Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
File: 00_-5-di-aBv4vR-eh5S2eun-v0.mft (raw, json)
Hash identifier: yjzPwUIdIQEAlwwlAy9Hi4Kpdg0MzH8G9U6gCJsxI2U=
Subject key identifier: 48:87:D7:CD:98:4E:82:95:72:F9:EC:27:9F:E0:59:5E:83:F0:5C:26
Authority key identifier: D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD
Certificate issuer: /CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
Certificate serial: 0196A1D2CEB814AB5CCB2AC56FCD1C1A596E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
Manifest number: 0F72
Signing time: Mon 05 May 2025 19:01:09 +0000
Manifest this update: Mon 05 May 2025 19:01:09 +0000
Manifest next update: Tue 06 May 2025 19:01:09 +0000
Files and hashes: 1: 00_-5-di-aBv4vR-eh5S2eun-v0.crl (hash: 8QlAaVO/JIE9qefKYtF9ErgpL9r4g4D7aCGGHUky274=)
2: RTZF1pckQ5UHtLDFfMIz6CKlCQM.roa (hash: OSpIkZE/LwbO5i/Rwo6y7sjYoRsMMhhcextuc6NzOpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:ce:b8:14:ab:5c:cb:2a:c5:6f:cd:1c:1a:59:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
Validity
Not Before: May 5 19:01:09 2025 GMT
Not After : May 6 19:01:09 2025 GMT
Subject: CN=4887d7cd984e829572f9ec279fe0595e83f05c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c3:58:1d:00:51:af:a4:32:fd:ad:4d:32:5c:
84:aa:42:46:24:1c:46:1e:55:67:4b:57:2b:01:60:
27:cb:04:f9:c2:f0:60:c2:cd:02:34:60:db:7d:14:
a4:fe:b8:34:97:44:1b:ad:e3:d1:13:cf:82:c5:c1:
39:33:5e:04:b3:a7:9d:c3:72:56:a2:ef:1d:30:dd:
9c:29:69:dc:2f:ae:ea:a3:46:ff:87:49:61:bb:53:
9a:9c:c6:45:eb:53:29:8e:88:63:db:20:55:e2:5d:
35:a5:8e:fa:0b:65:1d:80:68:18:c1:58:bc:0f:d0:
e9:67:a8:f4:a6:1f:c7:41:6b:8e:ac:49:8c:32:22:
66:03:9b:08:8e:bd:d2:92:cd:32:70:97:03:c7:dc:
96:d4:08:ac:f6:75:33:a0:b0:f4:8c:26:c2:99:af:
33:70:39:bb:3f:e7:04:51:2a:01:29:60:02:67:c4:
69:cd:09:6c:b5:ac:a1:3c:23:e1:0b:e6:74:ae:34:
cb:00:46:13:50:7d:a0:ad:d7:d3:cc:4f:98:d9:59:
c6:24:48:43:08:e1:3e:b7:22:8f:cb:dd:a8:3b:32:
30:70:af:38:4e:81:96:6a:a6:e9:59:05:8d:d7:55:
35:26:c6:d0:cb:15:7f:6b:7e:3d:c9:20:84:f4:d9:
e7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:87:D7:CD:98:4E:82:95:72:F9:EC:27:9F:E0:59:5E:83:F0:5C:26
X509v3 Authority Key Identifier:
keyid:D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:dc:1a:ac:dc:4b:2a:05:de:f9:9a:24:48:52:a2:41:37:2c:
f0:71:a4:1e:5c:9b:bd:8d:c4:cd:d9:de:7e:f1:6b:a1:a2:6d:
d1:1e:31:35:1c:5b:88:99:a5:97:8e:40:74:fa:1d:c5:77:43:
0a:43:5b:31:39:52:75:c6:4d:8f:9e:d3:c4:5e:9e:b4:e2:4a:
d0:c9:09:5a:73:46:33:1c:a8:fb:ae:cc:c0:c5:7d:6d:a6:70:
4d:99:23:07:42:df:8d:bc:6d:da:03:7e:69:c7:56:d6:0e:87:
24:a6:8d:fb:80:25:66:42:a8:91:37:ef:87:a0:2e:3f:d9:74:
a4:1f:0b:db:ab:f2:87:5e:ff:b6:d5:aa:68:ff:61:7f:fc:67:
46:9f:ef:6f:bf:c5:18:9c:5d:60:f4:c9:1f:af:14:a1:ea:7e:
12:82:2d:60:84:7c:70:4a:65:32:b3:f4:36:5e:25:60:f9:f3:
6b:d9:ef:f0:f1:2b:61:5a:a0:c5:1a:a2:c5:2e:94:b5:6a:2e:
58:0d:ae:fd:90:8f:c7:3d:d6:ef:f2:4e:19:ae:d7:30:27:dc:
e6:a1:a2:59:ff:4a:18:91:f2:5b:cc:a5:ba:87:89:4d:48:a4:
12:f9:d8:37:ec:93:10:35:0d:9d:80:2c:98:8b:6a:64:0a:c3:
19:fc:b9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:25:45 2025 by rpki-client