Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
File: p5TNL5F05CFpMaEF2yYayqOTinw.mft (raw, json)
Hash identifier: kFIQARxJYCQF7xpQ1G7SRUxR9drJ/vH4nDkzn0mbJfc=
Subject key identifier: 3C:62:A1:C6:66:D4:CC:7E:56:21:EA:D6:86:72:44:69:93:87:FB:6A
Authority key identifier: A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
Certificate issuer: /CN=a794cd2f9174e4216931a105db261acaa3938a7c
Certificate serial: 0196AB0C1804BB61A8C8603E8FD44B38AA95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
Manifest number: 1244
Signing time: Wed 07 May 2025 14:00:18 +0000
Manifest this update: Wed 07 May 2025 14:00:18 +0000
Manifest next update: Thu 08 May 2025 14:00:18 +0000
Files and hashes: 1: LIOiMNle0vsipx0T1V6aKGTU24U.roa (hash: 1KJvdL1wmyRojBeJyRsEQwf+KBGdNnm/q4xYqP+PnmE=)
2: p5TNL5F05CFpMaEF2yYayqOTinw.crl (hash: 9jLcUzbu0o7C3I2m8zzCyl4Qjquwa415a001xt1Ucbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:0c:18:04:bb:61:a8:c8:60:3e:8f:d4:4b:38:aa:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a794cd2f9174e4216931a105db261acaa3938a7c
Validity
Not Before: May 7 14:00:18 2025 GMT
Not After : May 8 14:00:18 2025 GMT
Subject: CN=3c62a1c666d4cc7e5621ead6867244699387fb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e3:3f:fb:aa:6a:c7:1c:f6:89:fb:b1:56:d7:
a0:68:6e:de:fe:4a:5e:e3:fe:f2:5d:02:df:45:9a:
35:10:50:2d:4f:11:35:0f:72:a0:20:df:36:57:99:
ae:1e:e4:01:5e:66:49:3a:5e:03:c6:b4:6c:57:29:
d9:00:2b:7f:5c:9d:af:f9:74:50:6f:8c:fc:af:21:
17:ea:47:36:d7:c4:1a:49:98:2c:80:a8:f1:6d:05:
4f:4f:f9:c0:4f:96:b8:dd:d3:f4:84:e4:f6:20:6d:
c9:61:19:bc:19:6b:40:e1:d4:46:ae:cc:ec:94:b7:
20:39:9f:ec:f5:9e:07:aa:fb:53:11:d2:87:a1:94:
e0:08:12:73:60:85:75:11:d0:2e:6e:9d:ff:e9:41:
0d:50:9d:65:73:d6:5a:a0:f0:cf:2e:b0:cc:74:54:
6a:30:32:b2:e9:ec:80:5f:5b:1d:46:59:6c:27:84:
85:89:2e:fc:0d:d5:f4:47:be:a1:3f:98:10:5a:fe:
ab:e0:53:96:6a:50:8e:10:07:4a:05:84:43:64:d6:
3a:ca:c9:4c:90:7c:c8:88:0c:3f:14:9e:55:76:b2:
96:15:a5:74:8d:78:c0:c4:ff:50:bc:28:18:ba:69:
14:4e:7d:a6:5a:d9:9b:0d:5d:bc:dc:1d:b0:7d:6d:
b9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:62:A1:C6:66:D4:CC:7E:56:21:EA:D6:86:72:44:69:93:87:FB:6A
X509v3 Authority Key Identifier:
keyid:A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:47:38:b5:72:ce:be:30:b1:1e:66:14:d3:ff:cb:9f:44:a7:
09:2a:35:d3:76:d1:71:25:ed:64:6f:d8:c8:e6:20:35:85:26:
c7:04:59:ac:51:ec:b4:38:25:27:f3:46:75:90:19:49:9b:7a:
6d:c3:ce:64:81:45:06:e5:d8:32:fa:4e:9a:47:86:8c:29:89:
97:ee:3c:d3:26:35:b3:c3:1a:8c:65:6f:4b:7d:39:1b:71:11:
e1:41:a6:5c:11:1f:e8:6c:ca:ca:92:8c:79:a8:b6:37:8a:6e:
16:27:8a:16:91:6a:c4:c1:25:c6:20:13:18:b1:8a:8b:30:0a:
3a:3e:79:d3:00:5f:ca:d3:13:bf:7d:13:3f:5d:9b:7c:a8:63:
e0:db:b5:9d:42:69:45:3f:d2:6c:8e:3d:d6:ba:fd:14:00:21:
e8:f4:21:23:78:39:1f:72:7d:4f:2d:be:c0:1c:78:ab:bd:e9:
74:5a:3e:fe:fa:cf:d2:20:fb:ab:9e:46:c7:7e:01:f8:29:41:
cd:d8:82:cb:94:11:1d:ec:f9:e2:e4:a1:e5:08:ba:9b:68:78:
21:e6:7b:16:cd:b2:d1:8c:01:1c:ba:76:84:e3:0e:1b:eb:fd:
ee:22:e2:53:f8:a1:aa:64:00:a8:ad:71:2c:d9:9f:a8:f2:61:
fc:c8:98:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:36:32 2025 by rpki-client