Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
File: 5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json)
Hash identifier: dm+5JhfTRcwxfx/cy6oKUOeaCXqp7SdudSEgCOy8aJU=
Subject key identifier: 40:5F:26:5A:7E:DD:7C:CF:EE:2F:C5:64:A3:5C:6D:5A:BF:CB:95:8B
Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Certificate serial: 0196BFDCD819C2F8294490CE4468100B114B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
Manifest number: 066C
Signing time: Sun 11 May 2025 15:00:43 +0000
Manifest this update: Sun 11 May 2025 15:00:43 +0000
Manifest next update: Mon 12 May 2025 15:00:43 +0000
Files and hashes: 1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: zuviSIcq6v16yUgRtiCbNwb8ZyYvvd3Td9Roiyd6JAk=)
2: KFEMCZhH126h5EdMOEzOYR3jl7A.roa (hash: i0lu4HO1DlJaiLzdVoxYyKbrNJlxsepiYz5nfS8kc00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:d8:19:c2:f8:29:44:90:ce:44:68:10:0b:11:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Validity
Not Before: May 11 15:00:43 2025 GMT
Not After : May 12 15:00:43 2025 GMT
Subject: CN=405f265a7edd7ccfee2fc564a35c6d5abfcb958b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:cb:9b:75:f7:c1:98:b0:a4:1f:16:08:2f:
61:7c:b7:d4:0b:53:1e:75:6e:d4:26:1d:dc:69:80:
4a:20:5a:26:2a:ad:e7:35:1e:ee:21:98:d5:e7:20:
f9:5c:b9:35:9f:c0:3e:e1:cd:6c:2e:19:3c:4f:b8:
1b:fa:66:5b:69:db:bc:f8:63:75:01:f2:4d:64:18:
9f:3a:d5:47:38:b7:f0:26:28:74:16:a0:90:84:b1:
ed:58:7d:32:29:1a:0c:c7:ce:42:d0:4d:89:63:ed:
02:be:4b:fc:7f:54:98:6d:64:48:30:9e:48:4d:46:
e6:7d:c1:18:21:fc:ac:9f:af:eb:b0:a8:5a:41:12:
8d:cb:df:2c:44:4d:a8:39:fc:8b:ee:a1:70:03:5f:
68:e6:18:42:ed:e2:c6:67:15:c7:d1:de:b9:ca:92:
c2:c7:89:2b:f2:a0:9e:12:88:19:dc:3e:8b:74:b2:
c4:a9:ae:e4:c2:82:47:46:b4:79:8f:32:64:ec:21:
da:b5:44:fd:46:7f:14:34:7a:59:65:8c:a3:12:74:
82:1c:0a:08:f2:11:21:35:1f:e4:c3:46:60:9e:c6:
a1:0a:83:d0:1e:13:25:61:35:ee:0b:fa:87:8e:cd:
0b:0f:1d:cf:de:e7:d1:42:f7:0c:ce:4d:56:cc:69:
50:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5F:26:5A:7E:DD:7C:CF:EE:2F:C5:64:A3:5C:6D:5A:BF:CB:95:8B
X509v3 Authority Key Identifier:
keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4f:e7:d7:42:68:e3:92:ac:fd:34:b9:52:50:88:1b:23:2e:
02:b0:69:56:1b:4c:cf:6f:14:1a:6b:ac:12:92:a9:79:41:b5:
9e:71:94:7c:3f:31:1a:38:56:b3:28:21:d3:90:d1:1a:78:ca:
e5:41:4d:fb:5f:d3:68:19:2f:18:9a:73:d0:bf:87:f4:6d:7f:
22:d6:11:49:33:62:13:2d:fc:92:c6:75:b4:a2:95:0a:76:a8:
4b:70:2e:b0:d5:56:0a:38:20:7d:51:79:61:62:66:d2:a8:f2:
3c:7f:55:c8:a3:53:03:a5:30:37:7c:2f:8d:ff:dd:c0:b2:30:
ae:98:98:79:78:a0:fb:e1:f3:35:b3:04:09:06:4b:42:2f:2b:
bd:b7:b5:e9:2e:55:04:fe:c9:d3:00:57:89:24:10:7d:6c:ae:
6d:01:ab:f7:28:6a:d0:99:b5:61:1d:a2:ed:47:07:33:f9:3c:
7d:51:fa:55:f1:44:f8:fa:7c:48:f4:c7:b3:16:61:f9:18:5d:
77:81:39:98:82:f9:7e:be:a6:37:af:01:98:9d:d6:00:b2:f1:
8a:5c:87:55:e3:c4:6c:58:4d:eb:8e:4c:25:ad:f9:0c:bb:29:
e1:a4:26:14:c7:ec:23:0f:80:7e:ba:72:59:20:95:66:9b:a0:
ac:8a:be:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:01:35 2025 by rpki-client