Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
File: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft (raw, json)
Hash identifier: iLRnCc9Za0gn0drJBjIiBfODelBBlXVo5TeQ9DdBb7U=
Subject key identifier: 59:33:E2:C0:0A:79:1C:29:91:12:B0:31:7A:A6:E9:09:5E:A4:37:48
Authority key identifier: E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
Certificate issuer: /CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Certificate serial: 01965EA8C61242390DAE5FE88134220E94DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
Manifest number: 0FB9
Signing time: Tue 22 Apr 2025 18:00:41 +0000
Manifest this update: Tue 22 Apr 2025 18:00:41 +0000
Manifest next update: Wed 23 Apr 2025 18:00:41 +0000
Files and hashes: 1: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl (hash: 9zUapqV8c4gZeiTc9YrUxkwmsmpMqbHx/qmFH7nnmlY=)
2: V60g_4Hl1O4ws6xObJRepK5WbCI.roa (hash: WQJN9PGlNp52w8KNVApuftRmLkpbyYXJ0S9Q2EedPcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:a8:c6:12:42:39:0d:ae:5f:e8:81:34:22:0e:94:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Validity
Not Before: Apr 22 18:00:41 2025 GMT
Not After : Apr 23 18:00:41 2025 GMT
Subject: CN=5933e2c00a791c299112b0317aa6e9095ea43748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:33:5a:f4:cc:9f:5b:d0:ed:ff:fb:b8:30:
ec:33:ed:84:e4:48:a3:90:ce:c6:4f:00:8b:59:19:
08:f8:f5:52:84:d7:1d:da:62:02:27:b0:17:17:20:
51:29:c0:2d:0a:d3:71:31:f5:01:8b:62:c0:46:a6:
37:da:b7:d5:88:30:d9:d4:0d:c9:b2:72:1a:ee:97:
44:a9:70:49:f2:60:b1:c8:c2:bf:38:93:74:2b:ec:
a8:30:68:bc:ea:e4:60:8a:0f:f3:b1:bd:21:28:a3:
00:06:8d:17:13:82:65:4c:74:c1:dd:fd:1e:b9:72:
d7:ea:c0:2a:68:2c:4d:d6:4c:85:0c:69:c3:74:b6:
90:68:e0:e6:d0:af:53:dd:44:96:e4:08:a1:ef:d4:
40:6b:e7:72:ba:bb:30:83:45:90:eb:00:08:2c:1e:
6f:a9:73:f6:96:17:86:d3:07:ae:a7:42:ed:57:6a:
1c:28:c0:6c:80:2c:ae:eb:3a:99:5c:4b:6f:6d:6f:
89:81:f9:c0:45:ac:ff:be:4e:27:df:7e:69:11:af:
06:e7:8b:42:28:a7:c0:f3:e2:65:da:99:33:4b:d8:
49:b2:3e:8a:a1:0d:64:5f:07:59:40:ad:45:e3:23:
cb:29:4b:70:ac:10:2d:5c:71:e5:f8:9d:3b:fb:73:
f3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:33:E2:C0:0A:79:1C:29:91:12:B0:31:7A:A6:E9:09:5E:A4:37:48
X509v3 Authority Key Identifier:
keyid:E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a1:f2:b0:d7:77:97:a6:8c:54:8b:6c:d5:33:be:80:09:0f:
ff:ee:7c:9d:b5:e1:34:01:b1:16:03:4b:cb:23:07:cb:24:64:
f4:9f:61:b2:70:3f:3c:f8:07:18:6b:89:e2:f0:98:98:05:f2:
a5:cb:f5:2f:ff:ab:d1:ea:13:bd:c5:ee:a6:10:d9:48:ee:52:
4e:dc:63:c5:7d:6d:76:5e:e7:b4:c9:03:0f:1f:02:28:14:8c:
91:15:5f:d2:a9:bf:1a:12:55:3c:0c:2b:c0:a8:f7:74:77:dc:
ed:4f:15:b9:73:14:58:f1:c1:c7:1c:2e:3c:9d:52:e6:47:e7:
92:78:0e:e7:7f:9e:97:7f:b8:aa:67:cf:a5:db:e8:5a:b9:9b:
c2:aa:ae:eb:7a:d4:d8:25:25:bd:b7:81:56:12:fc:3d:fc:44:
67:28:fd:13:48:40:3e:0c:25:90:76:b4:6b:05:53:06:2f:4c:
24:2e:b2:9b:3b:9a:3c:9f:e8:5c:c1:40:bc:b7:78:85:7f:25:
a1:8e:c2:b2:cd:59:06:40:39:29:56:cb:47:e6:e6:0d:f2:f0:
fe:d3:60:56:02:41:2c:bc:21:f8:03:00:90:b4:5d:a9:5c:f6:
e3:a1:41:a3:e4:ca:f1:7d:93:d2:e4:c8:15:a8:87:e7:3e:7e:
65:4e:b7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:52:26 2025 by rpki-client