Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
File: 5GauE1UGtZjWakES40V2mfHEFOE.mft (raw, json)
Hash identifier: AAjruGKlP1kvuaiPNNSW+kSyRIw7StqYpytcwnsL6q0=
Subject key identifier: 94:AE:A2:88:A3:B4:E9:AE:74:AB:79:9D:EC:98:E0:94:C9:CE:5F:BE
Authority key identifier: E4:66:AE:13:55:06:B5:98:D6:6A:41:12:E3:45:76:99:F1:C4:14:E1
Certificate issuer: /CN=e466ae135506b598d66a4112e3457699f1c414e1
Certificate serial: 0196C683BCE06923ADD463A882D7AC2BAF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
Manifest number: 0652
Signing time: Mon 12 May 2025 22:00:44 +0000
Manifest this update: Mon 12 May 2025 22:00:44 +0000
Manifest next update: Tue 13 May 2025 22:00:44 +0000
Files and hashes: 1: 5GauE1UGtZjWakES40V2mfHEFOE.crl (hash: IAfXP2m8rjfQma1+dT9l0ZzapgzpXfmU+SExlgpc2HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:bc:e0:69:23:ad:d4:63:a8:82:d7:ac:2b:af:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e466ae135506b598d66a4112e3457699f1c414e1
Validity
Not Before: May 12 22:00:44 2025 GMT
Not After : May 13 22:00:44 2025 GMT
Subject: CN=94aea288a3b4e9ae74ab799dec98e094c9ce5fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:23:3a:b7:7a:6c:5c:ef:ad:44:d6:76:8c:
1a:de:97:15:15:b6:f0:c2:a8:ec:9d:77:aa:a1:aa:
03:5e:ff:66:04:d0:1e:b1:40:ad:00:4d:29:36:dd:
ff:1d:6e:9e:28:a0:47:c3:ff:00:11:a1:74:c0:fb:
f5:f2:1d:5b:d7:c0:a3:96:f8:61:04:58:2b:e4:f3:
91:3a:75:3a:ac:d5:a4:f8:c2:62:3b:d0:ff:67:ed:
dc:91:f5:1c:ce:02:51:71:46:f2:02:b6:09:cb:af:
2d:8f:f3:9b:21:aa:54:bc:97:f9:16:d4:e0:5c:4d:
70:99:f4:89:90:a1:f8:e1:e3:f2:9e:90:f5:97:4a:
79:ee:c6:a5:b7:8b:78:7f:32:54:5d:78:06:56:6f:
86:54:7a:71:17:74:fb:87:04:6b:31:4b:50:e9:6c:
60:ed:21:ff:74:18:42:a3:48:df:3e:5f:a7:9f:00:
84:07:89:87:1b:95:c3:cd:d8:89:96:74:e7:07:ed:
1f:fc:f2:92:f2:dc:21:31:c5:d9:eb:77:db:3c:84:
88:55:46:04:9b:68:12:c3:9a:c6:b0:ed:10:69:ef:
cb:31:d0:8e:9e:d2:52:71:af:6b:ee:a9:e1:64:c8:
da:fb:c6:f7:6a:23:1d:0a:04:a6:23:43:48:e1:25:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AE:A2:88:A3:B4:E9:AE:74:AB:79:9D:EC:98:E0:94:C9:CE:5F:BE
X509v3 Authority Key Identifier:
keyid:E4:66:AE:13:55:06:B5:98:D6:6A:41:12:E3:45:76:99:F1:C4:14:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:0b:45:37:c6:6b:04:5e:b0:4d:33:e6:de:1d:db:2e:5e:d1:
b0:b8:28:cf:28:98:1a:3e:19:2d:54:ea:b9:40:68:c5:e9:06:
30:91:16:e0:c6:b5:47:14:75:cc:67:2a:2f:76:96:85:70:2c:
c4:e2:24:fe:79:5e:96:ca:9f:60:92:4a:98:2b:8c:bd:d9:4e:
76:19:08:de:fb:79:98:e4:e7:37:61:5d:b6:08:a3:10:bf:79:
80:78:bd:dc:16:bc:6d:05:22:c2:81:d4:61:52:a4:ad:42:78:
b3:39:8a:08:60:6f:28:04:cf:a1:b5:0b:2a:02:8d:5e:5b:05:
b8:ba:83:7c:7c:0d:a7:d7:d1:26:fa:cd:35:3f:04:88:ad:f1:
af:95:32:8c:fd:e9:e9:f0:7a:65:b5:bb:f2:27:2c:b7:e7:ab:
30:00:ef:9d:00:c3:be:9d:ea:8e:51:e5:8a:ad:2a:98:4f:2b:
be:d4:ce:fe:a0:70:4c:d8:02:d1:d2:15:40:cb:c7:e9:03:fc:
44:72:bd:a2:5a:56:be:7c:50:29:4f:db:ca:a8:54:f1:b5:67:
4a:c5:37:d1:3f:2c:a5:f0:72:8b:85:50:da:c7:8d:32:a1:f7:
86:ad:05:10:43:f0:24:3b:ed:b6:95:e1:d1:ec:58:02:77:60:
87:28:db:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:44:28 2025 by rpki-client