Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
File: p5ROOKJ1k6RvXEoqli9YO49r5GA.mft (raw, json)
Hash identifier: JmH4LZRX7VZOsYZURxHtBTmreMMUXrxHZou0kxt7TRU=
Subject key identifier: C2:61:90:7A:F6:B2:83:9E:5B:C4:46:D4:64:D8:3B:64:86:7C:49:AB
Authority key identifier: A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60
Certificate issuer: /CN=a7944e38a27593a46f5c4a2a962f583b8f6be460
Certificate serial: 0196AE0E4FF7B275381F8DD6472D1E036174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
Manifest number: 1119
Signing time: Thu 08 May 2025 04:01:35 +0000
Manifest this update: Thu 08 May 2025 04:01:35 +0000
Manifest next update: Fri 09 May 2025 04:01:35 +0000
Files and hashes: 1: p5ROOKJ1k6RvXEoqli9YO49r5GA.crl (hash: NHuUiaZP0UylJaQKIvb8gasYNAjlYcm6za3RnQk68p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0e:4f:f7:b2:75:38:1f:8d:d6:47:2d:1e:03:61:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7944e38a27593a46f5c4a2a962f583b8f6be460
Validity
Not Before: May 8 04:01:35 2025 GMT
Not After : May 9 04:01:35 2025 GMT
Subject: CN=c261907af6b2839e5bc446d464d83b64867c49ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1f:1b:eb:8f:3b:2d:80:a6:4d:69:43:61:69:
25:57:d1:02:50:98:a2:29:87:b5:08:63:a2:0f:e0:
fe:22:b5:6c:f0:93:68:a7:40:19:c4:a9:90:1e:ea:
62:a4:f3:8f:bf:a2:8e:f2:12:a3:e8:f9:c0:11:f4:
09:79:1a:47:81:6c:94:97:a9:a8:9a:35:5b:6d:b5:
44:fc:1f:21:a6:e5:bf:3e:7d:fd:28:8b:16:0e:02:
4b:83:18:02:a0:b8:04:b2:1c:ff:76:e5:57:cf:f5:
4d:ea:31:f0:8f:b2:f3:a9:5a:fa:42:3d:e6:34:ca:
7c:80:c8:61:1f:91:96:74:e1:f0:ef:2e:c1:09:00:
82:7c:5e:f7:db:78:57:02:72:fb:ff:7d:dc:4d:b4:
52:33:4b:22:7b:79:7e:02:9c:0c:db:88:ae:1f:b2:
05:ec:63:39:f6:a5:f4:ba:60:10:c1:bb:83:47:01:
ab:61:21:1d:12:63:c2:89:fb:f6:83:4e:61:00:9c:
c8:6a:2e:a0:cd:85:8e:8e:2e:ae:bf:a6:1e:8a:65:
d5:82:4a:2f:6b:46:25:46:b1:bb:65:aa:ab:6c:47:
6b:2b:be:03:a2:b8:43:5c:b6:3a:ff:26:21:20:71:
51:82:00:a5:f3:8e:48:db:9e:49:86:8b:e3:cb:b2:
5c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:61:90:7A:F6:B2:83:9E:5B:C4:46:D4:64:D8:3B:64:86:7C:49:AB
X509v3 Authority Key Identifier:
keyid:A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:20:4b:b4:3e:36:12:e3:25:fc:7d:45:f6:f5:0a:b4:4b:38:
90:a0:33:a3:ca:a3:c3:df:b6:c9:56:c6:a8:34:06:a3:76:ef:
74:c3:82:47:24:1e:0d:43:91:ce:92:49:f1:b4:d5:51:35:58:
6f:c1:12:82:4a:9e:aa:e3:60:58:f7:e8:52:3b:9d:79:97:1b:
42:93:af:19:f7:c8:32:17:bf:88:f3:5f:b8:d0:d1:fc:ee:89:
c5:76:48:19:75:f9:7f:24:95:ef:60:6d:7a:3d:af:5a:87:f0:
9e:1e:1f:06:60:fe:ac:ce:8e:e5:d4:26:da:3f:19:8e:ed:e9:
fa:ca:09:04:38:d1:1b:0c:d3:de:f8:49:d5:e9:fc:ae:3b:72:
97:8f:aa:c7:5f:86:79:cf:5a:a9:20:5a:37:b5:24:f7:fd:b9:
bf:cc:a5:de:88:b8:6e:ef:5a:bf:9a:15:c5:f4:85:54:3f:15:
73:c7:ad:9d:a2:6e:ee:64:08:8d:4b:53:e8:2d:2f:46:46:61:
08:37:ba:92:69:19:11:52:10:a6:ff:c8:a9:4f:7e:f4:4f:02:
b2:77:e5:1e:e4:c3:32:22:1d:70:57:fb:77:f2:57:43:3e:60:
ed:4e:32:99:8e:74:05:6c:71:9b:c7:fc:7e:75:9a:35:39:43:
d2:19:62:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:16:45 2025 by rpki-client