Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
File: 5fmFqUAlRIkU3qoXQiBzBDklE90.mft (raw, json)
Hash identifier: eeIP215QDrc3g99rH4uf9H2Pf7h8AzIkeKGcDS+8Lqo=
Subject key identifier: 49:24:1B:6C:2E:CD:9E:80:C0:77:43:83:A2:BC:EA:7F:B9:3E:41:8E
Authority key identifier: E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
Certificate issuer: /CN=e5f985a94025448914deaa1742207304392513dd
Certificate serial: 0196B96CD106A9F112EA2C5C1B556B9014E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
Manifest number: 0103
Signing time: Sat 10 May 2025 09:00:38 +0000
Manifest this update: Sat 10 May 2025 09:00:38 +0000
Manifest next update: Sun 11 May 2025 09:00:38 +0000
Files and hashes: 1: 5fmFqUAlRIkU3qoXQiBzBDklE90.crl (hash: 6zTDLvI6kKb5POFGitMZX95joNiQd7xhEdywX/rs6C4=)
2: nAZJBZ6VvJoN3Mjanp3D7Pbl_-s.roa (hash: toI1tT2hR8zRYJnuO8W3FR+ZELFSDV5ej6CQ6AsxKnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:6c:d1:06:a9:f1:12:ea:2c:5c:1b:55:6b:90:14:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f985a94025448914deaa1742207304392513dd
Validity
Not Before: May 10 09:00:38 2025 GMT
Not After : May 11 09:00:38 2025 GMT
Subject: CN=49241b6c2ecd9e80c0774383a2bcea7fb93e418e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ac:af:87:b1:df:fc:78:4e:8a:ff:cf:37:7b:
f5:ed:7c:58:3c:f8:42:83:03:df:4d:82:20:35:31:
1f:5c:4c:cd:5a:18:59:2c:70:6a:de:81:71:6d:63:
da:48:16:d6:e2:cf:78:d0:83:f7:d1:e9:cb:c5:37:
76:3e:6c:92:69:ee:57:cd:24:22:39:20:2c:17:c2:
f0:21:a6:17:09:28:5e:39:51:76:83:9c:28:fa:c5:
81:c2:5b:5c:86:3a:53:e7:70:b3:85:84:6d:26:f6:
2f:75:32:cc:1f:ff:52:e1:ff:f8:dd:6d:c8:da:06:
73:32:7d:fa:ce:b8:e7:c7:f1:e8:03:54:0e:43:54:
8b:eb:46:06:c4:e6:02:7b:71:29:60:dc:07:f0:72:
34:2b:9a:7a:dd:ca:69:1c:de:d4:7a:f5:a4:99:c1:
57:db:5b:d0:7b:13:f7:4a:31:23:7a:32:a0:57:46:
43:86:1b:9e:3d:88:ba:1d:f9:7f:d3:dd:ea:d9:18:
24:d0:5c:29:c5:55:44:50:31:ca:7f:c0:5e:fe:d1:
d7:16:7d:88:4a:f9:3d:01:0f:9b:19:c1:34:06:f6:
a5:7b:83:7a:e9:ac:2d:84:04:76:8e:cb:e4:2c:d9:
69:2c:fb:18:48:87:6c:a1:c2:e0:0b:0f:a7:03:8b:
92:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:24:1B:6C:2E:CD:9E:80:C0:77:43:83:A2:BC:EA:7F:B9:3E:41:8E
X509v3 Authority Key Identifier:
keyid:E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:37:20:4f:d8:b7:81:8e:1e:5e:88:72:8e:70:da:af:e1:f8:
45:0a:f1:0b:25:58:99:a1:17:ee:c5:c5:a5:41:a6:90:f5:c7:
fd:69:1f:b3:42:2a:10:60:d6:13:be:68:f4:68:20:37:2a:bc:
42:b0:c5:0d:b1:1a:2f:12:be:ab:fe:52:f4:61:8f:6d:64:4e:
fa:20:30:59:92:97:03:97:57:01:d2:8f:91:0f:de:31:41:54:
9e:85:7a:12:a9:f7:0e:72:13:20:1e:3a:06:1c:52:b7:2c:14:
38:28:01:63:14:e5:2b:35:16:87:1f:ec:fb:e8:d2:1a:83:81:
36:f2:eb:20:d4:e0:81:be:7a:3d:32:85:ed:b9:c9:a0:7d:b9:
48:7b:17:2a:d9:61:3e:61:7e:fe:5d:97:33:ba:1c:78:19:88:
59:3b:22:0e:25:5b:ad:1f:7e:76:19:2d:53:07:c5:5a:8f:cc:
34:67:b2:6c:6d:31:03:a1:0a:13:22:3c:72:37:e3:0d:5b:7f:
a7:9a:0d:af:36:bb:b3:7f:3a:75:69:ab:57:35:41:f5:dc:10:
6d:de:3e:6e:c3:11:68:27:b2:16:d5:cb:54:0d:bf:db:a6:80:
2f:70:a6:5c:18:f7:17:3d:02:86:de:3f:09:28:e8:25:cb:8e:
a9:90:12:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:34:18 2025 by rpki-client