Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
File: 5vwXvqVVttODIflAKOUV-6T6dNw.mft (raw, json)
Hash identifier: J/+omecS4UW89ODO35IpvgquNdErYQdPyzdOCMCA0WI=
Subject key identifier: EC:46:67:03:FD:43:54:F4:AD:D8:1A:03:CF:D3:E1:05:56:91:99:8A
Authority key identifier: E6:FC:17:BE:A5:55:B6:D3:83:21:F9:40:28:E5:15:FB:A4:FA:74:DC
Certificate issuer: /CN=e6fc17bea555b6d38321f94028e515fba4fa74dc
Certificate serial: 0196BECA06BD3FCB06F45D36A5C22A3DF7E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
Manifest number: 1539
Signing time: Sun 11 May 2025 10:00:33 +0000
Manifest this update: Sun 11 May 2025 10:00:33 +0000
Manifest next update: Mon 12 May 2025 10:00:33 +0000
Files and hashes: 1: 5vwXvqVVttODIflAKOUV-6T6dNw.crl (hash: Oo53XYHCFwoO/wrrVm8QDfq6TnL7hlfoZNThH7aBU4s=)
2: J1qh-XLlSb83Cvw0tPyOs7lbFV8.roa (hash: UbADxFQd1kOQt6qZzcUh4NVaCiaCa54WExVcxjT3EEU=)
3: kLrHkvE4C0vYJ_I9mm47FT5Tbv0.roa (hash: wliDZ4/aTNMerRMfSzhrbSpYGq5mGBX1nX+LRd2XWsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:06:bd:3f:cb:06:f4:5d:36:a5:c2:2a:3d:f7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6fc17bea555b6d38321f94028e515fba4fa74dc
Validity
Not Before: May 11 10:00:33 2025 GMT
Not After : May 12 10:00:33 2025 GMT
Subject: CN=ec466703fd4354f4add81a03cfd3e1055691998a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:ba:f0:68:97:74:ae:1f:0c:a3:1b:c3:df:
41:fb:6d:a1:d9:bf:94:78:1f:50:77:34:00:eb:b2:
2a:4f:49:a0:89:8f:ad:7e:14:d0:94:6d:91:dd:97:
b3:af:62:fe:d3:98:bd:d2:d2:04:a2:0a:a2:c8:e9:
7b:ce:93:d8:09:dd:c0:34:c0:3a:4e:8e:95:9d:17:
f8:6c:94:96:b3:e8:b9:c5:7b:00:d8:91:1b:d1:53:
4a:cb:7b:a1:ac:d8:28:1c:46:6c:99:a5:92:29:d1:
50:85:e9:5c:81:59:7d:4f:ff:6c:c1:21:7d:47:6a:
55:9e:75:40:50:b9:76:7a:4c:9d:f7:5c:26:19:4e:
f9:e6:9d:72:19:a8:a7:58:c8:04:a2:aa:b0:a4:cb:
fb:19:4a:1e:07:21:11:4c:cf:57:f6:b8:c3:d1:cd:
78:9b:4d:af:c3:d2:0c:12:5c:cb:cb:02:d5:a5:ea:
b9:97:6b:df:8f:66:68:e3:ff:ce:5d:0a:09:f6:c2:
a3:38:b2:42:f2:5a:54:0e:6d:ee:1b:9e:6c:f5:c3:
2c:f9:66:9d:3b:ae:4f:f2:35:b4:c8:85:3a:03:58:
54:ec:c3:53:89:dc:7a:10:20:bc:f8:d0:12:7a:30:
23:52:fe:54:ab:20:24:de:a9:f7:e6:f4:6d:a2:0d:
55:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:46:67:03:FD:43:54:F4:AD:D8:1A:03:CF:D3:E1:05:56:91:99:8A
X509v3 Authority Key Identifier:
keyid:E6:FC:17:BE:A5:55:B6:D3:83:21:F9:40:28:E5:15:FB:A4:FA:74:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:96:8b:da:1c:ea:52:63:7e:d6:90:0a:61:32:e7:ef:61:21:
46:48:b9:ee:4f:22:4c:67:ae:b6:eb:63:08:65:7d:9a:a5:6a:
be:33:c6:c6:f9:87:39:da:0f:cc:c9:6f:2d:54:23:18:02:49:
a8:24:24:d5:d1:42:e5:87:ce:97:cb:71:73:5e:fd:fa:dd:53:
56:4f:6e:6c:32:8b:fa:9f:34:57:31:a1:a7:f9:07:e2:73:35:
01:56:e4:9a:cb:dd:c9:db:e1:9e:27:57:10:37:9b:33:a1:3b:
4e:0c:a5:da:a0:b6:d7:ad:7a:45:8f:00:bd:2a:6d:fd:3d:3c:
d0:b9:3e:b5:f8:fa:ce:2d:74:c6:47:b7:52:65:49:9a:2f:8a:
19:08:db:65:b0:98:ea:b5:7d:77:3d:10:0f:15:06:4c:7b:1d:
8b:95:07:e9:2e:98:b3:0c:3e:5e:7b:64:5b:21:48:c9:0f:29:
a4:a9:c8:4d:37:d1:f5:bc:7f:fb:93:3b:25:80:e0:9f:cd:a9:
1a:ef:2a:d8:54:05:15:c0:ae:4a:53:59:4d:57:e5:04:37:48:
24:4e:da:65:c0:b9:1f:df:f6:bf:b6:4c:83:08:af:cd:2f:25:
fd:6d:0d:18:75:a8:53:d3:f6:45:f0:30:4b:38:c8:ab:41:b2:
4e:9f:d6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:56:20 2025 by rpki-client