Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
File: 5hwHyVFIjwTLOw_TOK-E135Gv1I.mft (raw, json)
Hash identifier: RmEOkEBx9/O4882ha3lHGM7ADYdK7A8p7Y1PtiREy2U=
Subject key identifier: 2C:EE:49:F7:7C:16:F8:CF:4A:1C:18:44:A1:FA:D1:15:1A:9D:A6:89
Authority key identifier: E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52
Certificate issuer: /CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
Certificate serial: 0196C04AB43BFBA24B17B10CD95A45AC6D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
Manifest number: 153B
Signing time: Sun 11 May 2025 17:00:43 +0000
Manifest this update: Sun 11 May 2025 17:00:43 +0000
Manifest next update: Mon 12 May 2025 17:00:43 +0000
Files and hashes: 1: 5hwHyVFIjwTLOw_TOK-E135Gv1I.crl (hash: WsxBfqX6XAn+VNmnA7gmw76mTnTKGcyRwn4vJvuy1AI=)
2: GYQyoqa1Lcx9RJ4IYkOHPaDzsYs.roa (hash: 5OkYxXGX0IRpYv6mAWx2ijlmqd3siYfdidMZt5Qq9jo=)
3: PFBBA4lrKhNwCem9RKvfOnYfCDc.roa (hash: /EjlV3R/5VRkrIm2TPm8gVB2qkL97VXtQAiUN3hx+BU=)
4: i0nThbwdezW0AO7pmekkEJjld0U.roa (hash: A1bHJVolhok5D0oj17VJpul41EQExCRaiyi6t8ZnkFw=)
5: kZSXPr30NxG2Ec5X6u_UtIxYO9I.roa (hash: VIVKmXaG6PiMqZqJVIAC7mrs8dFjgOuKWeFhL3VLTU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:b4:3b:fb:a2:4b:17:b1:0c:d9:5a:45:ac:6d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
Validity
Not Before: May 11 17:00:43 2025 GMT
Not After : May 12 17:00:43 2025 GMT
Subject: CN=2cee49f77c16f8cf4a1c1844a1fad1151a9da689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:e5:8f:90:46:a9:56:24:45:da:11:53:a6:
15:0c:dc:d1:c1:20:d2:70:85:eb:f1:10:26:51:7d:
e7:07:ca:d2:96:a8:d5:1f:05:30:fe:c0:90:6a:12:
61:09:48:04:d5:19:ec:18:5d:57:74:43:9f:1c:c1:
65:65:57:7e:99:f5:df:7c:8a:32:4d:3e:23:b5:c4:
88:3b:85:59:a7:a4:d8:fc:c4:d6:4d:72:b5:34:79:
37:78:80:64:68:b1:e2:89:a8:60:cb:6c:8f:91:a3:
4a:4b:f7:20:a2:63:f6:d8:bb:d7:73:0e:ca:d1:94:
4b:17:ab:27:64:dd:3b:78:f2:ea:de:6e:11:0c:a1:
1c:51:6d:c0:7d:e0:dd:d8:98:3e:39:37:c5:7b:3f:
33:42:cd:5c:ed:86:b4:52:ac:fa:cd:43:c5:37:75:
9a:c1:59:3c:52:45:3e:1a:b7:7a:fc:54:ea:aa:63:
55:cc:6f:c6:21:bf:0f:7e:29:cf:4b:4a:a3:56:fe:
18:a4:53:91:06:56:18:7a:19:93:44:19:69:88:14:
e7:2b:d8:32:0e:78:2b:0c:50:2d:af:ef:71:1f:3f:
9a:28:f2:d7:ac:7e:64:9e:3e:33:66:37:1e:eb:7b:
8a:07:ec:ea:81:5d:35:09:77:4f:1d:ec:6f:91:02:
89:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EE:49:F7:7C:16:F8:CF:4A:1C:18:44:A1:FA:D1:15:1A:9D:A6:89
X509v3 Authority Key Identifier:
keyid:E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:21:30:50:b5:d0:ba:1e:7f:94:46:d1:1e:e9:2f:b3:66:ad:
2b:8a:3a:4b:3a:d2:88:79:35:6f:2c:66:d9:40:28:8d:a6:22:
76:06:6c:28:4a:f6:ef:39:24:52:ae:c8:7b:0f:6c:0b:88:81:
ca:b7:db:f9:51:35:08:7b:95:b1:f8:b1:1e:a0:79:9e:ee:e0:
aa:3a:d3:1f:73:39:95:99:46:33:0c:58:83:89:e7:0c:4d:6a:
63:a6:ab:7c:66:7e:b3:0b:2f:5f:e7:2d:4a:58:6e:19:bf:2b:
82:00:53:b7:6a:5d:37:83:7e:d2:a4:77:f6:2f:07:30:c7:0d:
41:ea:e6:25:0f:e8:fe:b1:72:c1:9d:ad:89:ac:1d:b9:8c:c9:
75:db:15:a1:56:65:51:41:f7:51:14:45:04:ec:b9:49:74:b7:
a5:a4:63:91:a2:f1:72:70:ed:22:c4:03:e0:d4:f3:44:30:f0:
3a:f0:c5:5a:10:f6:12:5c:f5:df:4a:18:e4:11:48:9d:28:dd:
99:9f:1e:aa:fe:40:8a:a9:32:65:6d:21:3e:4e:08:2a:6c:03:
55:a7:12:f0:a1:b7:d4:77:ef:8e:50:98:48:0b:20:6d:46:e2:
bf:e0:38:5e:b3:ba:85:01:b7:a1:cb:23:a7:82:b6:b1:f5:42:
c6:bd:cb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:22:34 2025 by rpki-client