Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
File: 5QwixmuF-smN6D12HvQkNDerA5M.mft (raw, json)
Hash identifier: ujmSIBADy7W12WHZsYKAA1a18gbQzH0cez7w1yZpVfI=
Subject key identifier: FF:89:88:98:2C:65:E3:B5:0C:5B:FB:B7:C5:E6:FA:F7:46:CC:8C:C2
Authority key identifier: E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
Certificate issuer: /CN=e50c22c66b85fac98de83d761ef4243437ab0393
Certificate serial: 0196BA11AFB7FA52771ABCA319DD3AA7CD00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
Manifest number: 11CE
Signing time: Sat 10 May 2025 12:00:43 +0000
Manifest this update: Sat 10 May 2025 12:00:43 +0000
Manifest next update: Sun 11 May 2025 12:00:43 +0000
Files and hashes: 1: 5QwixmuF-smN6D12HvQkNDerA5M.crl (hash: 9oMA3IrrfFWW8rgCA5iDmwzcSu8x1zmQvG+nqPOEQU0=)
2: 5vvZLFuVzrlfVEjgWVSSvDzWzYc.roa (hash: d36pZwdlPn9b+lfJWHYLiYs9ysvYmjF2/rOLd55l7Go=)
3: yV2QuoCYFVjM2-OTmFDea8Z9hyw.roa (hash: Fm6HaS57Sk5HrIHo3AJdE4/OrtFAnjdqKcrhGRoXq3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:af:b7:fa:52:77:1a:bc:a3:19:dd:3a:a7:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c22c66b85fac98de83d761ef4243437ab0393
Validity
Not Before: May 10 12:00:43 2025 GMT
Not After : May 11 12:00:43 2025 GMT
Subject: CN=ff8988982c65e3b50c5bfbb7c5e6faf746cc8cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:16:a3:41:13:9b:cd:69:8a:51:67:12:3d:12:
02:4c:7a:ca:d7:3a:ae:d2:27:9f:24:e0:d2:60:12:
1a:a9:29:56:92:36:41:96:90:99:b8:55:f0:cc:74:
11:32:05:a1:e5:01:1d:b5:85:75:9f:23:86:e6:22:
18:6e:11:25:30:db:71:8c:4f:01:fa:dd:4b:a8:2c:
a8:f7:e0:a6:71:42:a2:50:f7:b0:6b:4e:c5:1d:3e:
ce:71:5d:2a:ad:f4:90:bf:aa:51:b8:fa:f3:41:d8:
59:eb:93:ba:a6:fe:55:e6:33:95:42:19:ee:f2:09:
a8:c2:12:cf:0f:e9:57:3c:f4:f7:46:19:f5:9c:87:
fe:1e:f5:25:78:84:96:e9:ae:7c:cd:16:51:3c:d9:
d3:46:6c:a4:f8:eb:43:7f:35:2f:37:3e:24:9f:78:
5c:13:35:95:f8:4b:37:aa:e1:07:a4:55:2a:92:f5:
9f:8b:fc:a5:08:c6:4b:1d:a9:00:62:ca:ad:7e:85:
5f:8e:3d:c4:8d:6a:1a:9b:13:d3:29:e8:e1:08:ff:
3b:47:f8:38:d0:3f:da:1f:b4:e8:bc:7b:39:d9:b8:
de:d1:5a:79:68:9a:93:70:2b:2a:5a:35:b3:d2:44:
76:42:95:73:bd:b1:4b:d8:db:51:a9:e1:28:9c:c3:
6c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:89:88:98:2C:65:E3:B5:0C:5B:FB:B7:C5:E6:FA:F7:46:CC:8C:C2
X509v3 Authority Key Identifier:
keyid:E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:96:b4:e3:68:f7:9e:ed:ec:29:6b:29:ed:bf:a9:4e:74:ec:
65:d7:3f:2f:15:a2:05:57:95:be:57:63:87:86:95:57:e8:08:
29:02:79:58:38:8d:5b:11:4b:59:7b:25:28:d1:19:fb:fd:94:
05:9a:4d:93:f6:eb:db:5c:5c:b5:a7:6f:98:14:6c:62:4b:af:
c2:e0:5b:a9:1f:78:98:9b:6a:81:0e:44:65:2c:2e:2c:a0:fd:
e8:a9:55:a1:d9:4e:39:ca:bb:08:9d:d0:cc:d2:ad:29:59:95:
72:f3:85:36:ee:a7:ef:6c:3e:45:7b:69:33:22:a5:d5:f5:d8:
96:cd:76:8b:ca:77:02:e1:88:8d:35:0b:e4:39:fa:6b:ff:99:
9b:65:36:75:98:e2:5f:af:6d:9e:fb:34:d2:78:49:c0:1d:05:
2f:ff:3e:c4:19:35:6a:71:c5:c7:f3:49:77:be:a3:c0:2a:a2:
51:2d:f4:b1:59:60:1f:62:a3:90:7d:5d:97:3d:bb:e0:a8:0f:
ce:37:87:66:6f:3c:f5:65:e5:6f:ca:a0:1f:0d:ef:a6:86:56:
7c:08:23:ba:e5:17:51:4c:04:18:43:d9:c7:25:0a:bc:b2:15:
c3:c5:58:3f:a2:2d:23:e9:eb:7e:8e:54:69:d2:7d:c2:c8:c4:
67:01:c4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:48:16 2025 by rpki-client