Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier: 0EuUnvsY0cm3vpx0W6hQDWIskX55ex8Vyz0W1uc2YKY=
Subject key identifier: 0B:D1:5A:16:EA:EC:C3:E3:79:34:54:67:A7:58:12:87:DC:D4:12:12
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 0196B822FC81168F2288C69C062BEA318212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 03:00:22 +0000
Manifest this update: Sat 10 May 2025 03:00:22 +0000
Manifest next update: Sun 11 May 2025 03:00:22 +0000
Files and hashes: 1: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: yxTUgInvpH+P8s0x9hy+0hmjmkLPJwTLUwXFGJi9v/s=)
2: FR3a7fbq59iIo0zAlvy5kzi1iZU.roa (hash: Z35c/JbC3hZCBf85VdNEpndC+c0TUxZMQxPjJSIsAQ0=)
3: suPxSfpNrh7z5_Ta2x6TjwnQ2sY.roa (hash: jrCuL3fpLVTl6VSsAmka/tgQrfuz/laa7SHWrZ9+ExE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:22:fc:81:16:8f:22:88:c6:9c:06:2b:ea:31:82:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: May 10 03:00:22 2025 GMT
Not After : May 11 03:00:22 2025 GMT
Subject: CN=0bd15a16eaecc3e379345467a7581287dcd41212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7a:52:c1:80:b8:66:d2:b1:a8:90:2e:8d:e5:
ed:1a:be:5c:0a:36:bb:e6:ed:58:ae:06:44:86:af:
b6:9c:57:4c:88:5d:ce:4d:b0:73:5e:c9:8f:69:31:
fa:63:50:37:37:5b:5a:cd:7a:d9:ba:0f:18:60:af:
42:ee:a7:ab:fb:3d:94:90:d7:29:fe:12:75:ee:40:
dc:59:f3:72:39:f8:72:52:14:47:dd:47:b1:22:3b:
e6:e7:90:42:4b:8e:68:13:ca:7b:19:86:f5:8c:e3:
2f:d5:d6:3d:0d:01:52:95:69:a9:d0:cf:6d:cd:45:
ae:ff:a3:a7:c6:37:b3:ba:44:ee:f5:cb:0b:68:39:
2a:90:e0:13:78:36:c3:af:a4:20:9f:62:af:b9:30:
8e:29:24:29:03:fd:af:27:dc:5d:69:a0:f7:39:77:
4d:9f:d3:e8:0c:26:b2:81:d8:39:85:83:25:e7:11:
26:15:5d:8d:3d:49:26:c0:a9:5f:f0:66:d7:7c:6b:
df:1f:8b:d6:1d:f7:19:92:d6:f6:4d:44:33:03:51:
db:7b:b6:73:bc:b6:b3:90:37:f2:95:68:12:23:f3:
5a:6f:07:85:53:35:c4:13:5d:9d:11:40:5f:8e:95:
96:55:5e:8f:67:67:49:f6:aa:39:c5:5f:48:b1:5f:
e4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D1:5A:16:EA:EC:C3:E3:79:34:54:67:A7:58:12:87:DC:D4:12:12
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:0c:b2:43:88:da:55:f5:f1:10:5c:40:d1:ea:66:62:58:f7:
41:c5:98:e8:92:48:18:71:f0:79:c9:a7:4b:67:df:65:df:26:
08:b8:a7:fd:4f:df:45:b8:67:d5:d5:fe:d6:0e:09:a1:cb:a9:
44:3d:7f:d2:43:66:02:d3:30:e5:ce:a1:ec:7a:03:cf:8a:5e:
4d:f4:2f:90:eb:77:0f:fc:4f:fc:da:c6:f8:e6:bd:c5:26:e6:
66:c8:d5:d0:e9:d2:dc:eb:46:61:d8:1d:2f:c5:b5:42:f6:0d:
f7:e7:a0:98:a2:c1:c5:44:6d:90:ad:8c:4a:87:11:36:0b:08:
80:ea:5d:14:73:e0:24:fc:6b:2c:e9:60:f5:70:c3:3b:0a:d8:
6f:70:d6:a1:fc:da:31:8f:f0:43:1a:91:d6:38:17:a3:81:a4:
c6:08:5b:32:86:04:09:d6:aa:44:13:36:c9:28:04:3a:6b:2b:
1f:fa:0a:fd:f0:9c:ca:2d:92:e8:64:d9:dd:90:18:b4:40:b4:
31:2f:65:0b:9d:6d:01:5f:32:a5:b3:d3:66:16:c3:5c:2a:0b:
7e:02:5a:17:e7:dd:59:ab:56:b5:3d:09:6a:ca:0d:cd:ce:cc:
15:8e:00:a8:94:08:0f:9b:20:c9:7f:1c:ea:fb:b9:37:b1:f3:
6c:65:bb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:50:30 2025 by rpki-client