
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft
File: 5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft (raw, json)
Hash identifier: pc1IsKNe+q8sm6RKqj98xCGBGlcvDBF/i17NhRyHa+M=
Subject key identifier: C1:9D:E9:66:65:A9:2C:01:D7:B9:D6:54:AD:FE:D2:43:2C:69:10:39
Authority key identifier: E4:FB:64:09:46:D8:CF:AE:FE:56:48:94:87:02:AD:60:34:A0:E8:B9
Certificate issuer: /CN=e4fb640946d8cfaefe5648948702ad6034a0e8b9
Certificate serial: 0196A3C120CF2EF0FF9072513E3696C01217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft
Manifest number: 09BC
Signing time: Tue 06 May 2025 04:01:05 +0000
Manifest this update: Tue 06 May 2025 04:01:05 +0000
Manifest next update: Wed 07 May 2025 04:01:05 +0000
Files and hashes: 1: 5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl (hash: kmxcqzH2Mab+NnYWbzEY7HoFjpaV5z7k4JvZ/cxbmpw=)
2: ks3E9rgJDrYHSn1zKv3DRKZ2JZY.roa (hash: 6sUjW8COGptDdK0ohMchALwRnOd24SfrIMK9uss1g4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:c1:20:cf:2e:f0:ff:90:72:51:3e:36:96:c0:12:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4fb640946d8cfaefe5648948702ad6034a0e8b9
Validity
Not Before: May 6 04:01:05 2025 GMT
Not After : May 7 04:01:05 2025 GMT
Subject: CN=c19de96665a92c01d7b9d654adfed2432c691039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a5:dd:8e:fd:ec:87:8c:1b:f3:d8:06:a6:e7:
6d:5c:6c:d5:f9:94:67:98:a5:ed:c1:f9:c6:18:63:
ba:f8:71:09:de:c5:11:ed:73:22:6e:c8:88:cd:ed:
e7:d2:a1:91:bb:a4:a5:04:5a:dd:a9:b4:e9:53:20:
f4:72:65:dd:57:d5:ec:53:40:79:4f:b2:fa:32:24:
32:a1:b5:26:bc:6a:b2:58:c1:b2:30:33:58:a0:61:
f8:69:4f:d6:79:58:70:a7:b2:9f:69:0a:03:f1:60:
67:a8:b6:ec:fe:2c:62:23:44:21:7f:6b:d8:e4:23:
02:76:34:14:65:af:e4:37:be:1f:d8:e0:65:8d:f0:
57:3a:0e:51:86:d2:41:fc:d5:32:5a:88:21:7d:b4:
81:53:8b:27:28:5a:4c:a1:6a:2a:6d:3f:ca:7a:f3:
8e:27:0d:4c:96:b9:20:8d:43:7d:75:34:1f:79:56:
fc:34:ff:b5:af:3e:da:69:b4:77:40:21:4d:88:99:
0d:c4:08:6a:c2:e2:ef:06:fd:50:91:52:ca:c3:b0:
f1:49:0c:8f:82:6c:7e:0f:9c:44:53:7b:f4:6a:23:
75:91:13:fa:d5:f0:ab:51:f5:47:ab:1b:e3:c7:2e:
20:b4:3d:73:e3:34:f9:df:c5:a7:54:e8:a6:20:ae:
1a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9D:E9:66:65:A9:2C:01:D7:B9:D6:54:AD:FE:D2:43:2C:69:10:39
X509v3 Authority Key Identifier:
keyid:E4:FB:64:09:46:D8:CF:AE:FE:56:48:94:87:02:AD:60:34:A0:E8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6f:fc:b6:99:64:65:30:a3:a3:f7:1d:f6:ed:26:3d:72:81:
dc:44:40:f1:23:05:cb:ab:07:15:4c:cc:d3:4f:c5:1a:f0:e4:
c0:36:33:1f:e9:c8:fc:d1:bc:b9:c6:2b:6a:f6:f2:1b:42:46:
18:49:ea:17:de:6c:97:04:0b:61:1f:0b:d6:0a:92:02:c0:5c:
01:e4:00:f6:96:84:db:ab:5d:14:32:81:cd:32:7f:b7:17:cd:
e0:8a:85:b8:91:b0:e7:a0:d2:7e:3a:b1:d0:24:bc:1a:b6:94:
24:2c:a6:0a:0c:36:48:25:fa:ee:cd:a5:b4:97:66:35:e8:82:
bc:a8:90:ce:6b:9f:25:09:cb:50:1d:ee:d7:d6:0f:ad:e4:f0:
65:66:b8:22:55:8e:51:07:bf:76:e3:a1:99:7e:57:30:64:32:
b1:6d:49:93:0c:28:c3:60:23:5a:fe:e6:37:08:9c:65:ba:fd:
60:0f:91:02:b7:e6:6a:76:b8:93:b1:3e:f2:15:69:01:ad:41:
1c:bd:87:d9:60:cc:d9:5e:ed:65:94:6c:eb:29:42:5f:04:a4:
e0:7a:54:67:6b:6f:35:84:b9:a5:4e:85:88:5d:f0:d3:ae:5e:
8d:c6:3b:48:79:06:45:cb:54:cd:fa:c1:33:df:aa:27:b1:b6:
bf:7f:ea:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:30:43 2025 by rpki-client