Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
File: 5UHTgH6p2K1130eFWJlQnubzKCA.mft (raw, json)
Hash identifier: cjnNd6KZVzfk+CHu3y/gKOMgPBQL5p3zkVSISXSIjCE=
Subject key identifier: B4:D7:5F:F3:67:2A:4D:FE:3B:91:81:EB:11:09:57:46:5F:38:24:FE
Authority key identifier: E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20
Certificate issuer: /CN=e541d3807ea9d8ad75df47855899509ee6f32820
Certificate serial: 01969F080A87414539F79DA8A9F26F4D239F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
Manifest number: 70
Signing time: Mon 05 May 2025 06:00:26 +0000
Manifest this update: Mon 05 May 2025 06:00:26 +0000
Manifest next update: Tue 06 May 2025 06:00:26 +0000
Files and hashes: 1: 5UHTgH6p2K1130eFWJlQnubzKCA.crl (hash: v347HXj+y+IAeQMM2SLZ2xPdQC+cNv4OQIFrAArmQ9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:0a:87:41:45:39:f7:9d:a8:a9:f2:6f:4d:23:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e541d3807ea9d8ad75df47855899509ee6f32820
Validity
Not Before: May 5 06:00:26 2025 GMT
Not After : May 6 06:00:26 2025 GMT
Subject: CN=b4d75ff3672a4dfe3b9181eb110957465f3824fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8c:4a:b4:78:f7:44:6f:76:d7:06:19:98:ef:
c5:d7:66:b3:85:14:d0:bc:9d:04:f7:dd:1e:fd:e9:
9d:e3:f8:63:a3:9f:70:48:5d:b3:ec:af:31:3d:42:
23:2b:76:60:1f:d2:1e:30:91:fa:ac:a9:f0:02:77:
13:63:ea:f8:13:e8:34:c5:11:5a:d6:7f:ef:84:e6:
5d:ca:48:d9:3e:27:0c:a4:c3:92:f3:7e:27:b0:01:
91:fa:3a:c0:ef:ec:bb:03:b3:c5:59:a6:f0:b4:5d:
ee:45:d7:98:9f:67:b7:bb:78:a3:ca:97:31:17:8b:
56:a7:d9:82:9a:ae:76:4a:cd:a9:4f:a5:7f:ac:ef:
f4:71:41:94:3d:97:b9:13:9e:18:ea:ab:92:a0:19:
69:aa:d9:06:de:3a:52:ba:7e:8e:82:15:d8:ea:91:
09:7b:d8:18:dd:19:1d:e6:9d:37:eb:ee:da:2b:22:
22:e5:e6:7d:08:c1:2c:4f:69:ae:c8:27:88:53:88:
ca:28:c8:66:8b:a7:e7:2b:70:95:03:34:09:1d:59:
79:6f:f7:0b:ad:cb:06:7a:2d:a0:91:ec:63:07:55:
48:31:52:99:10:73:8c:9a:a1:6a:aa:30:57:fe:f5:
84:83:a6:42:a7:00:37:c3:17:0a:d4:a1:e3:b2:b1:
95:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D7:5F:F3:67:2A:4D:FE:3B:91:81:EB:11:09:57:46:5F:38:24:FE
X509v3 Authority Key Identifier:
keyid:E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:11:13:c9:46:d1:40:45:2c:2b:b2:4f:c5:44:ab:e4:39:6c:
ce:96:eb:43:0b:31:a4:b8:74:bc:e0:5f:90:eb:56:f3:3b:f7:
13:b4:f5:29:eb:9e:79:84:52:34:8f:fd:8f:30:44:14:83:f4:
48:58:0c:66:14:4c:f3:3e:9c:e2:aa:20:f2:9c:ac:32:ba:86:
98:ef:62:64:1f:54:66:21:7b:49:37:fd:43:de:74:4f:cf:97:
a2:14:ac:68:05:ec:b1:66:52:2e:d8:2d:c6:42:35:70:75:5c:
94:97:0d:90:36:3b:21:bf:84:31:15:2e:ed:c7:b9:4d:5c:ca:
b7:3c:c7:29:dd:aa:39:20:94:99:54:50:69:dd:b7:35:2c:1f:
51:e5:b8:5f:ae:7f:c3:9d:20:94:91:93:86:e0:d7:06:64:6a:
89:d4:3d:8f:57:ac:2d:38:59:5c:15:ad:ee:fb:13:dd:ce:85:
d1:83:bb:0e:10:15:08:f7:65:9f:b0:30:2d:29:d3:4c:b4:4a:
86:84:ff:c8:9f:13:03:a3:f4:81:17:8e:13:5e:c1:94:d5:86:
a3:3c:d1:f9:80:16:e6:89:3b:bd:c2:07:05:4e:03:c9:95:ce:
7e:2b:98:4e:16:0b:6d:b1:01:27:2e:3d:6a:2f:7c:c4:fc:22:
d7:8e:e8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:41:16 2025 by rpki-client