Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
File: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft (raw, json)
Hash identifier: KipbHWdRhjO3GtY8593qkiWYIybU5M39asUQSRtGZ5M=
Subject key identifier: A7:38:07:40:63:AA:4E:45:F3:4C:79:DA:FA:C1:58:3E:1E:0D:B8:5A
Authority key identifier: E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
Certificate issuer: /CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Certificate serial: 0196B5FDE1D7A1B632C7421668F49E82A412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
Manifest number: 1531
Signing time: Fri 09 May 2025 17:00:36 +0000
Manifest this update: Fri 09 May 2025 17:00:36 +0000
Manifest next update: Sat 10 May 2025 17:00:36 +0000
Files and hashes: 1: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl (hash: XlaHyv3W3wAHHpsTGulsCp8YMXjWiUtPAGUZzy3WQdM=)
2: TmGH7yXkMz-v6gHvCr9qE37nKcA.roa (hash: n1u54C/BtvIrlKmaScJ2jkmbHT4HONn1UuTucKaDW6g=)
3: k7UwqFFBmprxDA56kDwgmZFvA3g.roa (hash: oLwFA32V9FgAocZGOyNmCc1klUCv8GcjZUVDNdla0Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:fd:e1:d7:a1:b6:32:c7:42:16:68:f4:9e:82:a4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Validity
Not Before: May 9 17:00:36 2025 GMT
Not After : May 10 17:00:36 2025 GMT
Subject: CN=a738074063aa4e45f34c79dafac1583e1e0db85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:9f:f5:57:55:f0:65:08:71:c5:33:77:39:
77:7a:47:7b:51:9f:2e:e4:5b:e7:2c:43:57:6d:4c:
80:fe:df:c0:bd:39:54:25:60:92:36:d1:45:32:5f:
03:d0:f6:c5:91:91:4e:40:fc:f2:69:2c:00:31:ad:
ae:ea:02:45:f0:3f:8e:14:4c:a6:48:4e:f7:06:b6:
05:36:ed:ea:1b:5a:aa:1a:47:32:37:d7:44:90:4d:
db:a6:ff:3e:13:51:70:a8:04:93:71:fb:4b:87:fc:
65:74:5c:a1:97:9a:87:1f:e6:d1:82:ff:1a:7a:01:
e2:b8:bb:e5:15:0c:7b:a4:55:95:70:57:1f:74:03:
6b:c0:77:e5:1f:f0:0d:6b:45:b7:bd:bc:d5:9b:87:
d6:2f:c6:ef:1d:5b:87:09:a9:4e:67:55:77:54:74:
dd:a8:db:ac:de:57:60:a8:d4:78:12:eb:60:d4:76:
0a:ea:e7:95:14:01:da:48:83:c9:a5:d7:1d:88:16:
b1:de:69:27:49:24:6f:59:67:b3:fd:61:59:77:6b:
6b:33:a1:ea:5c:47:bd:8f:5f:95:13:19:7f:e4:f9:
2a:f9:95:fd:20:c0:0c:d1:fe:45:c7:d4:c7:d3:ca:
51:0b:ef:35:7c:bb:f3:a4:44:19:a7:6c:a7:f5:ad:
28:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:38:07:40:63:AA:4E:45:F3:4C:79:DA:FA:C1:58:3E:1E:0D:B8:5A
X509v3 Authority Key Identifier:
keyid:E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:df:54:51:de:d1:82:87:bd:f8:f2:e4:d1:8d:06:a0:0b:b9:
c8:87:f2:81:bc:5e:76:7b:c6:ab:70:89:89:8d:31:f6:d5:af:
ac:30:b0:dd:c0:5f:a5:fd:ac:2d:8f:51:8b:df:e8:b6:f3:f9:
b5:04:e7:cb:61:0d:55:54:ea:d5:cb:fc:e1:f4:0f:a4:26:88:
83:c5:63:d7:05:7a:cb:77:9d:e0:18:51:ff:fa:22:03:c0:38:
89:11:82:84:f4:3d:41:6e:00:b8:6a:68:e3:44:17:cc:c5:8f:
74:cc:50:ea:5b:1f:0e:02:b5:20:64:b1:07:a9:d9:7a:fc:c9:
b2:82:84:a7:89:9d:40:fb:08:19:d2:3f:87:4b:ac:aa:91:bc:
83:cd:d8:65:bd:7e:af:5b:f8:6e:a3:ea:bc:ef:5d:39:f6:8c:
e3:df:73:c6:5b:c8:2c:93:32:52:a7:cd:2f:5b:cb:1b:6d:37:
59:5e:d2:04:7d:64:ae:04:f7:8d:30:e3:ec:c8:62:b2:76:8e:
75:bc:21:c3:1d:fd:19:17:24:bf:b2:6c:61:41:e6:4b:19:a0:
c0:12:45:18:b1:58:20:f0:ab:84:4c:aa:2e:11:c5:77:29:1d:
e1:89:0a:62:36:8f:58:bf:a8:5b:92:60:b8:3e:2d:fc:66:77:
94:80:57:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:27:07 2025 by rpki-client