Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
File: 5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft (raw, json)
Hash identifier: MycBSL0oTSrXFLVa5sEId9nHFeqc2XHtzIfaodxI5j0=
Subject key identifier: 9B:68:75:8F:5A:AA:14:3F:88:D7:71:74:D9:90:72:A9:2B:BA:B2:C0
Authority key identifier: E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8
Certificate issuer: /CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8
Certificate serial: 0196CACDDB45E64081A3896A271D0105340A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
Manifest number: 153D
Signing time: Tue 13 May 2025 18:00:10 +0000
Manifest this update: Tue 13 May 2025 18:00:10 +0000
Manifest next update: Wed 14 May 2025 18:00:10 +0000
Files and hashes: 1: 5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl (hash: Ud860Ftl4BZp6M4iLHsnSkCgEAVan8MEooxrTx+hpC4=)
2: xw1wxyD1fMrJTbgYiyQiF0uQJK0.roa (hash: TVVXOUY13A6nRw+KZkyghJdyM7alOs0fCSWauNlbS0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:cd:db:45:e6:40:81:a3:89:6a:27:1d:01:05:34:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8
Validity
Not Before: May 13 18:00:10 2025 GMT
Not After : May 14 18:00:10 2025 GMT
Subject: CN=9b68758f5aaa143f88d77174d99072a92bbab2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:96:12:b6:76:17:12:c7:38:e7:c4:5c:2f:c0:
75:6a:1a:e4:c8:1f:14:a6:c1:6e:7d:79:de:9a:7e:
ef:c2:f9:09:f2:a9:3b:47:33:9f:df:f4:2c:67:4c:
7e:99:f9:1b:52:4a:b2:45:ae:9e:98:2f:93:39:02:
60:46:8c:09:e1:65:16:60:a3:87:39:82:9d:ab:51:
c4:b2:e8:c8:fc:2c:16:9a:14:96:59:75:9e:64:a4:
90:36:ea:d8:e6:ce:81:7f:67:b3:96:ed:08:6b:03:
ea:ac:16:c8:ed:cc:4d:7d:9e:01:8e:99:44:7d:7c:
c5:d0:9f:7c:47:70:11:50:ec:b0:c2:fd:5e:f6:b8:
ac:68:6a:50:a2:38:fe:e2:aa:5d:74:43:60:0e:d6:
04:bf:e8:af:9d:6a:18:d6:10:59:06:67:0e:ac:d5:
bf:6d:86:b3:1c:4f:ce:30:60:8b:40:4e:78:77:36:
6a:68:83:f8:61:af:af:f1:d7:24:78:0d:f0:63:32:
56:18:98:6b:77:b0:6e:5f:ce:14:d0:ac:f6:c7:de:
54:02:48:04:46:6c:49:e6:d5:5f:7c:78:de:01:a2:
72:09:91:83:55:5e:25:36:a8:5c:85:80:d3:d7:3e:
66:f4:fe:23:35:b6:34:72:b5:96:fb:a8:5e:c6:9b:
3c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:68:75:8F:5A:AA:14:3F:88:D7:71:74:D9:90:72:A9:2B:BA:B2:C0
X509v3 Authority Key Identifier:
keyid:E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:38:b5:e6:15:a8:2e:bd:b1:f9:c4:50:1f:6a:be:63:a3:50:
d2:09:4c:b7:86:64:09:43:69:2d:ce:3c:ab:46:8c:0e:88:75:
d8:77:cc:b7:7e:2e:50:d1:49:e1:66:a3:47:8e:16:fb:04:67:
94:19:05:fd:90:5c:ff:d9:a3:1d:a5:d1:11:52:78:06:8c:8f:
7a:1b:e6:8b:62:1c:2c:92:65:99:5d:5d:35:14:f2:e2:41:a9:
00:9d:71:c0:16:14:62:fa:65:71:42:ec:5d:64:e7:ae:f9:65:
1c:59:46:7d:af:3a:9a:10:64:8a:75:fe:fe:dd:ce:e7:51:45:
91:d5:ff:2a:a3:2f:6d:3a:27:68:92:17:13:9f:84:1f:b8:b0:
80:5f:15:29:ec:83:70:cd:66:f5:78:5a:d5:ea:8c:0c:66:e9:
d8:d1:80:f5:8c:74:37:63:99:76:f5:5a:b1:52:fa:2e:ae:0e:
3d:8e:b1:d4:b3:40:1d:89:59:39:cd:48:9b:ea:03:b1:c3:08:
cc:3c:2b:38:0d:36:5a:28:02:6a:70:3e:bb:20:85:aa:fb:06:
b2:fa:2b:e6:ab:07:39:f7:d5:53:9a:5f:ab:0c:34:3d:39:8c:
ed:56:af:63:2d:6b:a8:5f:3e:b6:66:cc:c9:20:a5:02:d3:0b:
a4:6d:02:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:58:56 2025 by rpki-client