Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
File: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft (raw, json)
Hash identifier: ulX+yvhxaZIDqCUMUHustYwW9DVT48QjsxkAVDMZjGk=
Subject key identifier: 70:9A:42:2E:C4:69:2C:3E:FA:E1:26:D0:54:6F:7C:38:B2:49:F6:46
Authority key identifier: FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
Certificate issuer: /CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Certificate serial: 0196C1CB5374754D14F99DF85305094B33A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
Manifest number: 1534
Signing time: Mon 12 May 2025 00:00:49 +0000
Manifest this update: Mon 12 May 2025 00:00:49 +0000
Manifest next update: Tue 13 May 2025 00:00:49 +0000
Files and hashes: 1: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl (hash: WGVdgzaVLMEvzQWO84dsDyEOhQwyIaRw62gg+6X5CQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:53:74:75:4d:14:f9:9d:f8:53:05:09:4b:33:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Validity
Not Before: May 12 00:00:49 2025 GMT
Not After : May 13 00:00:49 2025 GMT
Subject: CN=709a422ec4692c3efae126d0546f7c38b249f646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9f:aa:74:f9:fd:fe:3e:2a:fa:10:2c:a6:64:
b7:a6:75:33:e5:d7:e6:ee:f4:ec:a0:88:09:35:49:
8d:18:82:b5:8a:ba:5e:0e:97:1c:e7:3e:5b:15:a5:
40:20:a2:3b:2b:f2:b7:c8:4a:29:70:98:b4:c6:03:
49:17:e0:f4:cb:89:5c:2f:8c:94:5c:64:5b:8a:fa:
d9:ed:e1:4d:22:46:3b:6a:33:21:88:93:96:ff:f1:
93:11:59:4c:6a:44:71:bd:99:0f:aa:97:ab:4d:66:
15:6e:b1:0c:28:f8:42:18:9e:c6:5e:1b:2d:29:93:
7b:68:d4:d4:6b:2a:5a:b5:af:2d:45:48:d6:1c:d0:
64:ac:6d:a0:00:c4:35:0a:87:80:72:7a:6c:3e:1a:
27:af:9e:08:3a:7b:e2:12:ae:10:7d:2d:1a:f4:99:
ba:41:ba:aa:25:42:d3:20:a5:e4:b7:d6:c3:d4:1e:
10:94:1a:19:27:ef:3d:64:ef:80:9f:dc:f9:28:00:
63:3c:a2:e9:ca:2a:f5:af:69:af:7a:28:48:59:e4:
13:e5:ab:74:60:af:2e:e9:f7:fd:ad:5c:88:c7:ae:
88:0a:e2:58:28:4d:d3:05:47:70:dd:ff:34:34:83:
16:27:80:54:b7:f1:a9:60:84:01:f9:45:9c:ff:a1:
98:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9A:42:2E:C4:69:2C:3E:FA:E1:26:D0:54:6F:7C:38:B2:49:F6:46
X509v3 Authority Key Identifier:
keyid:FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0e:8f:bd:2d:cc:8c:e8:72:9a:cf:f2:35:a0:13:3d:72:d0:
6a:2d:ac:7a:e7:ae:8a:3d:b1:93:a1:0d:3b:bd:25:2d:cb:1b:
5e:28:7f:39:67:ce:3b:51:d4:d8:19:ea:7c:85:19:b2:e8:b6:
7e:ce:b7:85:35:52:96:4a:4a:44:9c:a1:67:b2:4c:e1:36:70:
77:65:94:5c:23:98:a2:03:27:4e:d2:90:85:d9:7b:ce:cc:1c:
a7:9f:9f:f5:f8:4c:09:2a:37:00:18:d9:1c:74:3c:02:ad:e4:
39:32:14:cf:fa:ae:5b:2a:3e:86:35:1b:8e:02:b1:64:e2:91:
01:df:79:b8:a4:8f:96:e6:8a:31:76:47:5e:ee:10:cb:3a:09:
e8:3c:14:81:8a:c9:89:7a:80:f4:4e:8a:ff:c8:dc:d9:71:18:
5d:69:df:50:86:bd:9e:4f:47:0f:05:6a:f4:97:e2:3e:33:65:
06:0c:bc:72:82:36:35:03:bb:5d:91:d3:c5:4b:50:72:c6:97:
78:b8:ce:a7:09:56:87:09:e7:82:84:82:de:c6:11:80:12:db:
d5:d4:42:ff:c2:a0:76:d6:7f:43:48:5b:72:bb:a1:66:82:a0:
33:a8:a4:68:19:a8:d7:c3:e0:b1:69:5e:61:f6:05:b9:77:49:
fa:45:65:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:42:23 2025 by rpki-client