Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
File: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft (raw, json)
Hash identifier: YKT8JptIXL9rF4cqm4c3YeZ8Ts98mmgYvU70yW3oBXI=
Subject key identifier: 24:5A:6D:34:2D:3D:89:E9:74:72:80:67:50:60:3E:07:BF:D0:64:A4
Authority key identifier: E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
Certificate issuer: /CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Certificate serial: 0196ABB0F90F4305FD78CDA9F033FD1DA766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
Manifest number: 1086
Signing time: Wed 07 May 2025 17:00:24 +0000
Manifest this update: Wed 07 May 2025 17:00:24 +0000
Manifest next update: Thu 08 May 2025 17:00:24 +0000
Files and hashes: 1: 505QcayJo-pBwK1VqJNaBX1Q-5M.roa (hash: fIMbj/fl7aaDNKfopMcxB8cXpCnGq59ztvvwuTU/2xA=)
2: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl (hash: IIhiHDKGd0QtwAiD5Q1S7xmT2qlv+eTPwimpYjgyndM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:b0:f9:0f:43:05:fd:78:cd:a9:f0:33:fd:1d:a7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Validity
Not Before: May 7 17:00:24 2025 GMT
Not After : May 8 17:00:24 2025 GMT
Subject: CN=245a6d342d3d89e97472806750603e07bfd064a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:fe:3b:7a:57:af:23:b0:ac:42:0e:c8:8d:
0a:b7:19:11:0c:30:36:85:ab:ce:57:1e:4c:a3:38:
e1:62:eb:02:eb:47:2e:79:b7:27:ca:13:41:8f:32:
3f:30:e3:30:e3:21:c3:ec:6b:b0:49:49:86:0d:5d:
7a:0a:1b:73:c0:3e:f2:b8:90:46:29:5b:39:20:df:
84:59:23:ac:3d:fb:db:9d:28:08:36:ac:46:92:53:
2f:ba:bb:3c:81:00:7d:89:c0:18:92:db:ac:ec:d1:
a8:77:8f:63:f6:90:1e:a5:9c:41:90:f9:13:1d:cf:
34:07:8f:b6:a0:4d:94:02:f8:72:ab:ee:17:59:af:
87:7a:0f:a6:42:cc:54:43:85:2a:bf:24:04:05:ec:
f3:3b:3d:c6:f7:36:03:1d:ae:1a:96:77:32:ad:e2:
47:3e:db:59:c3:91:0c:5d:58:d2:83:49:db:c0:dc:
c6:7d:50:3a:f3:8f:25:5a:38:5c:a0:9e:9f:51:5b:
aa:5c:3f:19:0f:d2:e6:97:c2:43:ee:5d:79:cc:63:
b9:74:4a:cb:a2:58:b6:89:98:c7:f4:a6:57:ef:2a:
0e:92:4b:87:a0:a1:b9:5a:e8:bf:e6:ec:77:04:55:
82:08:68:29:4a:23:ea:14:bc:ba:20:78:a2:40:6f:
2e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5A:6D:34:2D:3D:89:E9:74:72:80:67:50:60:3E:07:BF:D0:64:A4
X509v3 Authority Key Identifier:
keyid:E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:26:de:21:55:bd:f0:f9:22:74:b2:81:e1:9f:f1:81:a8:f5:
27:7a:46:39:d3:7f:1a:01:60:0c:62:59:d6:ae:d7:1c:9d:30:
2a:38:bf:5c:53:89:55:18:cc:38:e2:7d:5d:28:cc:d0:72:ac:
16:97:1e:7e:86:3d:84:32:11:b1:84:a1:0b:5d:53:a6:56:e0:
b2:ed:b4:9c:ae:43:e8:7d:b9:01:c6:92:75:45:b7:86:66:81:
a1:71:b4:92:40:e5:27:ca:26:21:80:8b:b3:03:d7:27:79:44:
cd:ec:9e:60:aa:8f:ec:aa:f9:53:6f:12:fd:98:f0:b7:b7:2c:
ba:5c:93:91:6f:01:e5:44:aa:4f:e2:11:bc:7d:db:3f:42:f5:
fb:88:47:7e:e0:b6:81:84:3a:ed:3c:dc:8b:13:01:18:38:63:
4a:66:68:aa:37:06:c3:e9:2b:f5:3c:19:db:66:ef:7c:89:e1:
f5:b0:04:28:3f:61:27:2d:d7:ae:6d:8c:ad:b1:92:7b:b1:57:
fd:0b:8d:ca:88:d6:42:c7:0a:ee:16:f1:48:c9:eb:0e:3f:ee:
09:5a:76:c7:e5:af:46:d6:f6:e0:e4:87:f9:86:61:9c:67:c5:
d6:0f:d2:53:fd:3e:bb:14:89:cd:e8:5c:1f:d4:f2:53:6a:28:
8f:af:19:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 20:31:51 2025 by rpki-client