Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
File: 5n17NXAHcGQBPaGOKeaQzUyb1xA.mft (raw, json)
Hash identifier: pWbb15kvfMkyfL/PxB+xSwriZ98gZh67G6uyyHmwBdo=
Subject key identifier: BD:DA:66:A3:B4:8D:E2:5C:0E:CA:8F:62:FA:3D:8F:10:82:8B:C7:48
Authority key identifier: E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
Certificate issuer: /CN=e67d7b3570077064013da18e29e690cd4c9bd710
Certificate serial: 0196C270369C1A9AAECBF739E687FFE80418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
Manifest number: 021A
Signing time: Mon 12 May 2025 03:00:56 +0000
Manifest this update: Mon 12 May 2025 03:00:56 +0000
Manifest next update: Tue 13 May 2025 03:00:56 +0000
Files and hashes: 1: 5n17NXAHcGQBPaGOKeaQzUyb1xA.crl (hash: vzf+tltpZ1JYeatKQklgfZsn/cuC2+itMCfQjaIPq74=)
2: UXfwFJz04X4XmU1ABHkr-Q0ovq0.roa (hash: vTofq9wYPlysSoUgx6HvDr7C9PTa+inohQrNa6Pfbqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:70:36:9c:1a:9a:ae:cb:f7:39:e6:87:ff:e8:04:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67d7b3570077064013da18e29e690cd4c9bd710
Validity
Not Before: May 12 03:00:56 2025 GMT
Not After : May 13 03:00:56 2025 GMT
Subject: CN=bdda66a3b48de25c0eca8f62fa3d8f10828bc748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:fc:9f:b2:0f:38:52:d8:cb:b5:55:11:22:
a7:b6:7a:33:25:8e:57:d7:f0:f0:8c:38:6e:6d:ee:
d5:bd:7b:b1:92:ca:a3:68:cd:dd:5f:84:18:2c:da:
d7:6b:74:16:fa:d8:09:78:19:49:a0:28:21:bf:c5:
c5:64:f3:2a:80:f5:fc:f5:0b:7e:68:30:a8:7e:5c:
94:00:25:fb:3d:87:39:27:a9:6d:f6:f3:b4:1b:39:
e7:d1:35:52:80:44:3b:6d:43:08:9e:f4:d9:20:2b:
54:76:4d:fd:dc:f7:0f:1d:1a:f3:d0:99:41:76:f1:
7f:67:73:ce:c7:75:4f:5e:d7:65:92:ff:7a:30:5f:
be:ec:32:9e:9c:ef:47:c6:81:80:d7:27:40:44:66:
71:a5:ea:4b:da:15:a6:b7:86:b9:d3:f6:9d:7f:ef:
5b:0f:bc:f7:fc:62:20:a6:36:b1:98:20:a5:4d:f6:
a1:03:4f:51:b2:fd:17:e9:00:58:ce:02:a9:08:af:
2f:5d:e7:cd:2a:22:75:fd:20:67:16:9c:fc:ca:80:
cb:82:3a:b0:27:3f:30:16:00:b7:fe:b3:ac:3b:2e:
03:0b:39:b2:d8:40:c2:ad:a0:26:c5:16:16:9c:a8:
30:58:0e:3b:ea:2a:e2:71:7b:16:ae:cd:1f:4f:8d:
d3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DA:66:A3:B4:8D:E2:5C:0E:CA:8F:62:FA:3D:8F:10:82:8B:C7:48
X509v3 Authority Key Identifier:
keyid:E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:19:aa:99:6d:6f:89:4f:48:40:21:30:75:a8:8e:81:e9:93:
f8:55:82:9f:5e:cd:25:79:9c:55:f7:26:63:46:e7:b4:42:b1:
3f:38:71:a4:76:e7:40:57:a7:40:f9:ba:cd:fe:ce:01:55:dd:
59:0c:a3:69:64:2c:50:1e:31:18:ad:ae:87:3f:55:64:0e:bc:
c7:8a:7c:e0:82:35:dd:1e:c3:6f:7c:0d:64:fc:b3:ff:eb:a0:
d1:c3:2d:b9:e2:d1:90:6f:ef:30:b6:a4:05:45:fe:fc:5d:60:
e8:fe:de:9e:75:47:7b:c2:fe:13:a4:12:7f:69:f8:75:02:80:
5c:ac:c8:63:5d:7f:fc:1e:47:1a:64:e4:08:2d:47:35:44:0a:
2d:a3:76:ba:51:06:15:a9:39:3b:18:98:ca:1f:15:ed:57:39:
88:c6:85:57:ea:91:e6:40:1e:6d:d5:98:54:bd:78:d0:28:2d:
4c:a2:63:ea:39:97:f8:e7:a8:24:af:f1:1e:a4:f9:4c:5e:00:
10:7e:1a:c7:e3:e0:99:b6:75:77:13:fd:6e:d2:78:2a:66:99:
4f:7e:f4:96:85:1b:8a:f9:c1:ce:2f:e7:40:bf:11:b9:22:af:
c9:76:62:99:93:ab:0a:2c:24:56:7a:be:9c:06:90:7e:85:0a:
5b:55:d3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:10:55 2025 by rpki-client