Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
File: 5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json)
Hash identifier: oF8Q6Ec6f91lX4hWvSS/bCD8BUrz0T5bzuKrniX8484=
Subject key identifier: CF:55:3D:A2:CE:53:C7:97:00:A4:BB:D1:4B:B8:5F:33:16:13:E0:26
Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
Certificate issuer: /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Certificate serial: 01964331C7EDC9B0C528E4F0D0D60F610AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
Manifest number: 0650
Signing time: Thu 17 Apr 2025 10:00:58 +0000
Manifest this update: Thu 17 Apr 2025 10:00:58 +0000
Manifest next update: Fri 18 Apr 2025 10:00:58 +0000
Files and hashes: 1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: zyVWIRH+uv5TwLSwaOl3c0LHUJqmqNOdNRu0i/wwjsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:31:c7:ed:c9:b0:c5:28:e4:f0:d0:d6:0f:61:0a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Validity
Not Before: Apr 17 10:00:58 2025 GMT
Not After : Apr 18 10:00:58 2025 GMT
Subject: CN=cf553da2ce53c79700a4bbd14bb85f331613e026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:67:0e:e8:34:eb:16:82:91:2e:53:e7:94:2a:
ed:69:6f:69:e8:36:4e:92:3c:b1:4f:98:2e:d0:8b:
e9:16:ae:f9:dd:9e:e5:b1:8a:9b:7e:90:c5:62:38:
97:30:85:92:e3:58:1a:30:57:f3:2d:09:1b:33:2a:
28:72:72:cf:9f:a1:f2:8e:2f:a4:17:4a:87:a3:4d:
65:20:ae:f1:9d:25:4e:39:3a:bc:69:d8:b7:08:18:
4f:e9:d6:60:fa:07:7d:c3:81:dc:85:9f:52:f5:a9:
3d:17:92:15:bb:d1:85:0f:99:e3:e1:72:22:83:5d:
0d:e7:09:da:94:92:55:a0:82:ea:90:8c:60:6b:86:
67:15:47:10:cc:09:f6:23:93:e6:33:aa:fd:b7:87:
b9:82:4a:39:0d:61:4b:8e:9f:29:59:ce:03:da:c1:
96:e2:b0:37:13:cc:4f:84:89:64:79:35:ec:9d:b8:
68:f2:63:be:89:58:87:d7:52:a9:0b:fd:cf:c0:d6:
01:3a:16:67:16:8d:dc:b0:fe:37:29:7f:03:c5:a7:
ef:51:42:5c:2a:51:5f:fb:44:6b:3b:c5:68:40:b4:
b9:f4:4e:5f:da:34:3c:b6:09:fe:de:5f:6b:ee:00:
d8:89:56:6f:3f:10:cf:cd:40:87:e2:9a:c1:05:6e:
37:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:55:3D:A2:CE:53:C7:97:00:A4:BB:D1:4B:B8:5F:33:16:13:E0:26
X509v3 Authority Key Identifier:
keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:94:23:cd:37:32:93:6f:41:a7:49:92:d9:5b:03:9c:1e:24:
98:fe:75:40:e4:5f:30:9c:16:0b:95:b4:4a:39:c0:35:44:8f:
53:ba:e4:db:04:4d:f2:cd:57:86:8b:46:2d:2f:d3:38:86:cc:
72:77:c2:21:74:5c:87:65:50:33:db:ee:56:60:3a:92:75:56:
1f:3f:77:7f:e3:7e:cd:c3:c3:df:f1:d1:c1:96:28:57:cc:9e:
3a:13:5d:51:0e:67:a7:b4:f2:b8:de:94:f4:de:e5:77:7c:3d:
12:5a:d7:cb:6a:7e:b0:33:f8:3a:77:e3:4d:29:d9:41:05:27:
68:33:d2:40:91:86:89:fb:a2:82:5d:df:cb:0b:56:24:c0:b8:
81:e0:e8:8e:db:f3:36:fe:1b:93:d8:c8:75:69:e2:21:e3:14:
6c:81:ca:d9:4b:c7:39:86:ed:96:fb:02:eb:34:db:20:38:9a:
95:5c:c6:26:55:2c:07:6b:c4:88:aa:4d:c0:54:22:2e:80:9a:
2f:3a:5c:21:75:13:3e:54:4f:db:56:14:c1:24:12:4b:e4:b9:
99:b2:49:23:4f:27:2e:8c:12:cc:51:a5:4c:90:14:c5:5a:d1:
2d:e6:af:46:d0:54:66:bc:9b:42:1b:12:6c:59:2e:89:9c:3c:
e7:a6:2a:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZDMcftybDFKOTw0NYPYQrUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Mzg2YzE3YjQ1NjEwYjU4YmJlMDljZDMwY2E5ZmIwYzE5
NjFmZDMwHhcNMjUwNDE3MTAwMDU4WhcNMjUwNDE4MTAwMDU4WjAzMTEwLwYDVQQD
EyhjZjU1M2RhMmNlNTNjNzk3MDBhNGJiZDE0YmI4NWYzMzE2MTNlMDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGcO6DTrFoKRLlPnlCrtaW9p6DZO
kjyxT5gu0IvpFq753Z7lsYqbfpDFYjiXMIWS41gaMFfzLQkbMyoocnLPn6Hyji+k
F0qHo01lIK7xnSVOOTq8adi3CBhP6dZg+gd9w4HchZ9S9ak9F5IVu9GFD5nj4XIi
g10N5wnalJJVoILqkIxga4ZnFUcQzAn2I5PmM6r9t4e5gko5DWFLjp8pWc4D2sGW
4rA3E8xPhIlkeTXsnbho8mO+iViH11KpC/3PwNYBOhZnFo3csP43KX8DxafvUUJc
KlFf+0RrO8VoQLS59E5f2jQ8tgn+3l9r7gDYiVZvPxDPzUCH4prBBW43BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9VPaLOU8eXAKS70Uu4XzMWE+AmMB8GA1UdIwQY
MBaAFOc4bBe0VhC1i74JzTDKn7DBlh/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXpoc0Y3UldFTFdMdmduTk1NcWZzTUdXSDlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80YTM2ZGYtNDgwOC00OGU2LTg5NmYt
NmJiZDY4NWQ5MjMxLzEvNXpoc0Y3UldFTFdMdmduTk1NcWZzTUdXSDlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC80YTM2ZGYtNDgwOC00OGU2LTg5NmYtNmJiZDY4NWQ5MjMx
LzEvNXpoc0Y3UldFTFdMdmduTk1NcWZzTUdXSDlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJQjzTcy
k29Bp0mS2VsDnB4kmP51QORfMJwWC5W0SjnANUSPU7rk2wRN8s1XhotGLS/TOIbM
cnfCIXRch2VQM9vuVmA6knVWHz93f+N+zcPD3/HRwZYoV8yeOhNdUQ5np7TyuN6U
9N7ld3w9ElrXy2p+sDP4OnfjTSnZQQUnaDPSQJGGifuigl3fywtWJMC4geDojtvz
Nv4bk9jIdWniIeMUbIHK2UvHOYbtlvsC6zTbIDialVzGJlUsB2vEiKpNwFQiLoCa
LzpcIXUTPlRP21YUwSQSS+S5mbJJI08nLowSzFGlTJAUxVrRLeavRtBUZrybQhsS
bFkuiZw856YqyA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 16:49:58 2025 by rpki-client