Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
File: v5nSPIJymoBJ51ZXdahkvDqigu8.mft (raw, json)
Hash identifier: b6uhbSnU8bIHQLWY4fSjYV1hwHWdMtcgC0Zupn5nYIE=
Subject key identifier: AA:92:D8:DA:E5:99:18:91:E5:DD:E1:98:0C:E0:E4:54:A5:52:3F:91
Authority key identifier: BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
Certificate issuer: /CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Certificate serial: 0196B634C06B850A013A1D9746CB9ED2478E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
Manifest number: 05C7
Signing time: Fri 09 May 2025 18:00:32 +0000
Manifest this update: Fri 09 May 2025 18:00:32 +0000
Manifest next update: Sat 10 May 2025 18:00:32 +0000
Files and hashes: 1: v5nSPIJymoBJ51ZXdahkvDqigu8.crl (hash: icvi6oz1eV+asr4Dog2aMvF4h4zTS4WexjAodyCQlOs=)
2: ybOueXNsSJri02mQKQibbKcroL4.roa (hash: rsUCG/CXGaoh8At3iU9kgYgz39f7x4KapImvavgysk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:34:c0:6b:85:0a:01:3a:1d:97:46:cb:9e:d2:47:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Validity
Not Before: May 9 18:00:32 2025 GMT
Not After : May 10 18:00:32 2025 GMT
Subject: CN=aa92d8dae5991891e5dde1980ce0e454a5523f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ca:89:de:6a:2b:22:c5:4e:3f:3e:e9:c1:45:
2b:87:44:e0:38:c1:26:4c:54:0c:6d:bf:aa:2e:16:
f9:4b:1d:12:e6:cd:80:8c:69:67:14:65:00:05:36:
e9:b7:e7:ed:6c:95:3b:99:c6:87:99:de:08:a8:a8:
77:3f:a3:07:17:dc:90:2d:30:56:8a:bc:6d:12:9e:
34:bc:22:96:a8:95:6a:bb:f3:4e:3e:4a:6f:3c:46:
76:8f:a2:06:92:ba:0b:a5:2b:6d:8c:8e:aa:c1:6a:
37:75:94:f7:c6:47:ab:79:e8:6e:d7:93:47:45:d1:
3b:07:c3:c8:64:2f:6c:86:48:b4:05:b6:c7:4d:e2:
47:ff:e1:de:f4:ac:fb:a4:ca:a0:e0:36:85:f7:e7:
ea:35:79:41:3c:22:16:49:97:7a:7a:87:a8:3a:ef:
7a:f5:71:61:73:3d:6f:f0:3a:2d:67:55:65:d1:02:
83:f1:7a:6f:58:c9:53:1f:62:de:6a:f3:87:0b:eb:
a0:ce:3b:7f:3f:2c:7a:12:04:72:6d:5b:5c:6f:5f:
97:35:82:4e:aa:1d:4b:05:82:4b:b5:61:8f:01:bd:
98:73:bb:24:04:5d:23:88:0c:4e:46:b0:73:b5:69:
8e:14:fe:09:0e:c6:c1:76:f7:33:b4:43:94:db:4c:
62:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:92:D8:DA:E5:99:18:91:E5:DD:E1:98:0C:E0:E4:54:A5:52:3F:91
X509v3 Authority Key Identifier:
keyid:BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f1:f8:2a:79:92:4c:9c:bd:af:e6:db:2c:21:78:51:1e:06:
cf:16:2d:45:4e:ac:71:11:3d:10:bb:d1:e9:44:a1:18:3d:d3:
6b:bc:a5:b7:16:2c:e4:31:71:19:be:9a:e6:74:3d:70:63:48:
f0:36:2a:7f:dd:a3:bb:e3:b3:3c:c2:4e:2b:9e:4d:f6:4d:b4:
1b:b6:da:76:1b:a7:9e:dc:7a:2e:c3:00:0e:da:2d:87:da:a2:
70:57:9b:04:b3:a1:53:74:60:dc:b8:57:74:54:a6:52:5c:26:
a6:f7:65:6c:94:01:12:b1:49:ce:79:68:bc:0c:b3:d8:84:36:
14:75:4d:94:fb:c1:20:92:d4:f5:b2:e8:62:8f:c3:d7:40:e3:
8c:ef:87:f6:86:1d:56:81:2e:b9:5a:93:50:c0:dc:5d:71:08:
0d:0f:97:ad:d6:60:4b:f2:c3:02:38:70:3a:f9:f1:ee:52:0b:
6a:6c:ef:ca:52:d8:30:6e:f2:72:46:51:d0:e7:81:c4:fa:48:
5b:92:0a:9f:3c:48:5c:00:fb:41:b7:0a:16:b3:9b:f0:f4:01:
18:f2:db:b2:b4:58:19:0d:e6:02:db:81:88:42:90:b9:d4:26:
46:98:0a:fd:c2:33:c0:bb:8a:f8:79:bc:11:28:a0:b5:f1:c0:
2c:93:5b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:53:43 2025 by rpki-client