
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
File: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft (raw, json)
Hash identifier: GyOYus+nPkXWMW0H8faq4Y65yaRSWbizc3nMGUfCsyU=
Subject key identifier: 33:FF:AC:C0:A5:AC:A6:1D:A2:5E:B2:ED:BF:B3:C5:A7:53:96:15:94
Authority key identifier: E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
Certificate issuer: /CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Certificate serial: 0196A46645D71613C115B4C21AD405A33994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
Manifest number: 0759
Signing time: Tue 06 May 2025 07:01:28 +0000
Manifest this update: Tue 06 May 2025 07:01:28 +0000
Manifest next update: Wed 07 May 2025 07:01:28 +0000
Files and hashes: 1: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl (hash: /mQAGPteBrpeBJmIml3l69j/7vh8C3i9EGwpSip0Zlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:66:45:d7:16:13:c1:15:b4:c2:1a:d4:05:a3:39:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Validity
Not Before: May 6 07:01:28 2025 GMT
Not After : May 7 07:01:28 2025 GMT
Subject: CN=33ffacc0a5aca61da25eb2edbfb3c5a753961594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:48:48:67:76:fd:26:b0:be:1f:b0:38:28:21:
ff:a2:dd:cf:07:9d:85:d4:4b:32:62:7a:0a:e5:c8:
b8:fd:77:47:fa:eb:b4:59:8f:37:3d:63:b6:9d:7c:
86:4f:26:99:6f:f0:5a:ed:3f:9c:14:16:0c:51:b0:
8f:bb:7b:be:7b:af:55:1f:9d:7d:20:21:a8:f5:09:
ca:55:cb:24:11:aa:f1:78:1b:9f:d5:22:92:de:34:
6c:2e:a8:4f:89:5e:e0:69:21:cc:e6:af:c3:68:e1:
26:42:e3:f0:3a:b7:ce:7e:56:ac:32:0d:a5:a2:18:
cc:ee:c5:e5:f4:ee:10:c2:80:8b:a5:28:c2:c1:d9:
b0:c7:37:25:4d:2c:6c:f9:b3:13:ce:40:2e:0e:07:
ff:27:df:2e:05:65:a2:05:c1:12:e4:d6:bd:66:16:
26:da:fb:79:62:dc:d5:36:4e:a2:c6:f8:ae:2d:d6:
ae:15:7a:7d:c0:fd:e8:f9:ef:57:56:be:9a:69:2a:
cd:5a:ba:f2:a2:93:07:4c:29:45:96:07:e6:41:a4:
b0:5f:a0:92:cc:9d:41:e8:dd:b9:1c:ea:33:95:27:
cd:c2:02:22:07:33:89:32:a5:72:1e:9b:05:24:e9:
05:ab:99:24:60:a4:63:15:39:86:0d:e3:03:ec:36:
85:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FF:AC:C0:A5:AC:A6:1D:A2:5E:B2:ED:BF:B3:C5:A7:53:96:15:94
X509v3 Authority Key Identifier:
keyid:E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:bb:48:2a:0a:d2:1f:1f:59:1e:84:d7:ba:18:bd:ce:ce:ef:
79:15:23:86:6b:48:bd:c0:24:b1:ab:e1:41:68:a0:35:db:14:
43:a2:9c:1e:e8:f2:0f:6f:36:a1:6d:77:bb:2a:55:e3:86:8e:
b9:91:c3:65:28:3f:fe:ce:e8:d0:71:5d:80:8e:58:5c:fe:f2:
2a:63:bb:d8:a7:42:64:10:d3:94:f6:99:cc:d6:41:fb:5f:38:
1a:30:72:3c:38:19:c4:69:ba:7d:f2:ce:63:0e:cd:a9:3a:a4:
52:fc:cb:c4:c0:a8:e8:4c:d4:9d:73:08:66:c0:2f:2f:cd:82:
16:c6:24:05:10:c3:68:49:1c:13:23:58:49:2a:38:51:1d:fb:
64:ef:e5:37:6a:2d:82:28:23:48:39:d6:e6:36:3d:c1:64:e1:
46:2a:56:b7:93:21:a9:39:b1:2b:dd:36:1a:af:ba:e7:ed:5b:
f7:8e:9b:a8:96:34:e5:9e:cf:52:2f:b7:55:1a:ca:ab:47:b9:
ca:b7:a7:ed:c0:02:eb:17:07:98:a3:aa:9f:14:9a:af:3e:01:
98:2c:e1:4d:31:82:45:3c:32:59:c8:d2:34:50:59:fc:cd:74:
cf:01:96:e9:94:07:21:a2:e9:5c:7f:61:1a:92:29:c8:cf:17:
c9:77:69:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:17:18 2025 by rpki-client