Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
File: 5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json)
Hash identifier: wSmCtu75xGhiePkuZITq5DqifqvRWNoOCpT/7VezS7U=
Subject key identifier: F6:08:95:E6:2F:B9:7F:ED:CF:3B:19:56:DA:9D:94:05:B4:D6:37:35
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Certificate issuer: /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial: 0196C5DED8D91E1B60152AF18F6B03CE2D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
Manifest number: 111E
Signing time: Mon 12 May 2025 19:00:38 +0000
Manifest this update: Mon 12 May 2025 19:00:38 +0000
Manifest next update: Tue 13 May 2025 19:00:38 +0000
Files and hashes: 1: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: nr1dZg+l2X4yrULm7CIjP1CXx+Xwf0l2/L3f3m8OUqc=)
2: Hhlf2TMcsBbO8FDcjvrbEjaLNJk.roa (hash: ZLATPH9bmMVI2zAzUVqtDm2hTynFHZLFVRo0ph7khAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:de:d8:d9:1e:1b:60:15:2a:f1:8f:6b:03:ce:2d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Validity
Not Before: May 12 19:00:38 2025 GMT
Not After : May 13 19:00:38 2025 GMT
Subject: CN=f60895e62fb97fedcf3b1956da9d9405b4d63735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:02:8e:e4:c5:dc:39:f8:16:5c:de:24:6b:
6f:18:dc:1c:29:36:74:a1:00:46:b9:81:25:f7:03:
e6:a9:bd:dc:f2:20:47:22:42:91:0b:0d:d0:34:aa:
03:7c:7b:dd:5d:58:9c:70:0c:4a:78:56:6d:87:43:
6a:09:27:9e:3e:c1:6e:93:f5:3c:49:6b:bc:02:48:
c2:23:c1:0d:37:ff:fa:af:01:85:1e:00:fa:11:78:
4e:ad:49:62:2c:d4:7b:7f:33:97:a5:12:8b:d6:92:
c8:a1:fe:b3:53:1c:c5:80:ce:e1:08:57:94:95:a0:
a8:84:34:df:39:6c:f2:41:18:05:ab:a8:c2:8f:47:
e0:95:d0:8b:da:e7:b6:ab:5f:88:fe:b5:9d:66:b5:
d3:c4:45:0e:4c:3a:e4:1c:b5:ee:f8:d6:08:12:b7:
d6:d3:d3:71:d2:bc:4e:40:c3:af:20:26:1b:b1:c3:
71:85:19:1f:d4:e2:21:6d:d1:3d:c7:cd:8c:04:49:
c4:f4:76:19:c1:4a:4c:9f:fc:d3:2f:75:5e:92:2b:
56:ef:3c:9e:5b:bf:7e:7e:33:58:57:a7:8d:eb:42:
45:3a:69:37:df:ac:ad:8f:f1:23:89:95:02:61:43:
7d:d7:65:aa:8e:15:5d:50:c0:0b:de:fe:34:81:0f:
68:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:08:95:E6:2F:B9:7F:ED:CF:3B:19:56:DA:9D:94:05:B4:D6:37:35
X509v3 Authority Key Identifier:
keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c2:6d:09:cf:25:40:5c:75:cf:dd:01:08:4a:64:56:3d:bf:
3f:a6:6c:b4:c2:df:c0:86:bb:85:2f:d3:28:fd:24:f6:6a:28:
c1:c2:a0:a2:45:a5:1b:f2:9e:88:f9:b5:b2:03:df:e5:e8:d8:
93:4e:a7:ab:bf:40:b9:2e:ab:26:c1:98:ba:18:a7:9c:ec:8b:
0b:47:f9:e3:e8:8e:17:a7:1c:9a:80:1d:a2:01:3c:e4:77:b0:
b0:0b:90:24:32:0f:b8:b4:06:40:f8:3f:b4:6f:21:1e:1a:2c:
9c:cb:8d:56:1a:a7:56:ca:07:83:6b:f8:23:99:33:eb:39:88:
e7:72:86:aa:d6:27:67:73:18:ee:75:5f:16:90:95:c9:6b:7c:
b6:93:fe:9e:fb:c8:c9:ea:ae:cf:52:7f:86:b3:2b:9a:bd:00:
2b:1d:87:1d:58:4d:dc:2b:f3:cc:cc:56:90:93:37:89:25:ef:
f9:2e:44:27:50:82:ca:1f:a5:fe:ef:03:18:7f:29:98:03:86:
ae:d8:3b:3b:77:71:eb:60:65:39:58:d5:e5:2d:a3:01:c5:3f:
45:fd:86:e4:b7:02:17:70:dc:42:49:99:55:63:9f:a3:b0:93:
61:ac:74:ce:0c:5a:e9:ad:4a:53:00:99:ce:28:66:70:3c:6f:
db:43:2a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:17:28 2025 by rpki-client