Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
File: 5nXaCc0660yTfGP1NfM_1X0MIZE.mft (raw, json)
Hash identifier: etdJh24b2Pcn6NatFLcoTIYCZ+mSJMV5gkTsC6REknE=
Subject key identifier: 96:91:34:D3:07:0A:2D:3F:63:A5:8C:E8:D8:85:4D:00:E7:D3:ED:06
Authority key identifier: E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
Certificate issuer: /CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Certificate serial: 0196BBC93584B46362FAE6A7A01781A83176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
Manifest number: 135F
Signing time: Sat 10 May 2025 20:00:47 +0000
Manifest this update: Sat 10 May 2025 20:00:47 +0000
Manifest next update: Sun 11 May 2025 20:00:47 +0000
Files and hashes: 1: 5nXaCc0660yTfGP1NfM_1X0MIZE.crl (hash: XpNASjB5ECKZFcv8I78Fr9ZE/q4DdgUjk8r9B+wbAxk=)
2: oxEuvUfcJ-buwPGzC9O9kYsePss.roa (hash: CDgIKWYLWk0SZTYTZrPpXT0JXuPlKzi9XhIJznqGoHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c9:35:84:b4:63:62:fa:e6:a7:a0:17:81:a8:31:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Validity
Not Before: May 10 20:00:47 2025 GMT
Not After : May 11 20:00:47 2025 GMT
Subject: CN=969134d3070a2d3f63a58ce8d8854d00e7d3ed06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:8e:a0:30:9b:04:8c:8a:4c:58:58:3c:ad:
31:af:81:3d:33:cb:7d:52:af:82:84:27:9d:5c:61:
d6:c5:07:16:8b:34:cc:6a:e0:62:1e:24:f2:95:88:
c4:52:d7:7b:5b:1d:88:0f:5e:07:02:02:69:4b:24:
e7:ce:c7:25:10:1d:ae:54:24:35:2e:1e:ec:72:c0:
28:d6:10:27:18:4e:0d:e2:80:9f:21:7f:e0:b6:65:
c7:1c:a2:9f:05:31:c6:fe:be:e4:d9:9b:2c:49:bd:
e4:61:75:17:27:be:25:4c:9b:24:12:93:cd:04:8a:
1c:3c:6d:90:b3:be:c4:3d:0a:25:cb:73:79:d1:a6:
43:2c:b0:60:3c:32:09:30:0b:1d:0b:89:09:47:ff:
4d:a5:70:e3:60:1a:4f:fb:2c:29:8a:e3:4b:60:2c:
7a:37:b2:0c:02:8b:a4:a8:56:44:a1:0d:8a:7f:51:
77:fc:d0:45:1f:5b:10:d1:6d:fe:75:9e:d9:ac:eb:
7f:7a:d3:9f:33:17:e7:47:dd:8b:5d:ac:cd:f9:ef:
49:33:3d:21:a8:f1:fb:1b:c4:8c:a5:67:04:4c:85:
e3:d8:50:28:36:c4:81:b4:2c:70:84:9b:e2:c9:ad:
31:81:cc:79:1b:f3:40:06:78:95:dd:62:b6:6a:66:
6f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:91:34:D3:07:0A:2D:3F:63:A5:8C:E8:D8:85:4D:00:E7:D3:ED:06
X509v3 Authority Key Identifier:
keyid:E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:4d:fd:4b:7a:1d:fd:01:0d:f6:e9:b6:28:e8:a5:7b:05:34:
15:2d:81:d3:cc:0e:2e:91:6d:36:b1:c6:63:48:ce:81:d2:0c:
05:77:d4:f2:62:47:bb:2d:0e:04:dd:49:d5:bc:89:7b:1c:12:
27:88:e4:71:6c:09:dc:10:8c:89:c5:17:da:01:8a:d1:5b:67:
66:5d:1c:8b:41:65:3a:6c:5a:b1:2e:75:9b:a8:b4:31:e7:9e:
5e:17:e3:8a:53:8d:89:b2:3c:8f:8b:df:f2:fd:5a:7c:c9:58:
e3:61:ca:ae:84:6d:8f:21:33:fb:81:da:51:fc:34:8c:c4:95:
4d:6c:40:ef:da:81:2f:69:e5:d1:34:a8:77:3b:79:15:dc:7d:
69:85:cb:32:1e:08:3d:f6:d2:46:2e:ac:56:b7:54:46:b8:77:
45:09:30:73:e7:6b:e1:f2:f6:96:9c:67:80:89:d4:c6:b8:6d:
0b:fd:04:11:e7:aa:0b:b7:84:b9:6e:6f:b7:b1:48:d5:ae:c7:
09:91:12:0e:7b:35:0c:32:23:51:c5:4f:e1:fd:cd:5c:13:13:
95:c8:19:a4:1e:6e:84:2f:d0:9b:2c:eb:b2:42:4e:09:ba:b7:
5f:b0:b4:62:15:b6:d5:9f:8c:52:75:9e:c6:da:89:e7:5f:5a:
5b:0a:d2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:28:12 2025 by rpki-client