Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
File: E5WjqPyN003W88lQxmH0shJxdaU.mft (raw, json)
Hash identifier: ocwiagrhbVi+aZg306nitx9UQN1lopR3Q38Ebkzf0/I=
Subject key identifier: 2B:CE:36:A9:C0:51:92:5B:56:81:56:E8:EE:2E:FD:B3:54:FB:C0:30
Authority key identifier: 13:95:A3:A8:FC:8D:D3:4D:D6:F3:C9:50:C6:61:F4:B2:12:71:75:A5
Certificate issuer: /CN=1395a3a8fc8dd34dd6f3c950c661f4b2127175a5
Certificate serial: 0196BB24449EAD89334B3C336FC62464907A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 17:00:38 +0000
Manifest this update: Sat 10 May 2025 17:00:38 +0000
Manifest next update: Sun 11 May 2025 17:00:38 +0000
Files and hashes: 1: 7WkSNMeKo3hgBONjdlWZ4xeGZtA.roa (hash: l6jtovWx9ge466onVKmeSTTNETL8X/SNcFUw3TEBnWE=)
2: E5WjqPyN003W88lQxmH0shJxdaU.crl (hash: q7vM1EgSYNxJa/HmJ1H3UahbBFhoTVD+bpFFuhcBqBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:24:44:9e:ad:89:33:4b:3c:33:6f:c6:24:64:90:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1395a3a8fc8dd34dd6f3c950c661f4b2127175a5
Validity
Not Before: May 10 17:00:38 2025 GMT
Not After : May 11 17:00:38 2025 GMT
Subject: CN=2bce36a9c051925b568156e8ee2efdb354fbc030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:c3:71:e3:9d:d1:4c:47:5c:20:ef:18:f1:
fd:30:37:9f:f3:23:19:b2:0b:00:36:61:ec:1b:b1:
2e:8e:a2:1d:00:cc:1e:65:a3:c0:93:ed:83:74:c4:
d2:3e:71:ce:64:cf:d0:64:5a:ad:d4:04:33:0b:d4:
00:06:d5:c7:fd:4f:2e:7c:41:21:68:2f:d3:ea:b2:
46:8a:40:fb:57:94:ae:e4:45:37:93:f1:26:81:10:
38:e8:88:bb:28:ff:d6:20:f5:99:f6:1e:6c:ed:5f:
f9:d9:5f:c0:60:87:e4:33:3d:72:0f:55:bb:88:21:
da:28:4e:17:5b:aa:5a:bd:42:2a:8c:34:76:9f:47:
04:c8:35:c6:ca:87:a1:63:38:b1:15:ad:2e:d2:30:
47:21:83:6a:c7:ef:90:48:81:34:bf:80:6b:b8:05:
2f:ea:e4:51:9b:3e:2d:39:2a:40:99:bd:7f:a1:3d:
0f:5f:0a:10:31:b8:c9:bc:35:d4:ff:43:35:89:1d:
78:10:77:3e:fc:6b:fc:d0:95:82:d1:d0:b1:eb:99:
9f:72:85:3d:95:16:84:e5:72:d0:32:1a:8a:38:48:
07:1d:38:36:bf:4b:1d:14:64:2b:cf:a0:eb:ef:54:
ff:10:1d:b2:02:ec:1a:75:aa:34:e7:8c:9a:62:ec:
15:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CE:36:A9:C0:51:92:5B:56:81:56:E8:EE:2E:FD:B3:54:FB:C0:30
X509v3 Authority Key Identifier:
keyid:13:95:A3:A8:FC:8D:D3:4D:D6:F3:C9:50:C6:61:F4:B2:12:71:75:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:27:48:2d:a9:05:6e:c7:7c:1b:6a:a0:fb:fa:44:e1:c2:19:
ce:cc:f9:a3:47:5e:db:41:4b:74:b5:96:64:90:bf:41:a9:2d:
0d:f6:a9:82:65:2e:f0:33:26:3b:7e:a1:e6:3c:a5:7e:17:3c:
bd:1f:72:79:3b:6f:3f:94:16:da:4a:c2:7b:cf:cf:bb:34:18:
11:11:9c:b3:04:6d:41:e3:8c:40:a7:b6:01:1d:6c:f4:20:f1:
a3:85:a2:cb:44:92:03:5e:1d:97:40:99:01:12:c6:24:42:16:
bf:92:8e:1e:d3:e4:78:a6:84:2d:e3:7c:76:78:39:aa:62:c1:
f0:47:19:df:04:35:1d:9a:76:ec:ab:6b:08:57:96:27:1f:a9:
4d:48:f4:d5:7a:db:20:24:94:43:50:d4:c2:cc:a3:83:6d:2e:
90:43:e4:ca:87:ec:af:db:e8:46:cf:61:d9:a7:4e:05:14:55:
36:93:9b:be:6e:50:b6:c5:e4:8b:82:d0:3f:65:f9:27:df:a4:
6e:3e:30:36:0d:05:4c:d3:fe:14:99:fa:1d:8e:1c:2e:04:b2:
52:6f:f8:dc:5f:b8:61:d0:3b:ad:32:76:c4:bb:e8:f6:15:fe:
37:e2:b8:35:d5:9a:3c:7f:fe:03:a1:39:23:fa:4e:79:e3:0d:
26:89:40:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:00:42 2025 by rpki-client