Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
File: 5OIv9yeFHntJFhTwetExVxQcwwk.mft (raw, json)
Hash identifier: uPHynXLGyjdh9khsvYUAPtP7nF7YrpKLSJx+2qxWCio=
Subject key identifier: 26:87:61:1F:55:D2:DF:C5:64:F7:D7:8B:93:C9:3B:DA:2E:96:63:81
Authority key identifier: E4:E2:2F:F7:27:85:1E:7B:49:16:14:F0:7A:D1:31:57:14:1C:C3:09
Certificate issuer: /CN=e4e22ff727851e7b491614f07ad13157141cc309
Certificate serial: 0196C9F25AD9882F74D3FE9D78AC44542CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5OIv9yeFHntJFhTwetExVxQcwwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
Manifest number: 13E9
Signing time: Tue 13 May 2025 14:00:25 +0000
Manifest this update: Tue 13 May 2025 14:00:25 +0000
Manifest next update: Wed 14 May 2025 14:00:25 +0000
Files and hashes: 1: 5OIv9yeFHntJFhTwetExVxQcwwk.crl (hash: KgXukMFiEbsFu+ktbVDVrtbexyqQ5Fb99sy09PxI2j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5OIv9yeFHntJFhTwetExVxQcwwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:f2:5a:d9:88:2f:74:d3:fe:9d:78:ac:44:54:2c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4e22ff727851e7b491614f07ad13157141cc309
Validity
Not Before: May 13 14:00:25 2025 GMT
Not After : May 14 14:00:25 2025 GMT
Subject: CN=2687611f55d2dfc564f7d78b93c93bda2e966381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:24:c5:19:d3:1f:32:7a:ef:b8:d1:c1:fb:
e4:4e:75:a7:e1:af:bd:ae:e7:7d:d4:cc:09:40:bb:
6c:5a:5b:8f:06:de:fe:8d:c9:bb:38:83:1e:de:a2:
7e:18:4e:dd:1f:44:15:5b:76:34:a8:a5:6a:ca:a9:
8b:87:13:7a:4e:9d:08:ea:1f:bc:e7:86:00:f8:cd:
6d:5d:c5:7e:72:78:6d:6d:29:2d:73:56:e7:c0:e6:
0a:b2:e6:3f:4b:b9:bb:8f:ca:b2:1c:33:31:33:d7:
70:df:0a:d9:66:e4:31:eb:fc:2e:82:0a:9d:f4:e0:
91:91:67:02:fc:c6:6f:5d:10:39:37:90:5c:6e:88:
3b:b6:bd:20:5d:1f:2a:4a:06:80:d1:83:62:85:a9:
ab:1d:3f:eb:1d:29:62:e1:df:62:83:54:06:bb:3c:
9c:69:03:3a:b0:b4:51:83:07:52:66:f6:3c:97:4e:
b5:42:a3:9a:dc:d4:33:67:0e:f7:8c:78:13:da:74:
7d:90:06:9e:97:74:20:0d:a1:3b:71:2b:ad:69:73:
9b:e4:27:3c:b6:98:57:7f:ba:2a:b2:ac:d4:80:21:
d0:8b:84:68:b1:db:50:8a:f1:fe:8f:a6:a9:b5:f5:
7c:6f:88:91:62:20:65:48:0d:a9:08:6b:6c:24:8a:
90:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:87:61:1F:55:D2:DF:C5:64:F7:D7:8B:93:C9:3B:DA:2E:96:63:81
X509v3 Authority Key Identifier:
keyid:E4:E2:2F:F7:27:85:1E:7B:49:16:14:F0:7A:D1:31:57:14:1C:C3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OIv9yeFHntJFhTwetExVxQcwwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c3:8a:45:d4:e0:af:f2:9b:4c:5d:18:b9:38:89:46:63:04:
bd:47:12:ac:02:34:8b:67:ab:0b:a3:75:52:88:61:a2:56:b6:
09:fa:24:c1:d4:44:e7:8c:72:04:1c:45:71:0c:38:81:45:eb:
f4:54:44:e1:aa:0a:ad:36:3d:4a:3d:12:07:45:aa:91:fc:34:
56:76:30:89:ec:77:58:ab:3c:47:8c:66:5d:f5:74:51:72:58:
3f:97:eb:4d:28:b2:b4:4b:01:13:27:b3:cf:c3:43:a0:40:e4:
dc:61:0e:ec:14:e1:97:25:13:e8:ae:6a:3a:67:36:5f:19:ca:
13:a3:79:c2:0f:34:6c:7b:7d:62:69:04:73:31:8e:cf:d5:0c:
0e:d5:94:d9:5a:e7:a7:e8:c8:f7:2e:c3:1b:d7:2a:ae:64:71:
16:41:8a:63:0a:f9:47:ac:c9:f4:8d:ae:42:53:e5:f9:22:b5:
d0:f0:71:9c:eb:b8:53:69:28:23:bb:c0:35:ca:00:46:58:ca:
2d:ff:23:b8:4a:28:d5:6e:a0:f9:05:32:90:74:22:c9:1e:3f:
f2:20:83:0a:38:4f:d4:db:8f:77:6a:bd:50:44:9e:56:21:7d:
bd:b9:b2:39:98:9d:2e:e2:86:63:7f:eb:8b:7c:02:e6:88:86:
0a:e1:49:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:37:18 2025 by rpki-client