Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
File: 5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft (raw, json)
Hash identifier: fJDGkGwiZEDnc/srJW1/ilOMlvjPHNeBzlEyIXklIu0=
Subject key identifier: 65:95:98:F4:1F:AB:BC:18:01:ED:71:F4:C5:79:61:63:BF:A4:0F:07
Authority key identifier: E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9
Certificate issuer: /CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9
Certificate serial: 0196BF37BA7B90FD70EE547D54A7C1DB71EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
Manifest number: 0319
Signing time: Sun 11 May 2025 12:00:22 +0000
Manifest this update: Sun 11 May 2025 12:00:22 +0000
Manifest next update: Mon 12 May 2025 12:00:22 +0000
Files and hashes: 1: 5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl (hash: 5SiYNmy2nDKcQD2mqlTmNfPfXQRfvSkd61DCW9WmM5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:ba:7b:90:fd:70:ee:54:7d:54:a7:c1:db:71:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9
Validity
Not Before: May 11 12:00:22 2025 GMT
Not After : May 12 12:00:22 2025 GMT
Subject: CN=659598f41fabbc1801ed71f4c5796163bfa40f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3e:c3:5a:dd:ae:9a:a8:e6:8d:90:8e:65:21:
2e:fc:ed:41:e6:7b:fe:a7:99:62:6d:4f:03:44:b2:
10:6e:db:33:3d:e8:34:1a:bc:d6:a5:3b:00:69:3d:
ad:7e:71:3f:36:28:d3:7e:38:07:f9:f1:c7:b1:5e:
28:14:88:e8:dc:7a:9e:bd:54:63:20:57:04:01:b9:
ce:14:de:68:55:0d:2b:4c:3f:32:36:0d:78:d4:f4:
d0:69:69:92:0b:55:05:07:94:49:ef:0e:31:7c:42:
af:86:c2:95:66:ba:bc:fb:8c:fb:6b:95:5a:f4:ff:
c0:f4:c3:14:29:92:6f:61:ff:a0:be:4c:c4:fa:91:
ec:6f:3b:ae:c0:f5:6d:64:33:70:07:36:56:93:ea:
9b:70:46:4e:d8:8e:51:e0:5d:ae:b3:14:8f:8a:9f:
eb:ab:d9:ee:fc:26:cf:d2:b1:23:fb:41:a3:0e:41:
b0:cf:59:83:7d:1c:c3:f3:32:8b:72:e5:1f:ce:e5:
c3:35:da:80:33:4e:18:3b:97:e8:3a:4c:d2:95:96:
11:7e:bc:39:aa:cc:14:46:07:00:44:e2:ba:20:67:
b5:66:e4:89:08:ec:9e:64:68:9b:50:e1:d0:ff:bf:
af:e2:05:a1:31:e6:49:0f:e9:a6:8f:c7:6c:21:73:
c9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:95:98:F4:1F:AB:BC:18:01:ED:71:F4:C5:79:61:63:BF:A4:0F:07
X509v3 Authority Key Identifier:
keyid:E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d5:1a:9d:fa:47:92:8d:b0:00:0a:1f:00:56:8a:8f:4d:7e:
f4:43:54:50:e5:86:1b:d6:07:9f:38:89:0a:4d:12:0e:f9:04:
52:68:42:3c:79:24:8e:e8:47:38:57:23:aa:2e:f8:a2:f2:73:
95:a5:41:53:54:99:3e:5f:02:85:00:93:a8:e6:49:66:40:8f:
e3:5a:c3:c9:73:b1:b5:11:6f:45:62:74:42:d5:af:aa:2d:f8:
a2:2c:f8:72:ec:83:45:12:55:2b:de:7b:26:6f:c5:f8:1b:e0:
0a:d4:a6:79:13:d2:0e:60:cc:d6:3a:20:6f:a8:71:df:b1:a6:
d4:bf:ca:de:a2:b8:f1:22:0b:75:d4:71:0d:d4:56:da:d3:7b:
84:b4:a5:fd:ae:07:48:86:4b:96:7a:3c:c2:dc:8e:14:aa:81:
e8:4b:04:8e:ad:d6:6b:8f:d0:5e:84:0c:e9:ec:2b:32:11:db:
ad:3d:39:b8:c6:b3:00:7e:7e:f0:ef:01:40:6c:4f:97:d4:cf:
fc:b6:d3:f5:1e:5a:57:59:84:9c:0d:ab:f3:39:e6:c2:eb:a3:
14:07:34:36:23:05:c2:c4:a1:35:b9:53:80:d5:df:ab:97:dc:
8f:03:6d:1a:b4:dd:56:f4:3c:51:1f:04:c8:b4:2d:de:14:27:
fe:6c:87:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:23:24 2025 by rpki-client