Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft
File: 5H48mpUfGxWBE6t8PfGd_DNtnu8.mft (raw, json)
Hash identifier: oNBweCPv3zYsPkti4lfLZNKAV+LVzvHzZR2p3UVvHuI=
Subject key identifier: C8:E9:91:F8:2E:64:FF:8E:0F:9E:D1:F6:50:1E:46:17:2D:1D:53:FA
Authority key identifier: E4:7E:3C:9A:95:1F:1B:15:81:13:AB:7C:3D:F1:9D:FC:33:6D:9E:EF
Certificate issuer: /CN=e47e3c9a951f1b158113ab7c3df19dfc336d9eef
Certificate serial: 0196C1CB34A90744F915920983EFADF09C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft
Manifest number: 35
Signing time: Mon 12 May 2025 00:00:42 +0000
Manifest this update: Mon 12 May 2025 00:00:42 +0000
Manifest next update: Tue 13 May 2025 00:00:42 +0000
Files and hashes: 1: 5H48mpUfGxWBE6t8PfGd_DNtnu8.crl (hash: O5ePVkhY41cGFcd2bMSQmervCQjC+JGh2j5zckxIpsk=)
2: Q9CRQZy3s0gtS_tA2FymWdsC4t4.roa (hash: 9hBwRUtzjTqHG1Gie71trio1LQkRxaOtaflWu8/l7K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:34:a9:07:44:f9:15:92:09:83:ef:ad:f0:9c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47e3c9a951f1b158113ab7c3df19dfc336d9eef
Validity
Not Before: May 12 00:00:42 2025 GMT
Not After : May 13 00:00:42 2025 GMT
Subject: CN=c8e991f82e64ff8e0f9ed1f6501e46172d1d53fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9c:f9:9a:ee:46:09:37:78:c6:a0:7f:52:d3:
7d:55:c5:67:12:36:76:38:57:ed:67:2a:5e:d8:2c:
2b:a9:76:d8:cf:c4:78:84:a1:fb:8f:23:54:46:8c:
44:32:73:17:b9:15:1c:03:1d:d6:3d:cb:8c:68:3b:
0f:6a:58:83:d5:ba:96:ad:65:ac:3a:62:6a:35:1c:
5d:3a:49:5f:f6:67:ff:ed:59:1c:50:2c:7f:5c:b0:
a4:52:a3:d1:2e:c7:91:57:20:27:3a:2d:11:b8:34:
2f:52:14:44:7d:b0:f2:04:ed:76:8e:5d:7e:8d:df:
7a:da:cb:9f:c6:24:9f:26:9c:53:50:35:1f:bb:f8:
81:cc:3f:ef:b7:4e:df:e0:9d:05:47:ed:dc:12:65:
e3:c9:27:6b:70:27:1e:56:e4:17:c8:05:fe:3d:b2:
f3:02:d2:4c:ea:96:c0:5a:c9:47:2d:4c:6b:1e:06:
ab:47:fe:56:f3:76:36:6a:06:bc:02:cf:7f:4a:af:
46:cf:80:39:c7:e5:53:59:d5:24:ba:1b:d1:cc:4f:
cb:8c:cd:f1:13:4a:f8:c9:0c:2a:4c:bd:a9:5d:bd:
f5:d2:33:d9:5b:8a:6e:86:c4:52:89:c2:f6:42:e3:
33:dd:04:81:fe:26:3a:8b:52:49:6f:87:36:bb:6b:
23:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E9:91:F8:2E:64:FF:8E:0F:9E:D1:F6:50:1E:46:17:2D:1D:53:FA
X509v3 Authority Key Identifier:
keyid:E4:7E:3C:9A:95:1F:1B:15:81:13:AB:7C:3D:F1:9D:FC:33:6D:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:0a:98:d7:26:8f:a0:c4:f8:00:70:e7:60:c1:a4:19:af:da:
fd:54:4a:ee:b3:b3:cb:11:cb:c5:7c:9f:98:87:f0:92:c9:a9:
50:90:e9:ea:98:d7:36:ee:94:71:35:8c:f3:7d:f5:7f:c7:1c:
90:0b:c0:66:71:63:05:0b:a7:d0:1c:9b:71:ad:27:28:54:3c:
a6:f1:84:d8:83:7b:a1:33:c0:1b:7b:eb:85:f0:4a:dc:40:fc:
7c:ca:ca:71:29:d2:e6:cf:8d:59:a2:1a:ee:eb:0b:55:76:bf:
a8:55:f2:3e:2a:77:e3:cf:d0:7b:50:8d:1e:06:7c:3a:58:f9:
bb:c9:ce:a9:9e:48:da:a4:a5:b8:81:09:8c:67:09:96:90:4c:
f6:42:15:93:40:26:03:4d:7f:2a:49:b8:34:5f:0e:7a:01:ee:
78:5b:8c:04:13:fc:4b:c4:f2:77:98:33:1f:c5:ac:da:fc:b7:
ea:ef:53:ec:8d:b7:05:bb:31:f9:24:6b:09:dd:ce:b8:37:aa:
4b:26:63:7e:f2:ae:b2:32:ea:72:67:4a:f8:c7:2c:e0:14:46:
5a:3f:6c:8c:df:f3:19:d1:1b:e8:fb:d2:7d:3f:6f:04:48:6e:
e0:85:96:d6:95:ee:66:41:c8:3a:82:8d:e9:32:30:53:94:3b:
bb:dc:27:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:42:21 2025 by rpki-client