Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
File: 5JlaSpG8KcjX7RBKA4QBmk_lng4.mft (raw, json)
Hash identifier: /FN9dzxFm3ZZJNosUrrX0ADNHj83dNf+2CGDYbIda+I=
Subject key identifier: 76:67:D3:ED:62:61:64:A7:EA:5C:3B:A9:2B:DF:A8:87:A1:3B:C0:ED
Authority key identifier: E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
Certificate issuer: /CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Certificate serial: 0196C539BB8BAEBB77D542D8234B341F7028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
Manifest number: 087F
Signing time: Mon 12 May 2025 16:00:17 +0000
Manifest this update: Mon 12 May 2025 16:00:17 +0000
Manifest next update: Tue 13 May 2025 16:00:17 +0000
Files and hashes: 1: 5JlaSpG8KcjX7RBKA4QBmk_lng4.crl (hash: y14fm/O1d6OhZlUubnkm/naLFgzpzqdj/BFjD2wvIXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:39:bb:8b:ae:bb:77:d5:42:d8:23:4b:34:1f:70:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Validity
Not Before: May 12 16:00:17 2025 GMT
Not After : May 13 16:00:17 2025 GMT
Subject: CN=7667d3ed626164a7ea5c3ba92bdfa887a13bc0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:ca:a0:e0:fd:4e:66:5d:88:5f:fd:41:04:
a9:ce:5c:d8:e2:96:1d:fc:64:93:26:2c:70:c0:e1:
2c:80:da:77:e2:89:cf:7a:63:c4:b3:93:17:80:54:
ca:a5:30:6d:a6:fd:da:e7:1c:30:02:a9:18:10:d1:
3c:2c:6c:ad:fa:f2:f2:d5:8f:ad:02:d7:ef:83:42:
14:2c:d4:74:e4:bb:0b:8c:ac:f5:e4:02:d4:02:c8:
b9:40:88:02:57:3e:e2:9f:6e:9c:c1:b5:77:87:18:
ae:21:38:f9:bd:95:19:a0:5e:68:e1:bb:01:98:61:
6f:94:85:c3:cb:b4:5f:2b:a8:cc:f3:9b:e5:73:1f:
b7:9f:1e:15:f4:5f:ab:c9:da:3d:cc:54:10:da:59:
93:d4:fc:b8:05:63:fa:05:10:fa:14:2f:29:7f:ff:
e2:ef:b6:45:d5:40:73:93:e9:f7:6c:2e:8f:55:88:
7d:88:8c:41:39:e1:a2:50:e0:70:e6:c5:a3:29:b2:
5a:2f:ee:03:dc:44:01:08:3e:f5:4d:50:c9:ed:d9:
17:c4:f2:68:d1:2c:f3:f8:23:c4:be:fa:e7:6d:f6:
d4:39:ef:ff:40:15:de:9c:a9:be:bf:04:ee:fe:a4:
ae:09:35:02:0b:93:7f:15:cd:15:70:08:e3:bd:2e:
48:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:67:D3:ED:62:61:64:A7:EA:5C:3B:A9:2B:DF:A8:87:A1:3B:C0:ED
X509v3 Authority Key Identifier:
keyid:E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f3:71:e3:ea:29:a8:61:06:98:49:d3:0d:f5:04:4a:3c:f0:
00:a0:f1:e5:e1:7d:c1:e9:cc:5d:ea:53:ed:27:ca:64:e9:9e:
e3:cb:78:4a:5d:1d:26:ab:f9:d3:f8:07:f2:c6:0a:07:a0:4b:
72:a0:8c:01:ba:4b:5f:f4:e7:b7:01:02:18:f0:f3:6d:6e:96:
38:85:d2:ae:19:53:2d:75:a5:1b:42:f1:c7:99:49:b0:7d:32:
54:ab:b0:7f:96:04:17:5c:57:8c:d6:d6:a5:eb:6f:19:33:05:
7c:47:69:d5:de:a7:84:f3:03:09:3c:91:66:ae:1a:49:b8:91:
62:1b:b3:15:61:90:c6:31:08:67:5a:54:97:06:9f:78:e4:23:
40:74:32:8d:00:d2:2e:d0:8c:d3:5e:a7:09:95:a0:8f:92:55:
e5:01:26:ad:44:45:28:ff:0e:f9:d7:c5:25:3d:54:07:ba:a5:
44:44:7b:81:84:d2:76:c2:2d:4d:26:88:08:18:b0:68:43:67:
dc:85:47:64:d8:13:d8:f0:51:96:e9:61:30:8d:dc:f6:df:30:
08:90:f6:e1:3f:99:53:81:64:b2:da:d9:7c:79:9c:04:c2:0b:
40:9b:97:38:f3:98:f4:c7:e6:f2:e3:3d:43:c2:6d:28:cf:a4:
5c:cc:6e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:49:16 2025 by rpki-client