Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
File: 5F0K3ClN02bfatqIATTb0OaIzPc.mft (raw, json)
Hash identifier: UhegP+D+wjC6tfgVHDGKWsLGDvkRWVRapduvQt8VGt0=
Subject key identifier: B9:2C:3E:DC:AB:38:E5:18:85:CF:EE:00:84:42:FF:D7:0B:69:BA:07
Authority key identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
Certificate issuer: /CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Certificate serial: 0196BC3738C93D8953BF14FAE725B932E3A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 22:00:57 +0000
Manifest this update: Sat 10 May 2025 22:00:57 +0000
Manifest next update: Sun 11 May 2025 22:00:57 +0000
Files and hashes: 1: 5F0K3ClN02bfatqIATTb0OaIzPc.crl (hash: KIXEFYCgPfwvDulZfMqbx4G6TjdG+hZq1fdWNtTQUAI=)
2: 6_MzG3BJa4ElBBdEF9-BTMf874s.roa (hash: JSnJz2i5mq2wdtkVMI+9lJsfr8mdn46eUbiIUghmOwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:38:c9:3d:89:53:bf:14:fa:e7:25:b9:32:e3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Validity
Not Before: May 10 22:00:57 2025 GMT
Not After : May 11 22:00:57 2025 GMT
Subject: CN=b92c3edcab38e51885cfee008442ffd70b69ba07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:a8:06:ad:58:7d:db:54:10:fe:1d:f9:97:
0b:f6:2d:4d:2f:92:0b:e7:f5:48:74:70:20:d3:0e:
d5:b7:e7:53:6a:db:7d:21:77:05:cd:5a:67:66:d2:
88:8f:6f:d7:78:e4:aa:a3:33:78:e9:00:9b:6d:9d:
45:86:97:96:76:61:bc:e0:21:aa:26:ec:42:8c:69:
0b:2a:2a:02:af:3f:40:9e:3e:38:db:88:a5:ff:5c:
2f:69:04:c7:65:55:da:c1:4a:4d:8c:a8:aa:0f:8b:
a4:28:47:df:94:e6:53:df:30:be:7b:70:e2:25:9c:
57:1e:0b:5f:c8:4f:5c:83:9f:40:86:ec:56:e0:07:
e7:d8:e8:df:f5:39:b9:49:af:fd:43:e2:32:1c:f2:
34:40:c1:42:ff:61:2d:87:7d:ce:7e:24:57:55:6c:
87:a1:3a:e9:7b:6b:fc:be:1b:e5:b0:92:b4:82:0b:
b2:c2:d3:2d:54:f4:89:fa:d0:04:84:0c:e1:e3:4b:
70:83:82:97:a7:89:56:5f:13:c6:cb:f0:0b:53:6a:
bb:f6:b2:bf:98:5b:46:1e:2a:de:c7:30:55:bf:4c:
dc:a5:34:5d:96:7d:f9:b7:62:20:d1:32:d0:1a:b5:
ef:39:1f:01:72:8a:27:9d:30:cc:af:b3:35:6f:54:
66:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2C:3E:DC:AB:38:E5:18:85:CF:EE:00:84:42:FF:D7:0B:69:BA:07
X509v3 Authority Key Identifier:
keyid:E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:aa:c1:1e:54:62:59:b4:2c:50:8e:62:c3:1c:9f:9a:c6:ca:
81:fb:71:d4:6c:4c:76:ba:05:50:df:2b:d4:c9:cf:64:d8:1c:
8f:fb:1e:6f:3c:5f:02:32:84:a6:e0:8c:e1:96:11:9a:b2:21:
e3:16:5c:5a:a6:8e:4b:c2:d2:6f:d3:79:fd:56:29:ef:15:ee:
c8:9e:f5:a5:63:4e:6e:df:9a:99:73:aa:e0:df:bb:24:5d:68:
99:a6:3f:69:73:01:8c:b0:78:14:2d:b8:5f:aa:24:01:f5:58:
3e:c1:eb:a1:91:b4:eb:cc:19:32:34:12:50:1d:90:11:cf:c2:
c8:8c:ce:8c:3a:1a:6e:83:85:a4:b0:88:88:51:d0:32:e4:2c:
27:16:7c:3f:57:da:94:68:32:4a:8a:20:05:29:c1:55:ce:35:
ab:bf:94:23:23:58:16:40:a9:b8:2c:8c:d3:d2:3f:f7:f8:d3:
c9:dc:cf:dd:6f:05:15:da:82:91:89:11:cc:c3:71:1d:ea:08:
43:a0:1f:81:bb:77:e8:8b:ae:0d:d7:33:3f:1b:0a:25:34:9f:
a1:97:04:5e:7a:09:ca:2e:2b:3a:c9:e3:de:56:3e:ae:3d:9b:
2e:c2:49:d9:62:ed:7f:42:2e:ea:52:2d:de:f1:81:30:99:c5:
02:fc:98:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:31:59 2025 by rpki-client