Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
File: 5LTFOvZfC4OWuVtNB9TsTnvid-U.mft (raw, json)
Hash identifier: mBSFYBTW0yOzv4dk1U7BLHIPJkbjugi4g0geSsqZmIc=
Subject key identifier: 37:E9:56:9E:0C:58:20:09:14:1F:45:14:D7:91:E7:F0:2E:AD:47:D0
Authority key identifier: E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
Certificate issuer: /CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Certificate serial: 0196BF381DAC4DB92DA7F2899C9286A8EBAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 12:00:47 +0000
Manifest this update: Sun 11 May 2025 12:00:47 +0000
Manifest next update: Mon 12 May 2025 12:00:47 +0000
Files and hashes: 1: 5LTFOvZfC4OWuVtNB9TsTnvid-U.crl (hash: xMcpPwky1PC2KA7M/tUdzXjDyf93DL3tLQy8OSgsvaw=)
2: HPP-Y8CcP39de0XZZOWjFIJ96v4.roa (hash: wqE/NVLKIIjuJJuVTQbIHrmfJEIIZJeODzcidgoveO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:38:1d:ac:4d:b9:2d:a7:f2:89:9c:92:86:a8:eb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Validity
Not Before: May 11 12:00:47 2025 GMT
Not After : May 12 12:00:47 2025 GMT
Subject: CN=37e9569e0c582009141f4514d791e7f02ead47d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:65:4a:31:83:e6:51:20:ce:ac:93:aa:66:
df:33:8d:de:d2:07:2b:f2:24:1c:58:b6:45:fe:75:
ac:12:dc:34:1b:de:18:d6:c7:84:23:e6:cc:3d:56:
d5:72:07:eb:86:a2:1d:45:ff:95:2e:bf:42:1f:a8:
5f:c7:18:09:43:3b:c6:f0:ed:98:80:d7:8f:d9:ba:
d6:25:ca:47:f4:42:4d:57:9c:c7:94:3e:65:8f:be:
13:b6:c8:58:61:ef:9c:0c:02:77:e4:7a:66:81:be:
47:8d:14:3e:fb:12:34:24:7b:45:8d:ff:88:52:ad:
06:30:5c:0d:0f:fa:5e:97:8b:9f:db:fb:6e:a2:f0:
f7:62:68:c2:75:04:bf:1d:91:f8:15:9f:9e:89:16:
4d:4f:59:c0:17:7b:dd:72:fc:4b:29:9a:6a:40:f4:
c4:8e:77:99:9c:4b:48:36:02:39:a4:f4:24:82:73:
0e:2b:b8:1c:8d:96:07:d9:57:09:ff:8e:02:5f:34:
b4:58:d8:5c:54:ed:9d:fd:2d:32:54:76:4c:8e:85:
28:4e:4e:1f:90:a1:3b:4b:da:5e:e7:19:bf:c1:8c:
61:69:6f:8d:49:f7:73:48:e2:78:cc:94:c4:dd:9a:
3a:89:b9:2d:63:ae:c6:47:13:5d:42:62:ec:89:2b:
30:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E9:56:9E:0C:58:20:09:14:1F:45:14:D7:91:E7:F0:2E:AD:47:D0
X509v3 Authority Key Identifier:
keyid:E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b9:9b:3a:7b:52:10:ac:c7:38:07:dd:f5:51:c6:c1:a7:83:
2c:d9:31:24:48:7f:e4:ae:36:10:29:61:b7:da:21:0e:f2:2f:
fa:c5:9d:0c:68:06:26:f5:19:94:8d:22:76:48:c1:09:77:42:
90:31:65:e8:58:72:93:c5:05:b4:d5:89:5e:f5:86:8b:47:06:
dd:b8:1a:51:27:2a:f6:5b:7a:e9:6d:f4:07:48:d7:90:e2:e4:
e9:f2:e9:3c:d4:67:26:6c:52:11:4b:04:20:a7:42:65:ad:95:
fd:46:cb:f9:9a:8f:75:84:8e:a4:b0:ba:6b:fb:48:ed:fb:d1:
8c:2a:91:1a:ba:e1:5a:de:c8:1d:11:bf:9a:2b:5c:59:da:a4:
f8:a7:bc:c7:d6:2c:56:16:54:45:11:80:89:fa:77:dd:03:23:
de:44:3b:3a:65:ed:63:ef:cd:79:40:cb:fa:3c:29:05:c9:74:
67:db:5f:67:83:83:f8:f3:03:dc:d8:32:b6:72:44:54:56:78:
6a:ce:1e:b1:07:a1:b1:52:44:26:47:b2:1f:98:33:87:09:4d:
90:f3:f5:50:0a:f8:a7:ed:8f:e1:b6:22:6a:8c:0e:86:6b:35:
19:b6:c8:31:55:ba:0b:e7:d7:7e:18:df:28:22:7c:49:8a:8b:
a4:7e:82:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:16:32 2025 by rpki-client