Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
File: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft (raw, json)
Hash identifier: 79vGF7HeN58b4WSDwgCFJUqy1ksDyV33qvFkSFNqmWc=
Subject key identifier: BA:44:95:E3:E0:A6:AD:9E:11:07:F9:5C:1A:1F:E8:D2:3C:8E:05:EB
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Certificate issuer: /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial: 01969FAD397E5C67A93E3001749ED4F40EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 09:00:51 +0000
Manifest this update: Mon 05 May 2025 09:00:51 +0000
Manifest next update: Tue 06 May 2025 09:00:51 +0000
Files and hashes: 1: 3cpoDZVsvW-d4pgtfjxgApATZ7Y.roa (hash: xAPK20pv8js5ddYc90CC85IhpMi19I8Q/fSeN00Op6M=)
2: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl (hash: 1mtWtlQBvPaqOese+pusDJsDfBgjl4xypO0k6jm1g9I=)
3: 9Np_qqUHNhRugA_1xB2ZI6GkPRc.roa (hash: VZhCCAUVQwLPClsCIIsWXL6uNJYCuqsQS18/K+wYTxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ad:39:7e:5c:67:a9:3e:30:01:74:9e:d4:f4:0e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
Validity
Not Before: May 5 09:00:51 2025 GMT
Not After : May 6 09:00:51 2025 GMT
Subject: CN=ba4495e3e0a6ad9e1107f95c1a1fe8d23c8e05eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:68:8f:48:39:aa:d8:37:2e:eb:c8:25:82:5e:
34:86:d5:8f:70:ca:f6:26:d7:5c:6c:8f:4f:21:d3:
ea:6d:9f:66:9a:d6:b4:46:68:3e:06:ff:de:e2:26:
11:83:c1:0d:0d:fd:42:b4:d1:59:a9:f9:3c:c8:a2:
c1:d3:30:78:4b:6d:4f:95:7c:44:65:2a:57:d6:db:
75:75:76:f0:c0:9a:3f:9d:fb:a4:ca:9a:ba:03:7c:
b8:7c:f4:08:56:1c:22:43:be:29:ff:77:05:cc:06:
76:2d:a4:25:74:00:a3:de:10:54:d7:b1:c6:0a:34:
4d:84:1c:99:5b:e2:bc:28:b3:94:fd:1a:cb:fe:43:
c0:be:1e:fa:6a:54:aa:cc:6d:4a:ca:2e:20:1d:fe:
48:83:08:70:d9:1b:72:f1:23:42:11:ca:10:e2:18:
87:13:2a:3f:4d:bd:4f:ce:5a:e8:f2:9c:a3:ea:c0:
fe:ff:7c:9b:b6:30:de:5c:9a:6b:79:b0:3e:fa:d3:
43:85:f0:ea:ee:ad:60:16:56:72:62:6c:90:5c:37:
2c:c6:ee:f0:2a:f4:42:5d:00:05:da:f3:59:86:74:
ca:77:50:8b:69:20:81:fd:e2:3c:fa:f5:8e:e4:c5:
08:a2:d2:88:da:55:e6:47:47:b8:68:80:37:ea:74:
ec:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:44:95:E3:E0:A6:AD:9E:11:07:F9:5C:1A:1F:E8:D2:3C:8E:05:EB
X509v3 Authority Key Identifier:
keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:8a:1c:76:ed:db:55:33:72:46:4e:f0:78:e5:8e:fb:84:43:
c6:04:c2:b8:4a:2b:84:27:18:16:86:d8:48:a7:7f:2b:98:80:
85:fb:09:b4:e3:a6:04:56:bb:e0:bf:1f:1f:9e:46:b4:f7:4f:
d0:34:07:79:0f:92:61:fb:15:4a:2d:d7:c0:29:08:97:ea:ab:
82:9c:81:c3:c1:f4:2b:bf:ab:f3:ca:52:46:72:08:b1:cc:6f:
df:db:19:7f:26:58:40:ad:d4:1f:68:4d:da:67:f3:b2:44:6f:
06:47:5e:30:57:12:48:9b:27:56:24:b9:e9:60:d4:6f:6e:49:
04:93:99:6d:fd:7e:49:49:aa:5e:8e:c3:f7:c8:aa:3d:be:c6:
b7:29:cf:15:dc:75:63:63:8e:67:3e:f7:ef:fc:c6:76:87:4f:
92:d3:cc:b3:48:2c:7e:a9:f0:1e:06:03:cb:59:99:44:b0:7a:
6c:7c:85:12:c4:4d:85:7a:46:ed:9d:f6:f6:35:f3:ac:95:68:
96:a6:de:32:1c:b8:43:8c:88:5b:5d:22:ed:89:05:43:d0:3d:
f9:23:42:14:28:b3:19:da:c2:35:8e:bf:a9:5d:00:5a:da:fc:
5f:d3:84:23:38:32:33:5b:3e:ec:2b:16:e9:40:69:93:69:40:
c1:b8:8e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:36:58 2025 by rpki-client