Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
File: 5cePoZk9RRL-JDa4ztqL_JKdZX0.mft (raw, json)
Hash identifier: RO9w3/kdzTt65H8xLNfB/XQa0cTfIaADspDNKR+Ls5I=
Subject key identifier: 80:FB:F3:45:A8:8E:1D:E8:97:0B:44:13:0B:EE:71:04:AB:D6:75:BA
Authority key identifier: E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
Certificate issuer: /CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Certificate serial: 01969ED13D17ACE8178FC247144A011B4367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
Manifest number: 0864
Signing time: Mon 05 May 2025 05:00:34 +0000
Manifest this update: Mon 05 May 2025 05:00:34 +0000
Manifest next update: Tue 06 May 2025 05:00:34 +0000
Files and hashes: 1: 5cePoZk9RRL-JDa4ztqL_JKdZX0.crl (hash: bATB7ey652r911VrX3NH9EZiIxvqcmOBii5uxvaf9vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:3d:17:ac:e8:17:8f:c2:47:14:4a:01:1b:43:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Validity
Not Before: May 5 05:00:34 2025 GMT
Not After : May 6 05:00:34 2025 GMT
Subject: CN=80fbf345a88e1de8970b44130bee7104abd675ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:63:69:1c:6b:a8:cb:bf:49:4c:c7:92:81:
9d:be:3c:0c:85:63:29:76:30:49:bd:b1:15:b1:8b:
78:c2:07:9e:e0:d2:5a:e4:dd:00:69:02:46:84:82:
af:42:7d:67:e5:d5:53:28:5a:0d:0d:cc:db:13:fb:
c5:3d:58:cb:d8:a7:dc:89:d9:88:d2:c2:6a:e0:99:
54:91:a4:b7:37:26:b3:89:68:f3:ca:a0:4f:4c:24:
ac:24:5c:a6:d4:fd:87:28:29:ef:c9:19:12:77:52:
89:95:dd:0d:93:4d:2c:e5:9a:36:4e:e3:95:0c:02:
2c:59:38:3d:72:03:93:34:cc:a8:f3:bb:8d:80:0b:
eb:7e:58:5a:2f:36:17:d1:6a:2e:57:3e:f5:c8:32:
3f:1e:6b:a4:79:31:58:8b:b9:cb:9d:8d:37:42:df:
75:7f:5f:b9:0f:92:ec:12:fd:3c:03:6b:a3:fe:50:
e3:8a:0c:2d:26:a3:1d:17:13:85:f9:6e:f8:60:7c:
ea:2d:6c:af:aa:f4:d4:bd:38:23:fa:1a:b7:e3:24:
b7:46:ba:57:ca:14:0a:a1:35:60:cf:dd:c0:d7:e4:
69:87:43:0e:e8:56:0a:59:97:8d:de:7d:09:e1:7d:
6b:a4:80:de:24:85:2f:04:c0:67:94:72:a3:28:52:
c9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FB:F3:45:A8:8E:1D:E8:97:0B:44:13:0B:EE:71:04:AB:D6:75:BA
X509v3 Authority Key Identifier:
keyid:E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ad:e8:eb:b4:36:ce:b0:8e:98:b2:05:5b:eb:c7:a3:b7:ed:
88:b3:e0:07:03:78:71:71:2b:a9:03:e5:68:fa:28:df:f0:7d:
3c:23:92:6e:73:52:fa:78:72:e2:6d:d6:f6:7c:4b:fc:e5:53:
5c:9d:76:38:06:57:17:e6:09:c9:f0:36:0c:b8:ee:1f:24:43:
a1:f2:12:fc:79:b7:14:5f:96:1e:9f:f1:85:51:ce:9e:87:cf:
8a:d5:14:ce:72:f9:74:f6:65:a2:9a:1e:e1:08:c3:69:2b:1b:
91:df:e3:4b:18:d6:36:17:ec:4f:82:9f:f0:e3:a0:60:8f:31:
7d:8e:67:55:a9:eb:67:11:14:e6:e4:c7:c1:e2:24:e4:8c:95:
52:a7:d5:a9:6c:e5:7a:9e:84:3a:5a:c2:81:ef:59:cf:0a:57:
c1:57:f3:16:95:10:4b:60:69:f3:bc:d7:ff:dc:2f:55:2c:8a:
a0:ee:71:1b:e4:25:9b:75:f4:a7:b2:ee:a0:55:f6:95:d5:1d:
40:46:d5:2b:88:2e:76:84:33:f4:69:ab:8f:f3:de:e9:53:8a:
36:b5:84:c5:93:7e:60:7f:10:be:3a:6e:43:32:77:86:19:6a:
16:8b:35:c7:5e:1e:fb:67:bb:dc:a6:ee:72:49:fb:e7:5f:88:
44:74:94:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:46:53 2025 by rpki-client