Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
File: 5z_jNRpeYmSh-BKcECUdnolugGI.mft (raw, json)
Hash identifier: 81Oc19KDxkgYR0L3hxQwCPq43scriTF7nLH8uYqKHR0=
Subject key identifier: 54:F0:F1:9B:57:CA:9B:85:72:7D:EF:C2:88:FC:3A:25:5A:A2:D9:2D
Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
Certificate issuer: /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Certificate serial: 01958B16EC722DF71BE814160CB01354062D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
Manifest number: 1491
Signing time: Wed 12 Mar 2025 16:01:29 +0000
Manifest this update: Wed 12 Mar 2025 16:01:29 +0000
Manifest next update: Thu 13 Mar 2025 16:01:29 +0000
Files and hashes: 1: 5z_jNRpeYmSh-BKcECUdnolugGI.crl (hash: YFj/D6XZaF79LOb7yZkcgOgHoyijGVbvMsjkp1T71qw=)
2: mjZQqpBxq3tzElUxwYWj6w8CYqw.roa (hash: xWY5CwFTzA7VILUdMDaL5WQ8VyRltqo8AcwsKQ6Bk2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:ec:72:2d:f7:1b:e8:14:16:0c:b0:13:54:06:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Validity
Not Before: Mar 12 16:01:29 2025 GMT
Not After : Mar 13 16:01:29 2025 GMT
Subject: CN=54f0f19b57ca9b85727defc288fc3a255aa2d92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f7:fc:43:f7:c7:fe:d8:8a:21:67:cb:12:8a:
45:dc:76:3b:c6:23:9d:39:5f:47:7c:3c:64:ce:26:
a4:4c:68:41:4c:39:d4:f6:c4:73:bc:cf:d5:82:6b:
62:fd:53:09:28:5d:2a:68:ff:ee:74:65:b2:ce:8b:
bd:2f:5a:86:6c:57:5e:c5:13:fd:37:88:c2:4c:d9:
9c:95:50:96:e2:9b:2f:00:f5:b5:aa:1c:b6:58:b5:
fa:65:6c:ba:0d:47:99:73:48:8f:d7:1b:a2:4a:f0:
da:c9:84:83:45:fd:50:e4:6b:b7:48:f6:63:82:e8:
3c:8c:cf:c3:5d:4b:90:eb:bb:0c:18:7a:2a:af:56:
4f:63:f0:89:bd:e8:f0:07:0e:7c:88:90:64:86:2f:
fd:fa:f7:bc:4c:68:a9:da:41:65:cd:39:72:27:70:
df:c2:b3:ee:82:21:27:a8:ee:62:60:8d:29:69:3a:
9f:cc:ac:c5:a9:51:9c:bd:9c:0e:96:11:ca:85:7a:
1f:12:99:46:09:58:22:f3:93:05:10:38:74:7e:dc:
60:b6:56:80:ba:cf:63:a1:10:fc:ab:94:e6:cb:1b:
60:31:9e:16:4a:b3:d9:37:d4:e4:72:63:36:22:30:
ab:86:51:94:f7:43:b6:2e:47:91:e5:77:ec:54:57:
2a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F0:F1:9B:57:CA:9B:85:72:7D:EF:C2:88:FC:3A:25:5A:A2:D9:2D
X509v3 Authority Key Identifier:
keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:1f:53:53:40:85:38:7f:90:19:15:da:a9:63:b6:42:b5:f3:
e0:ff:fb:c1:21:26:c3:e2:23:26:73:9d:07:53:d4:93:12:9d:
20:18:2e:0a:d7:0c:67:51:20:8d:cb:87:ba:03:c9:aa:5d:b7:
53:24:05:ed:a9:ec:67:a2:94:3a:af:59:57:d0:d9:94:ac:1e:
5c:87:fd:4e:3e:b8:ba:9c:a1:e4:72:44:5b:6d:92:18:03:00:
7d:48:b8:ac:2b:cd:9e:01:83:c5:77:85:b1:53:cb:c0:21:08:
36:c4:93:2c:93:0a:6d:5f:88:17:5a:6f:20:b0:9c:2f:ce:d8:
75:52:72:11:de:5f:05:fc:d0:34:c2:81:58:7f:fd:0a:90:df:
5f:01:91:1e:8f:06:2a:b8:b9:7b:ea:25:6e:4f:81:c1:51:2d:
b6:50:0f:0c:fc:85:23:a0:63:71:87:5e:2f:1a:74:45:ef:c7:
0a:d1:2e:86:ca:5d:53:ae:45:34:d9:63:d9:ac:57:b0:9c:12:
65:95:e1:03:32:89:73:da:c1:dd:d5:8e:ba:ee:fc:92:d9:84:
9c:73:f1:47:5e:27:5c:29:5e:1a:cb:37:80:16:19:f5:ad:9a:
53:44:3e:6b:45:3f:82:b8:91:cb:3c:aa:b3:26:b6:3a:35:1b:
28:f4:f8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:29 2025 by rpki-client