Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
File: 5ZAclsdH6RYsrv5QFArlMhsjxXw.mft (raw, json)
Hash identifier: rSrINIyQScsYY9CcmrynTEBnN3Svhz/wIuSsvrZICZ8=
Subject key identifier: F3:3A:DD:32:45:39:DA:60:F8:2A:3E:95:C3:87:31:01:29:B2:70:F8
Authority key identifier: E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C
Certificate issuer: /CN=e5901c96c747e9162caefe50140ae5321b23c57c
Certificate serial: 01984966E7EED79BFEAFD1DAAC4582963A51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
Manifest number: 014B
Signing time: Sun 27 Jul 2025 01:02:17 +0000
Manifest this update: Sun 27 Jul 2025 01:02:17 +0000
Manifest next update: Mon 28 Jul 2025 01:02:17 +0000
Files and hashes: 1: 5ZAclsdH6RYsrv5QFArlMhsjxXw.crl (hash: 4c7+2oUPIK8jkwkkGd0DdVAIMx9+1Hs8HpwD/1OR4iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:e7:ee:d7:9b:fe:af:d1:da:ac:45:82:96:3a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5901c96c747e9162caefe50140ae5321b23c57c
Validity
Not Before: Jul 27 01:02:17 2025 GMT
Not After : Jul 28 01:02:17 2025 GMT
Subject: CN=f33add324539da60f82a3e95c387310129b270f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c6:c5:11:d3:1e:ae:2f:0d:b1:e5:50:3c:4a:
fc:37:1c:39:fb:81:1f:2d:0b:ec:95:8c:e7:dc:9c:
30:34:db:b3:bb:4a:90:d8:bd:08:d7:55:89:22:40:
e2:15:89:ec:21:14:c0:fa:9f:d2:1e:bc:96:dc:d6:
af:3d:d2:1b:f2:62:c4:13:19:63:73:15:12:f9:47:
1f:b0:5b:6d:83:c2:bb:99:e2:a4:7b:7b:f3:4d:cc:
58:6b:f4:53:f8:10:fa:cd:a1:62:f5:4d:9e:e3:58:
60:5d:42:9b:86:76:63:f2:a4:f3:bd:d1:c5:c1:a1:
5b:35:8b:83:cf:a6:27:48:6e:00:d0:e2:7c:67:e4:
36:09:70:f4:69:ec:ff:a4:a1:31:25:79:80:2f:f5:
18:64:46:7c:12:5f:4a:94:20:77:0c:45:da:f1:58:
db:d6:71:27:11:92:13:59:af:df:53:3a:61:bc:24:
c9:d1:d5:6a:ce:bc:46:e5:d0:b3:88:b5:bc:d3:1d:
fe:d7:25:fe:50:72:c6:24:a4:f8:8d:ba:4d:d4:32:
62:9d:c7:77:44:e2:d3:ae:5d:a0:2a:bb:b0:88:34:
92:23:8d:bd:aa:9d:4c:e5:a9:6e:88:8e:4f:1c:d9:
cc:d6:0b:b8:17:6c:bb:7e:2f:06:b1:19:14:47:34:
9b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3A:DD:32:45:39:DA:60:F8:2A:3E:95:C3:87:31:01:29:B2:70:F8
X509v3 Authority Key Identifier:
keyid:E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:65:d3:25:6f:b5:82:08:4b:fa:90:b4:df:06:86:47:41:96:
ae:46:93:80:e3:11:26:55:5b:11:76:2a:ba:e1:de:05:af:cb:
4c:6c:cc:f6:3b:39:cc:23:4c:e0:4e:39:b6:4d:a0:74:e3:cd:
cb:e2:3d:ed:c3:af:e6:69:27:d3:8e:2f:a4:e3:aa:3b:fc:50:
0d:b3:b0:3e:51:f3:b0:c8:30:a6:3c:68:19:5c:67:d0:f7:85:
62:1b:b8:ae:c7:a5:55:3e:ec:ad:28:af:7a:f6:2d:10:e0:0f:
48:b1:b3:a3:d1:9d:25:66:1e:26:10:33:2e:11:f1:40:83:9b:
db:b7:d0:0b:07:7e:b6:45:e0:56:9c:8f:9b:23:30:65:ee:ed:
84:72:1c:e7:16:2e:94:2a:47:44:13:77:dc:81:82:73:ab:67:
91:2a:03:9f:ad:b5:41:17:5b:63:f7:8d:24:9a:31:32:20:34:
86:7b:dd:b6:fe:56:50:02:33:c4:2d:6f:7b:82:f3:e6:92:45:
aa:05:60:22:ea:64:40:6f:ff:b2:7c:81:9e:1e:6c:27:21:25:
92:b6:4d:56:6a:26:2c:6d:0b:39:87:d4:51:73:db:86:0a:a1:
24:69:cf:1c:93:b8:bf:12:11:a2:4d:f3:84:7d:b4:c1:b1:6c:
8b:6c:f2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:20:48 2025 by rpki-client