Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
File: 5tM83lfaCcfZM3ce6hQllAdvmiM.mft (raw, json)
Hash identifier: kZt/VvNZGF0BLskWFy7pfMZLpxYSqJXdy7IQ8YrWsZA=
Subject key identifier: 61:CA:28:EF:90:5B:5E:6B:CF:EB:C8:BF:FF:FE:B5:AA:52:94:6B:97
Authority key identifier: E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
Certificate issuer: /CN=e6d33cde57da09c7d933771eea142594076f9a23
Certificate serial: 01969FE43AD158DFC96D049801E794AE0267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
Manifest number: 1521
Signing time: Mon 05 May 2025 10:00:56 +0000
Manifest this update: Mon 05 May 2025 10:00:56 +0000
Manifest next update: Tue 06 May 2025 10:00:56 +0000
Files and hashes: 1: 5tM83lfaCcfZM3ce6hQllAdvmiM.crl (hash: qSJr7tgRSqLqKqdf3PvDLsQagaUHaDnxOGLpxcbI5uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:3a:d1:58:df:c9:6d:04:98:01:e7:94:ae:02:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6d33cde57da09c7d933771eea142594076f9a23
Validity
Not Before: May 5 10:00:56 2025 GMT
Not After : May 6 10:00:56 2025 GMT
Subject: CN=61ca28ef905b5e6bcfebc8bffffeb5aa52946b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:65:f9:18:70:3f:24:d7:1a:f4:47:bd:a0:30:
2d:b1:62:6a:d5:42:dc:17:35:b0:a9:e6:63:71:3d:
1c:23:a6:d1:ab:84:18:3f:89:60:de:6b:50:b7:ea:
c3:a8:14:12:72:5a:ba:31:9c:a5:ec:20:6e:17:2a:
b8:bd:7c:e9:b5:f9:93:fd:76:1e:1f:67:b6:29:71:
a7:af:da:74:1d:49:9d:c3:bd:35:9c:fa:04:3e:e1:
4a:a2:33:15:98:82:8e:28:8e:91:19:44:4e:ff:05:
c6:f8:f7:de:a6:88:75:93:49:ff:68:30:f0:96:63:
be:9b:98:83:20:ac:68:30:eb:b8:a5:bf:63:51:52:
a4:f4:f2:d4:79:f6:6d:f8:87:29:83:01:9e:4a:d7:
91:69:80:1a:84:22:5a:3f:a2:19:71:24:ad:16:d8:
6a:19:39:f0:ca:78:dc:be:0f:17:8e:4c:82:7b:b7:
fb:3a:92:31:8b:93:63:64:27:52:6a:dd:7d:b7:03:
33:57:c3:44:b7:a7:fd:5f:2e:3a:ec:bf:f7:c9:06:
ff:81:78:a7:fc:fd:27:ac:b0:99:25:fb:92:21:bf:
73:3d:04:63:04:1f:17:ac:8d:43:1a:28:18:30:40:
f0:89:af:9b:3d:34:37:f4:4b:48:64:5f:66:41:03:
8a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CA:28:EF:90:5B:5E:6B:CF:EB:C8:BF:FF:FE:B5:AA:52:94:6B:97
X509v3 Authority Key Identifier:
keyid:E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b1:fa:26:f3:82:ea:1c:eb:a8:90:14:be:b7:f2:ab:24:d6:
ec:03:0b:82:c4:58:64:81:e3:78:ec:f7:82:d7:58:71:db:10:
9c:53:04:c8:d9:fe:21:ea:57:0a:2b:5d:7c:f0:6d:4c:6a:a0:
42:44:63:98:e3:31:c3:b9:b3:33:b9:f2:10:54:01:6d:63:46:
3e:f9:6a:25:38:3d:54:fd:bb:37:c7:93:bb:b8:81:de:40:ce:
3b:35:ff:e2:05:af:d7:04:a6:5f:84:4c:f3:7e:f2:17:0d:a2:
98:a7:98:41:cd:d7:50:99:f8:7b:e9:c0:b1:f4:66:cd:dd:60:
9e:09:a5:ea:02:14:85:04:45:ae:35:52:21:db:4d:9c:37:58:
81:ee:2a:35:70:18:04:3f:d3:b1:48:4d:db:58:df:e5:e3:27:
a3:81:b7:c4:60:fd:b3:d7:95:3e:7f:11:ae:21:ac:3b:9c:5a:
24:1a:65:f3:3f:e0:d0:45:14:23:42:07:b6:ce:cd:62:31:b5:
8c:cd:57:a3:1e:3a:43:cf:06:88:7d:d4:2c:4d:fd:3f:19:4c:
39:1f:24:bf:dd:b1:6c:4e:c5:64:3f:8e:23:fe:4b:ea:24:40:
95:f0:a1:7a:50:4d:f8:ba:e9:e1:01:94:89:32:8a:2f:3f:e9:
6d:9e:3c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:00:04 2025 by rpki-client