Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
File: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft (raw, json)
Hash identifier: UtnPDZj1PwHb8xsUw/iTRJrPhUl1EKOaFER/safEgZ4=
Subject key identifier: F1:97:58:4E:CA:ED:4E:30:49:DA:2F:13:B5:8D:18:37:8A:45:15:32
Authority key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
Certificate issuer: /CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Certificate serial: 0196A5785310F1D2DC8C4DFC635C52045581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
Manifest number: 0F98
Signing time: Tue 06 May 2025 12:00:48 +0000
Manifest this update: Tue 06 May 2025 12:00:48 +0000
Manifest next update: Wed 07 May 2025 12:00:48 +0000
Files and hashes: 1: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl (hash: xiYjSajJoKCHdTnBSNKv6LsqThJmOpEtOKQVe/Q62O0=)
2: H6bhT27iuFLhHVqQgSnkWJ-ZJeU.roa (hash: i2LnQkjhZAFSNChfBlCEm3RTe0uFLiWtEs5W37IjKHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:78:53:10:f1:d2:dc:8c:4d:fc:63:5c:52:04:55:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Validity
Not Before: May 6 12:00:48 2025 GMT
Not After : May 7 12:00:48 2025 GMT
Subject: CN=f197584ecaed4e3049da2f13b58d18378a451532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:92:b9:10:63:5b:ff:5c:60:4e:ee:3d:8d:
c2:6a:63:5f:5b:0c:44:a8:4e:24:1a:37:99:56:f9:
ba:d7:e4:44:ae:b2:58:9c:b4:44:f5:f0:6f:87:00:
60:49:a9:eb:9f:f9:b2:ac:ba:dd:70:2c:12:99:95:
14:55:58:3a:56:83:f1:0c:10:86:1d:d2:4d:ad:22:
14:8c:e0:ae:82:53:ed:6f:45:62:c9:f8:10:92:0c:
84:ea:39:1d:87:ee:43:1f:6f:30:27:87:5c:d1:17:
2c:16:36:a8:ac:1d:79:ef:c3:74:0f:6a:e6:a8:c5:
9d:f4:4a:40:c6:1b:93:5b:46:ed:20:61:41:ef:49:
f8:34:19:5c:41:ec:5f:de:ff:d8:43:e1:0a:e6:09:
2d:6b:a7:52:3f:c4:6f:f7:56:8d:d2:ac:35:76:bc:
86:8f:36:ec:3b:eb:d4:4f:cb:c7:19:7b:06:da:6f:
ad:a0:cf:c0:93:16:c8:5d:ba:0b:36:50:a6:45:09:
44:ab:86:8f:ea:3f:a7:d5:d7:48:ed:07:f2:f5:f9:
3b:49:12:ef:e3:74:0f:ed:e4:15:43:05:29:22:d7:
6f:38:a2:6c:66:2b:ad:61:26:13:45:c5:3f:fe:07:
de:51:14:40:f7:18:e9:90:46:e0:28:ea:79:2c:5b:
eb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:97:58:4E:CA:ED:4E:30:49:DA:2F:13:B5:8D:18:37:8A:45:15:32
X509v3 Authority Key Identifier:
keyid:E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:28:9f:a6:ac:6a:c1:0c:48:c0:09:2f:93:62:22:9e:0b:54:
0d:0a:e1:83:0b:6a:69:1e:3f:5c:84:fe:f8:fe:c1:c3:35:27:
4e:ea:df:fa:52:72:06:f3:9f:89:0d:3f:a4:5d:cd:e5:80:8d:
d5:5a:4e:24:13:36:5c:b4:6a:79:ac:00:e2:12:d1:0a:e2:65:
0e:85:92:0e:fb:95:54:21:f6:ac:87:88:81:2c:12:bf:0a:a6:
8c:13:5b:ae:d8:ec:88:58:a4:a7:4c:d0:06:26:2b:be:a4:95:
2a:bb:04:af:1f:35:ad:09:a8:69:8d:ea:a3:dc:90:1a:38:de:
2e:04:e7:cb:5c:53:9f:0e:34:3f:af:ba:3b:b4:f1:2e:2b:96:
6f:3d:a2:a6:cf:49:c0:1a:2a:e0:90:49:bd:99:7e:57:b6:77:
f5:39:a6:d2:bf:cc:1f:e1:c4:50:f6:1b:22:83:76:de:30:d6:
03:05:ae:9a:42:03:65:81:de:09:01:4b:c4:c5:38:17:56:91:
8e:fd:b9:ec:fa:b6:eb:94:07:6d:df:ac:f5:ee:50:de:60:29:
06:be:d8:e4:51:df:4e:ad:b1:04:53:45:5c:4d:2d:4c:27:6f:
43:ec:6b:88:c1:78:9c:89:de:0f:75:67:c2:1c:c8:33:e0:c3:
a2:03:25:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:40:42 2025 by rpki-client