Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
File: 5kdeNHqvK1nU7oU6ilS05L03R-s.mft (raw, json)
Hash identifier: pxCCxZWTMBlbdrM7W8t5BUJJxBs+ClAvcZX0E2EltjA=
Subject key identifier: 91:6D:B0:D6:46:36:3E:A3:10:BA:D4:73:B2:58:01:62:7D:86:4A:23
Authority key identifier: E6:47:5E:34:7A:AF:2B:59:D4:EE:85:3A:8A:54:B4:E4:BD:37:47:EB
Certificate issuer: /CN=e6475e347aaf2b59d4ee853a8a54b4e4bd3747eb
Certificate serial: 0196B9DACF95570BAA9BF91E2A4B84321DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
Manifest number: 7C
Signing time: Sat 10 May 2025 11:00:47 +0000
Manifest this update: Sat 10 May 2025 11:00:47 +0000
Manifest next update: Sun 11 May 2025 11:00:47 +0000
Files and hashes: 1: 5kdeNHqvK1nU7oU6ilS05L03R-s.crl (hash: ltpGNHufYB131bLGiBtlDo89j9VZsyvsZTnBR3q4tJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:cf:95:57:0b:aa:9b:f9:1e:2a:4b:84:32:1d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6475e347aaf2b59d4ee853a8a54b4e4bd3747eb
Validity
Not Before: May 10 11:00:47 2025 GMT
Not After : May 11 11:00:47 2025 GMT
Subject: CN=916db0d646363ea310bad473b25801627d864a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:0a:15:d8:e9:e0:a1:6f:90:61:b3:3f:17:
42:53:5b:36:5b:d8:18:1e:f4:91:f7:9f:91:31:ce:
f9:c6:a9:b4:ec:20:6b:4d:3f:9d:88:8b:55:d9:de:
77:c1:5c:46:92:d1:fd:be:f7:e4:94:10:26:eb:f0:
a3:47:39:36:54:9e:17:1e:e1:04:54:03:d1:bd:23:
52:7b:15:ba:9a:0d:92:69:15:30:71:d0:be:a5:0d:
5e:45:56:8a:10:fb:ac:ba:5c:7c:0d:69:89:5e:75:
77:9e:40:da:b7:2a:b2:b6:9b:51:7b:fe:99:4b:be:
db:05:07:32:16:e4:83:a6:c2:0e:38:d4:49:b2:5a:
0f:26:56:f9:8c:7e:71:2f:2e:97:0c:75:e5:e1:f7:
6a:07:87:2b:ed:7d:be:e6:11:5c:be:48:d2:87:37:
63:18:5c:ec:20:42:29:77:58:33:63:ca:31:50:c0:
06:c3:8a:ad:d7:7b:e2:ce:86:f5:e1:e0:fc:41:20:
1a:4e:ff:0a:94:94:f2:df:b7:5b:ca:bc:83:2a:b2:
5d:bf:5d:52:37:87:4f:87:6d:ed:fd:8f:a5:2e:2c:
cc:df:51:8c:d1:3c:b2:9a:7b:59:8c:7b:0d:c6:f3:
3b:d2:1c:79:0f:6b:c1:6d:50:86:f4:6e:27:1e:23:
be:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6D:B0:D6:46:36:3E:A3:10:BA:D4:73:B2:58:01:62:7D:86:4A:23
X509v3 Authority Key Identifier:
keyid:E6:47:5E:34:7A:AF:2B:59:D4:EE:85:3A:8A:54:B4:E4:BD:37:47:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:8c:ec:39:7a:59:7c:86:2d:54:1d:fc:3a:4a:91:28:77:bd:
11:1a:08:ae:d7:fe:13:90:7e:d0:dc:26:be:4b:b6:f0:f8:57:
90:61:01:0f:f6:0e:64:8b:76:e0:66:bd:20:28:6f:cf:9e:07:
9e:62:f4:26:f0:67:15:6a:a2:fe:bc:29:bc:ca:4b:55:70:7c:
f6:b3:be:a9:c6:8d:66:79:06:0e:6e:c5:14:e4:04:8f:3c:c5:
d1:b3:df:83:69:13:dc:d7:32:cc:84:60:d9:6e:f9:9b:1c:e6:
3f:30:4e:f3:61:c6:39:fc:ad:a6:3b:b8:aa:d0:da:63:89:28:
36:93:c9:e5:f0:36:de:ad:d8:b2:1f:9b:8b:08:43:df:34:3f:
7a:89:60:b5:9e:95:71:21:c6:bc:e9:a6:03:7b:9a:50:ac:6e:
3a:21:22:b8:fb:9d:db:f7:88:3d:03:d3:cd:26:5f:5a:7c:f8:
9e:5e:85:1b:8f:c7:ba:c5:ce:4c:24:b7:1b:58:47:59:58:fb:
2c:6f:8b:7b:7d:db:e1:94:94:17:87:26:44:b7:1c:63:f1:ee:
6b:38:57:0c:3b:4f:97:a3:e2:e0:49:9e:46:a0:33:4a:70:51:
df:75:93:40:e6:0a:3c:49:88:9b:07:d4:0e:6c:04:84:22:89:
7f:62:6d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:32:33 2025 by rpki-client