Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
File: 5mNquBo0Op_9glfqyx3exTiWaAQ.mft (raw, json)
Hash identifier: 4CZ1UhN5b+tWjwrVFUYYvKarU980qhIwpRIgtTszt+E=
Subject key identifier: 26:7E:3A:58:CD:F7:77:A0:BC:52:F8:74:8B:A0:DD:84:24:E4:2D:2A
Authority key identifier: E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
Certificate issuer: /CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Certificate serial: 0196CFF45313E9B1D644479CAEC0C0946E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
Manifest number: 0FC2
Signing time: Wed 14 May 2025 18:00:17 +0000
Manifest this update: Wed 14 May 2025 18:00:17 +0000
Manifest next update: Thu 15 May 2025 18:00:17 +0000
Files and hashes: 1: 5mNquBo0Op_9glfqyx3exTiWaAQ.crl (hash: rFVAEsuZ8h72S7tG9JV3sTVSX3nNSbrEAAcPtoDvMnk=)
2: qBH3YGMaFK7YFVrKhQ5pFdeSVI0.roa (hash: 0gWn80uN/F/B7m+caBdi8E0X9ChrpKW2B3Hw8j3IN30=)
3: vMTodOq6xsRuVpjojWIKyaTkK_Y.roa (hash: wkJrOUu2B+xH8ypfmdsSGQvJ0AuehbonV39UjaZS0FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:f4:53:13:e9:b1:d6:44:47:9c:ae:c0:c0:94:6e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Validity
Not Before: May 14 18:00:17 2025 GMT
Not After : May 15 18:00:17 2025 GMT
Subject: CN=267e3a58cdf777a0bc52f8748ba0dd8424e42d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:07:02:eb:11:55:eb:3b:ef:a5:df:43:00:c4:
5e:91:44:7f:ea:17:4f:fe:86:c8:c8:8c:5b:ee:b6:
44:e2:58:74:b5:ec:11:fb:49:81:8d:1b:d9:53:68:
4e:5d:f4:d6:de:b7:74:53:a2:7a:fe:76:13:18:b8:
18:20:58:83:f4:98:04:f0:7d:73:48:ca:03:fe:a2:
15:bd:20:15:52:56:83:64:0a:6a:fb:c4:46:bd:f5:
35:c4:16:e8:26:e5:2a:5c:59:f8:b9:a0:49:24:e4:
6e:95:b7:31:97:a6:dc:83:a4:6c:6b:28:2f:a6:73:
c7:d9:ae:50:11:18:21:71:5e:bc:4e:3d:7d:2a:c0:
1a:f5:e4:89:45:bb:bf:19:aa:90:38:67:71:4c:22:
28:9a:14:43:f2:b9:76:db:94:7e:42:19:33:1a:bb:
e3:5e:7c:15:20:31:1d:91:5c:27:b4:cc:79:f0:a3:
71:d8:24:00:90:5d:2b:37:f7:5c:01:78:a7:05:fa:
e4:96:97:a9:54:e3:5e:1c:eb:3e:85:8e:ff:b4:4d:
34:b8:3b:b8:99:d3:43:19:93:22:38:44:7e:58:56:
ca:f2:84:3a:c7:6a:37:74:99:da:1c:f7:84:a7:2d:
52:1b:11:bd:46:b4:2a:1c:90:af:54:fe:05:be:bd:
af:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7E:3A:58:CD:F7:77:A0:BC:52:F8:74:8B:A0:DD:84:24:E4:2D:2A
X509v3 Authority Key Identifier:
keyid:E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:d8:e2:b9:07:40:8c:2f:61:f9:d9:c9:50:d6:0e:c9:cc:6b:
fa:2d:85:9e:52:77:5d:41:e5:b7:d8:20:ec:d7:66:32:a9:e3:
87:d7:71:17:79:c7:97:d3:82:ca:11:96:33:e3:3b:60:48:e7:
65:f4:b0:ca:19:48:db:b3:7c:9d:be:03:36:e1:71:25:f0:89:
12:96:ca:41:db:0b:35:1d:71:49:e1:af:63:1d:d9:0c:60:4c:
7e:22:fe:cd:aa:00:2c:7c:35:e9:27:dc:ea:5a:0a:44:b3:57:
86:62:72:9f:e6:38:a6:30:e9:2c:d8:b1:dc:5c:ad:31:79:23:
03:27:dc:35:c5:02:13:1b:a0:13:25:84:35:b2:65:53:af:4e:
66:87:e4:31:19:81:0b:43:19:8c:7f:5a:a2:8e:8d:6b:56:a9:
2d:0a:e0:8e:5c:ad:22:51:03:9d:52:08:d1:16:20:8e:8e:8b:
43:58:6e:1d:1b:47:4a:84:3f:5b:e0:67:1c:29:51:e1:dc:4a:
21:5f:23:ca:66:da:06:a4:23:cb:0d:dd:a5:ad:5d:d9:fc:b5:
d4:f9:bf:7c:f7:ab:ff:73:4a:93:f6:b2:ff:4e:c0:be:74:5f:
a8:0e:6b:99:10:8f:78:65:25:08:df:fb:53:2f:7b:c7:a3:4c:
5f:71:d2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 23:57:55 2025 by rpki-client