Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
File: 5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json)
Hash identifier: phZ3td2Ogp5nBHuE2USnA0vd3+txnvy/2uUb7ecmM5o=
Subject key identifier: C3:CC:95:23:7A:7A:B1:3C:E0:7B:FE:DA:C0:50:98:3C:C8:27:4D:23
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial: 0196B5220E4BE96592E1F35C249984EACEAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
Manifest number: 11DC
Signing time: Fri 09 May 2025 13:00:29 +0000
Manifest this update: Fri 09 May 2025 13:00:29 +0000
Manifest next update: Sat 10 May 2025 13:00:29 +0000
Files and hashes: 1: 1-KxbHOd8IAxtF53PSxnQK1T4mVs.roa (hash: kPs2MrTsmIOrVH1y0/AHb3IDoxZ35cj2beaiWFS9sJI=)
2: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: btI5kGZlTIeVxuouqkFTIPKp21SjDbXyNUlBMO/V2TE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:22:0e:4b:e9:65:92:e1:f3:5c:24:99:84:ea:ce:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Validity
Not Before: May 9 13:00:29 2025 GMT
Not After : May 10 13:00:29 2025 GMT
Subject: CN=c3cc95237a7ab13ce07bfedac050983cc8274d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:96:70:ac:17:76:aa:02:a7:0c:79:79:ca:3e:
2b:9b:02:e6:e1:ad:66:0a:44:f2:6d:4f:9a:19:ea:
0d:08:57:ad:0c:59:72:3f:e3:e0:94:66:49:75:5a:
c2:b7:ad:5c:bd:ee:b9:1c:ac:fd:68:24:f6:26:49:
8f:c0:46:81:15:f8:4f:5b:f3:93:15:9f:44:58:4b:
c0:d0:8c:fe:c1:72:3f:28:ee:81:29:48:8f:60:9a:
1b:0b:bb:f8:79:36:ee:d0:07:96:d1:55:29:7f:e5:
7b:04:41:06:8e:0a:95:b3:9c:76:e6:db:25:ce:68:
f1:a0:4d:70:4f:1b:00:47:96:49:2e:be:15:3b:1c:
15:2d:89:4e:cc:7a:13:1b:e8:f9:7b:98:1c:56:3b:
ed:5b:60:e1:f5:bf:8a:f1:e2:f0:32:ae:d7:29:7b:
54:16:75:46:64:50:6d:55:8b:53:00:e8:58:4b:4f:
95:c5:f4:28:18:9e:a3:a0:47:e0:fa:3d:25:41:a7:
03:76:60:5f:64:6f:52:5f:23:2f:2d:cf:17:07:6e:
ea:98:d0:82:12:d7:c2:25:68:ef:52:8a:1f:d5:47:
00:7d:14:f7:85:78:72:a6:74:1d:c3:a7:72:2d:6c:
1c:5c:ec:7a:fa:eb:70:16:6f:65:79:7c:d8:4c:7c:
2b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CC:95:23:7A:7A:B1:3C:E0:7B:FE:DA:C0:50:98:3C:C8:27:4D:23
X509v3 Authority Key Identifier:
keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:37:c7:26:58:ff:4d:8d:a0:24:b6:96:95:70:4d:24:61:6c:
a1:5c:46:9b:a7:fd:0b:b5:19:1b:ff:39:d9:71:88:59:f7:3f:
65:ec:db:b1:27:b5:3f:6d:11:63:e9:7b:40:23:d6:6c:e4:7c:
ac:f2:b8:60:a4:2c:6e:ff:2e:99:6a:31:ed:38:54:f5:f4:15:
fb:b3:52:8c:7c:b0:b1:40:1d:64:b8:cc:f2:8f:10:58:8d:ef:
1e:23:08:0f:37:d1:ce:9c:ba:a8:88:b6:ca:4c:38:4e:91:3c:
36:22:ca:e1:b6:95:e0:a1:3d:f7:c9:ac:9d:57:1e:a6:2d:4d:
89:0f:34:b9:e8:77:95:61:83:57:89:ef:ba:3c:04:9c:8c:ab:
26:ed:d0:7c:0c:47:7e:ae:99:23:f4:70:54:81:52:6c:08:84:
02:5c:b8:22:24:3a:94:4b:4b:f2:60:84:a3:8f:29:a5:2b:52:
72:c3:a2:a3:f2:5e:31:b1:32:5c:b7:2f:4c:d0:47:0b:a9:ac:
54:46:05:01:24:49:80:8d:7c:86:ea:9d:f0:ea:f2:72:3b:39:
50:b0:c0:97:16:f1:c3:51:48:2d:73:77:ba:b9:7a:5b:ac:11:
82:76:e3:93:e7:6d:75:8e:f5:75:b6:84:a2:69:02:cb:66:a1:
f8:dd:51:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:27:05 2025 by rpki-client