Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft
File: 5zkzwIr5wC27DT6X8fkJM_U1b8E.mft (raw, json)
Hash identifier: I7klbds06CGNtscuchUCCEIhQa1BBC2wrpC9/LnZV9E=
Subject key identifier: 43:6E:7F:D0:02:D4:A1:9C:BF:1E:77:51:AF:AF:30:9F:DD:01:40:F9
Authority key identifier: E7:39:33:C0:8A:F9:C0:2D:BB:0D:3E:97:F1:F9:09:33:F5:35:6F:C1
Certificate issuer: /CN=e73933c08af9c02dbb0d3e97f1f90933f5356fc1
Certificate serial: 01965B03109EEFC53F872181E335FBCA4007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft
Manifest number: 0C9E
Signing time: Tue 22 Apr 2025 01:00:49 +0000
Manifest this update: Tue 22 Apr 2025 01:00:49 +0000
Manifest next update: Wed 23 Apr 2025 01:00:49 +0000
Files and hashes: 1: 5zkzwIr5wC27DT6X8fkJM_U1b8E.crl (hash: IQkVettqaI9tImbfAQE96Pf7XZ6xB45Kf19LpMJGAAQ=)
2: iR2xhszrhu9CQV9Ilw41Wt-zCR0.roa (hash: GfiW21oyJHRpJ2RiePVt0wuNlZL5LHM/Gp8C0SkaZrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:10:9e:ef:c5:3f:87:21:81:e3:35:fb:ca:40:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73933c08af9c02dbb0d3e97f1f90933f5356fc1
Validity
Not Before: Apr 22 01:00:49 2025 GMT
Not After : Apr 23 01:00:49 2025 GMT
Subject: CN=436e7fd002d4a19cbf1e7751afaf309fdd0140f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:96:75:75:03:db:f9:2f:9d:ce:aa:e2:39:61:
7b:41:21:de:e0:e5:ba:e4:89:9e:2d:9b:41:ec:5b:
bb:2b:60:51:0e:54:95:6d:2d:17:d9:ba:72:1a:c7:
5f:3b:38:ee:64:d9:31:93:9b:4e:15:e7:73:c2:9c:
05:d9:96:54:64:b2:3e:be:1f:dd:b4:4c:e7:fb:48:
97:6d:75:eb:fb:c0:ac:46:c0:f8:ea:f5:00:de:2e:
48:19:64:59:3f:f1:51:dd:46:ea:24:f7:3a:87:36:
e7:1f:58:6c:59:55:15:26:1b:b4:da:23:b5:34:80:
8f:53:d7:45:a4:9e:70:b5:e2:16:dc:4a:a9:b2:3a:
b4:d5:5f:0a:d9:3e:d0:3a:f2:f9:92:40:ed:1d:04:
c3:45:05:32:13:24:1c:a0:41:8b:80:97:3b:dd:bb:
22:78:85:d7:dc:9b:96:4c:62:25:0d:08:34:e9:e6:
77:0e:61:78:fd:58:0c:69:0a:cd:8b:a2:46:3c:33:
64:4c:e4:e9:25:6a:b0:cd:54:99:40:8e:d7:9a:08:
e8:ff:d8:a5:1e:74:ad:8a:21:cc:6e:c1:1d:20:30:
b4:b0:5d:46:87:05:0e:3a:ce:40:34:c0:aa:c4:77:
1c:82:32:97:53:17:64:cf:17:58:26:c9:59:0c:50:
63:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6E:7F:D0:02:D4:A1:9C:BF:1E:77:51:AF:AF:30:9F:DD:01:40:F9
X509v3 Authority Key Identifier:
keyid:E7:39:33:C0:8A:F9:C0:2D:BB:0D:3E:97:F1:F9:09:33:F5:35:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:47:b6:12:44:22:73:47:78:ac:98:5f:61:e1:11:d4:21:f2:
9f:d0:2e:3c:1a:c1:3d:53:e0:b1:77:f5:83:e6:53:8b:cd:1f:
e6:91:15:07:65:36:30:59:77:8f:94:85:81:95:ac:50:b7:b9:
f4:97:51:66:d9:10:2c:b6:8c:a3:db:74:cc:5c:3b:0e:bf:44:
94:39:0a:67:89:12:61:f3:98:0d:7a:bb:dd:89:1e:50:b3:2f:
62:e4:f0:be:d8:d3:17:90:58:ee:24:d3:18:61:b3:52:6c:ce:
ec:a9:f4:90:24:00:ca:eb:47:7d:ba:51:5e:25:0a:bb:50:fd:
cb:a5:01:e1:b8:9a:6f:9c:18:74:6b:50:b9:15:23:61:a2:97:
2e:da:b1:8b:06:fb:5e:94:bf:29:b9:f4:8f:a0:dc:9b:d3:51:
d5:3d:3b:b1:90:c6:94:e5:9e:e8:67:8a:ea:63:84:42:5d:93:
06:47:14:30:08:bf:8e:00:1a:ce:39:92:51:3f:00:3c:c5:29:
67:ca:7d:59:05:c9:2d:e9:71:02:96:cc:f2:cf:76:15:10:30:
86:9e:3e:49:7e:29:ed:04:d9:a3:09:d3:df:66:49:6a:a1:d0:
bc:10:a4:d7:57:fb:c4:07:0a:84:72:e1:15:35:6b:d6:cc:f3:
d8:72:42:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:40:28 2025 by rpki-client