Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
File: 5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft (raw, json)
Hash identifier: 11QDboYK27q7q24GKbsxXhW7MCovurwEydxYkdgUUl4=
Subject key identifier: 1F:A6:A2:D8:51:98:0C:AD:85:EC:F9:15:25:FB:25:57:E3:A4:38:AE
Authority key identifier: E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
Certificate issuer: /CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Certificate serial: 0196C34C343881FA4326B5724CC59258C102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 07:01:13 +0000
Manifest this update: Mon 12 May 2025 07:01:13 +0000
Manifest next update: Tue 13 May 2025 07:01:13 +0000
Files and hashes: 1: 5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl (hash: 2YYvxDOOop66nvtnXCRxrMi0E/q0susHfGRMToo5Kss=)
2: wRmtKh7_LVqZpnTkWqp_RT-Ok-Q.roa (hash: xFYT+gV/6zuB8l9NaQR5EmwHFpWdWodzHhC57qH0qF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:34:38:81:fa:43:26:b5:72:4c:c5:92:58:c1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Validity
Not Before: May 12 07:01:13 2025 GMT
Not After : May 13 07:01:13 2025 GMT
Subject: CN=1fa6a2d851980cad85ecf91525fb2557e3a438ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:55:2d:3a:d2:0e:0f:70:c7:85:53:a7:d8:
f7:27:1f:76:bc:e0:b2:87:45:70:e6:84:18:9c:98:
d7:51:be:8e:1b:22:28:4a:4d:4e:87:b2:63:26:6a:
46:cc:9a:4e:e9:19:af:a8:b9:59:34:79:c8:9d:ea:
da:10:67:57:b3:53:15:c8:97:c8:bf:ca:d8:24:9b:
49:93:31:5a:c3:f1:69:24:6d:8a:2c:d9:08:06:50:
f6:6c:ee:ef:11:df:e5:89:a7:6a:2c:c8:01:1c:1c:
7d:1e:b9:60:63:27:45:c7:9e:7e:3b:8b:02:a3:2b:
aa:6c:a8:e4:b4:84:04:1e:1e:3f:5b:b8:f6:8d:23:
e8:24:98:22:5f:c3:6a:85:0a:65:69:9b:1a:0e:4a:
cb:f8:4f:26:2d:07:24:10:cc:2f:a5:2b:00:76:0c:
b0:6c:7b:8d:51:11:d7:0e:36:a6:63:a4:bd:41:c8:
73:a2:38:aa:f5:b6:91:e7:ce:60:35:d1:3e:7e:bd:
a6:af:3b:81:2f:ca:21:b1:8c:8d:98:ac:ef:87:1f:
49:79:97:85:96:76:0d:80:2e:5a:21:b1:fc:2e:d0:
a9:8c:70:8d:9d:66:a3:f6:16:bf:bf:20:d4:6b:93:
fa:56:0d:06:3d:66:d4:1c:7f:8b:c5:28:50:42:e6:
07:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A6:A2:D8:51:98:0C:AD:85:EC:F9:15:25:FB:25:57:E3:A4:38:AE
X509v3 Authority Key Identifier:
keyid:E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4f:ce:f4:ec:b2:0e:a8:66:6b:dc:c3:b3:df:d1:bb:3a:6c:
03:39:5f:0d:2e:a3:dc:1e:86:29:93:1f:b0:21:8c:56:17:16:
80:42:e4:9a:d5:f7:e3:0c:88:10:5f:69:27:c7:8c:82:dc:07:
ec:6a:75:49:28:66:a7:c6:21:9d:a0:28:95:21:49:26:25:ba:
98:25:3a:87:39:3a:1b:7c:9a:01:ea:4b:8c:04:83:45:40:8f:
60:c9:dc:cb:ca:c6:75:f3:eb:ed:a1:e0:9b:06:a4:47:27:84:
19:0f:c4:e4:2e:31:37:81:91:25:50:b5:9a:2b:3d:0a:d1:8e:
0c:e0:79:4a:0f:c8:f9:6a:79:21:42:6b:9c:85:ad:20:a5:61:
54:e9:ba:d2:dc:3a:25:12:40:c7:53:60:26:ee:96:24:4a:ea:
0c:00:9c:79:2d:61:1a:59:2a:78:07:21:73:6f:f4:bb:bd:a4:
07:ae:64:e8:35:52:47:e9:e1:57:b9:08:13:4c:72:58:de:23:
8b:0b:5b:18:0a:a8:2b:9d:ca:4e:82:7d:10:c3:e9:02:d0:89:
13:7d:77:c8:02:9e:76:a3:cc:70:f3:99:1a:34:69:b7:25:4a:
51:21:32:92:90:00:95:cf:06:b5:95:12:fa:47:06:3b:7f:47:
86:9d:e4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:02:26 2025 by rpki-client