d2:
73:d8:0a:13:ba:e7:c8:b3:9e:73:ff:43:30:4e:0a:
0d:09:17:db:f6:fc:6f:b0:ee:f2:09:33:97:2c:7b:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6F:9B:23:0D:F1:99:58:5F:C2:8A:51:76:BA:F6:43:99:9A:3C:8C
X509v3 Authority Key Identifier:
keyid:E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:38:d3:ed:84:87:fa:fc:7a:b7:95:41:3b:29:1c:14:b3:70:
c5:d1:d5:12:af:d1:08:f6:c9:1f:cb:0d:60:5c:6b:eb:be:98:
40:9e:af:1f:32:fd:a5:23:7a:45:a0:89:b2:5a:f1:f7:0b:8a:
bd:b2:f3:a5:c7:2c:90:98:c5:e9:b7:bc:e0:33:df:ce:05:6c:
4d:f7:2f:ab:20:5a:df:fb:c6:4e:1a:de:94:c0:12:8a:70:78:
60:ed:aa:89:7e:96:eb:b8:80:c9:56:58:59:c7:1c:08:08:31:
49:b8:b7:95:fc:f2:d7:20:14:89:dd:c4:22:d1:71:3d:b0:52:
37:32:f7:3f:e2:74:d7:49:98:09:6c:00:81:42:25:9d:a9:d1:
e0:fd:5f:35:71:47:4c:8b:a3:da:23:ad:14:ec:72:13:86:f3:
1d:3f:bc:66:d6:5f:b2:20:3c:7c:11:6c:08:b7:24:11:42:80:
be:2b:74:8b:e7:f2:96:f9:12:60:fa:e4:45:0b:35:38:f7:53:
62:3b:7a:7e:fd:bc:12:67:d3:22:d3:5f:b6:ad:65:85:db:9a:
39:42:46:49:75:85:1f:cb:9a:29:b8:50:83:1f:f0:ef:25:cc:
b7:c2:f3:b3:97:62:f3:f9:3b:e9:62:ea:55:36:62:85:6a:5b:
6e:e4:52:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:14:59 2025 by rpki-client