Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
File: 5VNEmgBiicjZNrKcfsWO2AnhgbY.mft (raw, json)
Hash identifier: 4WGSf7TGnqn/g6d1O7xZD+yFWBGWziwN7LU+jc7h1k8=
Subject key identifier: 68:8E:C2:87:FC:BB:6B:E1:F8:3A:9E:46:F9:14:19:37:6F:25:3F:ED
Authority key identifier: E5:53:44:9A:00:62:89:C8:D9:36:B2:9C:7E:C5:8E:D8:09:E1:81:B6
Certificate issuer: /CN=e553449a006289c8d936b29c7ec58ed809e181b6
Certificate serial: 0196C3824BB9E0467C452B7750AB4BB5189F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VNEmgBiicjZNrKcfsWO2AnhgbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
Manifest number: 021E
Signing time: Mon 12 May 2025 08:00:18 +0000
Manifest this update: Mon 12 May 2025 08:00:18 +0000
Manifest next update: Tue 13 May 2025 08:00:18 +0000
Files and hashes: 1: 5VNEmgBiicjZNrKcfsWO2AnhgbY.crl (hash: rqOowLtfwvAmaQudr4xdHFnhgybpW2AIG1IGtgGgCNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VNEmgBiicjZNrKcfsWO2AnhgbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:4b:b9:e0:46:7c:45:2b:77:50:ab:4b:b5:18:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e553449a006289c8d936b29c7ec58ed809e181b6
Validity
Not Before: May 12 08:00:18 2025 GMT
Not After : May 13 08:00:18 2025 GMT
Subject: CN=688ec287fcbb6be1f83a9e46f91419376f253fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:43:ac:29:fc:a6:5b:d9:08:97:c0:2c:37:
54:62:13:c9:1c:e7:3b:ac:af:48:36:0f:bb:bf:8d:
c8:6e:f1:14:3c:19:31:d3:ef:11:2e:1a:3d:21:9d:
b2:9f:3e:e6:73:ed:dd:06:a7:b7:8d:f9:ac:7f:1e:
fb:ec:b5:1b:51:69:bb:2f:d0:09:f8:fd:f9:ff:e0:
81:82:1d:8b:87:cf:04:9b:24:5c:67:98:74:b2:8d:
40:67:f9:04:6a:6c:bb:ab:45:80:60:68:1a:20:4e:
f2:1c:98:c7:a1:bc:ed:09:c6:ea:03:80:a1:a4:7e:
33:c5:7b:98:8c:ac:d7:22:4e:21:b7:65:4e:8f:3b:
4b:7e:67:e9:09:5e:eb:28:d6:ec:ac:59:bb:63:b7:
86:11:7d:08:84:c5:66:9d:88:a2:0c:e0:fe:9d:ee:
5a:aa:78:d0:d4:e8:7e:0d:e1:00:44:b5:ef:73:dc:
f7:a9:7f:b9:21:2f:52:f1:06:0d:ed:6c:9d:da:3a:
e7:c0:b6:d6:13:25:9e:97:c8:ab:20:04:58:e4:2b:
44:27:11:42:3b:1f:5a:43:9a:20:03:b3:67:c6:c0:
27:71:8c:fa:c7:f1:c5:e4:cc:e7:cd:cf:cf:9d:46:
eb:c4:d1:8d:04:33:96:51:f3:1b:be:a7:98:0c:f1:
9e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8E:C2:87:FC:BB:6B:E1:F8:3A:9E:46:F9:14:19:37:6F:25:3F:ED
X509v3 Authority Key Identifier:
keyid:E5:53:44:9A:00:62:89:C8:D9:36:B2:9C:7E:C5:8E:D8:09:E1:81:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VNEmgBiicjZNrKcfsWO2AnhgbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:29:e7:66:bb:4a:90:3e:e4:1b:ef:0c:a1:49:55:ae:4c:58:
d1:93:0e:21:25:b5:0a:74:9c:db:8f:b8:cb:38:d0:22:48:57:
c9:22:0f:1e:cf:3c:71:d0:b6:e7:19:44:6e:db:ea:3c:8b:8b:
16:a9:ab:0a:b6:63:f8:d3:86:b8:52:e8:72:87:1b:2b:3e:6c:
6d:40:48:6a:4c:58:59:96:42:7e:5c:78:35:44:9f:bf:59:eb:
6f:2d:32:76:1b:cf:10:2c:d3:09:8a:e4:1f:d1:a8:50:ac:e5:
f5:c4:e7:8b:d9:46:f6:bd:78:95:2e:14:cd:b9:2c:83:64:05:
2e:82:97:e9:0e:25:de:d5:79:71:71:a8:b7:65:84:fb:fb:bf:
40:49:b7:ff:d5:45:04:8e:f1:34:0f:fb:a2:7d:9d:ec:7e:39:
ef:12:da:ee:15:87:8a:77:5a:85:da:21:52:f5:9e:1a:86:4b:
45:34:3e:a9:b5:f8:dc:af:85:f4:78:87:7c:14:59:6a:f4:1e:
17:83:41:6f:80:f5:42:05:b0:01:ff:02:ad:ca:9a:90:03:59:
82:f2:4c:55:df:15:0d:3c:91:be:dc:93:e7:bf:02:fd:c7:5f:
ca:6c:4d:05:0e:df:ec:8d:2e:df:24:77:ac:47:7c:17:5c:13:
79:5a:f2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:49:52 2025 by rpki-client