Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
File: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft (raw, json)
Hash identifier: Ob05SPUdOgNREFWbjbybm5/v+ReCw59pVgYmxOQ89l8=
Subject key identifier: 6E:FA:C5:09:FB:18:2D:4C:03:68:FA:48:D8:51:91:7C:13:95:6E:B4
Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94
Certificate serial: 019659F0498155B517D24C858191200C7783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
Manifest number: 0F90
Signing time: Mon 21 Apr 2025 20:00:41 +0000
Manifest this update: Mon 21 Apr 2025 20:00:41 +0000
Manifest next update: Tue 22 Apr 2025 20:00:41 +0000
Files and hashes: 1: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl (hash: eU5km6Qxpo2LdfzwvOSna0EQlYf5u0u32sQEY2Th7P4=)
2: Akqk3eS0tGv3sCrORGF18yZDc-U.roa (hash: 0oVDhjWMqNLY0nJTpKvFpLGgr/SKbou2eArpI2Ah8Sw=)
3: Y4lRCxWqqWGfEk6C0jkwlCOXSD0.roa (hash: 9r+brMvqsw+YAYjvRc7DWtH7UFv+6TtKr5r8x/0sk6A=)
4: ph-NwVxh55wzatOAirrZ8DJPOnc.roa (hash: 4GXqkbJcSF+XZjbw7siigjayEcI8lC5EBRJebXEvVYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:49:81:55:b5:17:d2:4c:85:81:91:20:0c:77:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94
Validity
Not Before: Apr 21 20:00:41 2025 GMT
Not After : Apr 22 20:00:41 2025 GMT
Subject: CN=6efac509fb182d4c0368fa48d851917c13956eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4c:2e:55:74:09:52:4d:0d:76:1d:7f:5d:2f:
93:16:11:68:ca:45:89:84:1d:fd:23:44:0c:8c:db:
7d:4b:1f:b2:15:e8:33:aa:4b:81:2e:db:84:e6:45:
d6:a5:d1:b9:9f:c8:c6:8f:e8:41:be:29:fa:0e:38:
1f:0c:ab:af:13:6a:7a:21:58:22:14:d2:af:a1:95:
09:37:e7:98:28:d3:68:f1:7a:1b:2c:3c:8f:3c:1d:
2f:73:24:f5:6d:2f:73:0d:8a:9d:0c:98:5b:c5:0d:
58:d4:36:ef:3f:4a:67:94:7b:1e:c9:01:88:87:86:
31:98:79:59:68:6a:74:14:ab:95:a1:04:05:23:e9:
d5:a2:01:d4:9b:51:27:b7:d1:89:60:10:71:e4:ac:
bc:b9:3c:2a:20:a8:ee:d4:62:b9:27:94:fd:19:87:
02:6b:3b:51:1b:ef:fc:09:11:43:ad:4c:89:e3:a9:
2d:c7:53:ee:25:3c:7f:37:2b:b7:b6:03:19:f6:0c:
7a:88:05:22:7a:c0:09:92:60:ef:6b:c0:a2:a7:48:
de:18:56:08:21:f3:a4:47:c0:b3:72:cd:c5:f6:55:
52:1a:dc:9e:da:52:bd:56:94:96:dd:b2:f3:99:30:
23:5f:a9:c2:01:10:6f:22:c6:99:31:18:d7:b0:da:
41:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FA:C5:09:FB:18:2D:4C:03:68:FA:48:D8:51:91:7C:13:95:6E:B4
X509v3 Authority Key Identifier:
keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:02:41:4a:b8:a1:b5:8c:f6:51:f1:7f:86:3f:f1:13:01:69:
c1:7b:fc:65:42:f2:df:93:b1:f9:0a:d2:98:d3:64:e9:a3:dc:
6b:87:1f:6d:46:eb:68:d3:e2:33:23:98:d3:02:2d:d7:f5:e0:
db:5c:eb:e1:d1:8a:bc:30:f8:e5:de:63:ac:98:dc:aa:d9:e8:
70:fa:9b:94:56:bf:6a:39:36:15:f2:12:65:c5:18:42:52:d5:
bf:b3:84:5b:75:0f:c9:2c:11:cf:ce:54:50:bb:ac:60:3c:f8:
9e:2d:5c:19:31:85:9b:19:f1:79:21:e6:0f:0b:16:4d:70:4d:
d3:69:fc:41:93:11:e6:b1:8f:07:0b:b1:01:58:9b:2c:d1:8a:
a1:89:7d:a5:8c:c6:be:51:2f:03:d1:e6:6d:6e:7a:2d:f6:f0:
e5:d1:25:a4:fe:62:d9:56:b3:86:9f:90:84:41:d1:b9:43:5d:
a6:ac:72:3a:28:66:6b:9b:90:8d:98:4c:37:f5:12:18:31:43:
c1:79:c6:a3:5f:49:ef:1a:2e:05:07:77:f3:90:9e:94:93:38:
17:e7:98:2d:a1:ff:2a:21:4c:00:ae:f9:d6:ff:c2:38:bc:65:
08:b7:f8:6d:07:3a:e6:dd:51:87:b2:ec:9f:4e:0e:db:66:d7:
18:12:1d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:31:38 2025 by rpki-client