Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
File: Si5_568rpaMEbhdkT6vo8Di0598.mft (raw, json)
Hash identifier: 7yB4xXViIokdMEAxUQ2Gi9W4IO6hBikr7V9AiEhXqPw=
Subject key identifier: 25:09:BA:47:3E:8D:FC:9C:7B:2C:C8:B1:9A:84:E9:43:2B:EF:C9:F5
Authority key identifier: 4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
Certificate issuer: /CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Certificate serial: 0196C0B8C573B33F4E3031C4B3B36E6E26E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
Manifest number: 0DBA
Signing time: Sun 11 May 2025 19:00:56 +0000
Manifest this update: Sun 11 May 2025 19:00:56 +0000
Manifest next update: Mon 12 May 2025 19:00:56 +0000
Files and hashes: 1: Si5_568rpaMEbhdkT6vo8Di0598.crl (hash: jt/yTDSu0CIERrK/tKmDAA8iioYNIP39bN6Gzo7g9SM=)
2: x05kuSTQillWAvYC1VSvIsPJiaU.roa (hash: YaAmDXOkb7npVO3SgdzcRdFaOrP01AvggeHWb2jbRUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:c5:73:b3:3f:4e:30:31:c4:b3:b3:6e:6e:26:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Validity
Not Before: May 11 19:00:56 2025 GMT
Not After : May 12 19:00:56 2025 GMT
Subject: CN=2509ba473e8dfc9c7b2cc8b19a84e9432befc9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:d9:81:ab:36:cc:86:57:63:80:b8:55:2e:
0c:5a:7a:5d:7a:fa:cb:94:3e:8a:20:bb:4a:68:9c:
49:fa:2e:d9:81:61:a4:21:70:98:b8:4a:03:b5:5b:
7e:ab:d8:5f:0d:8c:6b:c3:48:ce:bc:09:49:06:80:
4f:60:bf:ff:0d:79:6b:7d:8d:a4:1a:32:57:02:9f:
f8:27:26:50:3e:f4:90:bc:2a:38:ec:a5:5e:e0:02:
3b:4d:a3:2d:36:73:59:e7:d2:c0:73:fd:0b:80:de:
7a:83:8c:d1:e9:77:29:c5:b3:fc:68:16:56:d0:0b:
96:36:12:58:80:b3:37:a5:55:a7:1f:af:15:29:fa:
52:23:14:0f:b9:4b:2b:72:e3:5e:1a:67:2d:4e:49:
70:78:27:21:f2:9a:c7:8f:d6:1b:a6:6b:65:d8:f0:
d8:f4:a1:12:76:e5:3e:50:a3:95:11:52:5c:e0:65:
d3:6d:e3:8d:be:42:30:8b:ac:9d:e7:c1:57:6f:69:
26:64:88:36:9d:20:74:36:50:83:1f:5a:c9:67:87:
ad:9a:98:49:31:d2:2f:49:fe:6f:29:bc:bc:9b:a1:
cc:8d:86:d0:40:76:c1:c4:cf:02:4e:03:f9:e0:cf:
9b:76:a4:42:61:50:fc:5d:c4:22:8c:15:db:ef:0a:
c7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:09:BA:47:3E:8D:FC:9C:7B:2C:C8:B1:9A:84:E9:43:2B:EF:C9:F5
X509v3 Authority Key Identifier:
keyid:4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b5:8f:ba:2e:1e:9d:53:87:06:8e:0e:68:0f:85:a1:04:df:
0d:a2:48:e2:91:a4:28:f7:1d:4f:96:af:91:20:f1:af:e0:f4:
25:ff:64:19:19:a1:01:3c:02:a3:b8:27:fd:14:d8:69:12:7f:
df:40:11:9b:b8:89:49:b0:ee:d0:ca:79:03:ea:df:b3:2f:3a:
1b:b4:00:a0:4c:33:2a:65:e4:af:da:ff:bb:af:2f:7d:94:3f:
c2:a1:32:89:bd:1d:98:3e:b7:99:6e:45:57:f1:75:cc:2c:16:
9d:cd:12:5b:38:ad:17:79:b6:ea:39:0e:dd:65:11:e6:f8:30:
f2:6a:98:15:5a:a0:0b:6a:70:85:9d:2d:b1:54:29:2a:ef:4a:
ff:ce:31:e5:48:44:a7:28:1a:b4:8c:39:09:65:f4:f5:4a:09:
8e:69:a4:84:f8:45:01:f9:34:3f:99:62:26:9c:1d:0c:3d:b3:
5f:09:a8:3f:cd:96:40:f7:b1:4b:b8:4b:eb:c0:88:cf:45:7d:
09:73:3d:eb:76:f4:1e:c7:ad:bc:86:b7:35:57:f4:fe:46:32:
1a:0e:28:1d:2a:a9:30:1f:64:fc:73:96:1b:4d:0d:ee:fd:00:
2e:b9:d6:d5:52:02:87:88:09:67:c5:9e:e4:6c:12:22:ef:5a:
ea:52:cd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:56:34 2025 by rpki-client