Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
File: 5fmtISzWWrTuK46bP4uDPDkA6n0.mft (raw, json)
Hash identifier: gu4EznX8c3c6wwRcRytogQtGug8EMqQ4PK9LjJPO7rw=
Subject key identifier: 00:08:AA:63:E1:DE:CC:57:F2:0A:F1:1F:A2:3C:BF:AC:9B:31:13:C5
Authority key identifier: E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
Certificate issuer: /CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
Certificate serial: 0196A3F74DD965ECFDCFA4626EFF9A9847D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
Manifest number: 0869
Signing time: Tue 06 May 2025 05:00:15 +0000
Manifest this update: Tue 06 May 2025 05:00:15 +0000
Manifest next update: Wed 07 May 2025 05:00:15 +0000
Files and hashes: 1: 5SbPyjmIYXelitOmA1AVO3bhm0Q.roa (hash: 1XIxpyYBD9DDRIa0BTpbMKp2ZvPzaojB9NovyRazhxQ=)
2: 5fmtISzWWrTuK46bP4uDPDkA6n0.crl (hash: hfjsn9Y/vanwN7gJX7c5kBOfk4OtND7zBUx13BGM2Rg=)
3: 7HHw1TGIKZGT4OMQXJ2kcRpWokQ.roa (hash: MAqlIYjH1775SsM1oEUQoqGZ7ZtgZ752pYJj6tU1DkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:f7:4d:d9:65:ec:fd:cf:a4:62:6e:ff:9a:98:47:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
Validity
Not Before: May 6 05:00:15 2025 GMT
Not After : May 7 05:00:15 2025 GMT
Subject: CN=0008aa63e1decc57f20af11fa23cbfac9b3113c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bd:c6:c5:8b:f2:64:7b:37:e8:f8:2d:8c:29:
0a:15:2a:a8:1f:68:71:a1:e9:0a:56:19:89:12:b3:
ae:93:cb:46:64:3e:51:03:de:9b:d1:98:f2:4e:c6:
b4:a3:97:1e:d7:d6:25:e4:19:24:1a:c0:34:3f:ff:
6c:6c:d2:9e:10:b9:61:2a:d6:09:0b:1d:9b:be:b6:
d9:92:fe:41:e3:9c:54:fc:6f:9e:40:54:bf:c5:ee:
8d:d5:97:b3:bf:0d:38:a3:2a:72:16:27:39:b8:c9:
4f:83:71:c5:89:c0:8f:fb:cc:8f:3e:c8:4e:a5:5a:
8f:5b:02:54:22:1e:4d:04:03:73:e1:2c:a6:1b:1a:
29:61:4c:f8:42:3e:30:e3:07:b9:33:e2:ad:56:61:
89:95:8e:b3:eb:fc:06:a2:2d:9e:e6:fb:4b:08:75:
0f:21:87:dd:13:87:70:d0:79:74:95:9f:74:fa:8a:
75:78:5e:74:47:5d:24:97:19:78:2e:3c:8e:55:db:
ab:19:b1:24:26:ce:4a:33:45:3b:d0:60:58:5b:98:
33:5a:d8:64:a5:cf:2f:06:c5:c4:15:95:a0:c0:96:
e8:a8:da:2d:31:41:ae:b2:a5:bf:c0:21:f2:a5:f5:
b8:0f:65:84:fe:01:5a:d7:63:37:8e:67:eb:9b:a2:
15:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:08:AA:63:E1:DE:CC:57:F2:0A:F1:1F:A2:3C:BF:AC:9B:31:13:C5
X509v3 Authority Key Identifier:
keyid:E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e0:e6:92:82:a9:6d:ec:00:40:df:b5:d7:63:65:2d:0e:16:
14:ce:de:c4:50:07:d8:be:43:da:87:c6:e6:dd:a8:ea:0a:71:
80:29:61:f1:aa:41:48:07:8f:ac:f5:83:4e:54:19:87:3d:72:
8f:74:dc:6b:4c:69:ce:04:06:21:c8:dc:f1:3a:89:61:31:9c:
d1:bc:96:7d:c3:30:e3:a5:3b:c0:90:88:ea:8d:b6:c3:aa:5e:
9b:73:4c:b6:11:87:b2:4a:82:69:f6:11:ae:fb:63:8b:6e:40:
59:98:c5:35:2b:d1:9c:d2:e0:c4:e4:65:6e:d8:f5:16:ed:a8:
f2:b6:eb:40:22:bf:56:22:0a:ed:c9:d1:69:9e:39:d8:8a:98:
3d:41:65:71:d9:df:61:e6:bd:b4:5d:5c:d6:2e:c2:b3:e1:1e:
54:db:ad:af:73:c9:e1:4c:c4:60:3b:4c:51:ac:51:fe:a0:4f:
08:e7:e9:69:7a:46:d9:b1:43:3c:6b:3d:d5:88:7b:9e:2d:a6:
16:b2:8f:c9:21:6b:5d:8c:d9:5f:58:17:01:fe:05:a2:f3:88:
c1:87:30:70:da:3e:b8:a7:1d:42:7f:09:41:e8:89:05:ab:7b:
0b:35:ec:16:18:ad:cc:b4:28:55:b9:d0:45:e6:a0:ab:c0:7a:
0e:03:1c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:33:54 2025 by rpki-client