Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
File: 5zcPsJ5SI60eRI9MDxYv6plae1Y.mft (raw, json)
Hash identifier: 6nPwpKIm5dIE05bhsZCiq6Zmg1dh9bR7GVxB5kUpIoc=
Subject key identifier: 05:F3:B4:2B:1C:23:40:39:07:07:21:5F:54:56:D6:4C:F7:DF:0D:01
Authority key identifier: E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56
Certificate issuer: /CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
Certificate serial: 01974A7AFD7E6B56C177A1FBE5CFCEB48110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
Manifest number: 139C
Signing time: Sat 07 Jun 2025 13:01:03 +0000
Manifest this update: Sat 07 Jun 2025 13:01:03 +0000
Manifest next update: Sun 08 Jun 2025 13:01:03 +0000
Files and hashes: 1: 5zcPsJ5SI60eRI9MDxYv6plae1Y.crl (hash: y+qRbz9hLOpFGmKQnHP4JWkhEHH9rDnZvuoLvW/AjXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:fd:7e:6b:56:c1:77:a1:fb:e5:cf:ce:b4:81:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
Validity
Not Before: Jun 7 13:01:03 2025 GMT
Not After : Jun 8 13:01:03 2025 GMT
Subject: CN=05f3b42b1c2340390707215f5456d64cf7df0d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a7:7d:37:d6:a1:db:bc:4d:4b:b7:05:28:f5:
d8:23:43:15:dd:81:ec:a2:dc:99:72:01:32:75:3d:
3e:bb:fb:cc:31:ae:60:82:a8:e3:d5:de:45:02:f0:
37:b2:d3:c9:e4:a5:3d:04:5a:a4:cf:f4:b8:91:1a:
01:9a:5f:b4:13:cb:71:6e:23:74:90:f2:ff:0f:d2:
d5:69:09:38:40:3a:3e:e0:a5:cb:1f:c7:22:0f:1b:
26:d7:25:75:f6:d7:99:80:99:43:17:34:33:25:ed:
88:01:ac:b5:20:c5:97:89:48:a2:03:d9:34:e8:a8:
3d:1a:16:57:41:0e:43:c8:18:60:06:3d:82:cf:d0:
3b:c2:6d:5e:e1:25:0a:1b:05:b3:bb:51:ae:bb:13:
60:be:2f:53:a2:17:11:9f:36:8d:de:25:b0:76:71:
ee:a3:d6:cb:f9:7c:94:b0:af:c3:46:5c:21:08:a4:
a7:0a:e5:98:c3:37:0e:05:78:b8:e1:ff:95:a0:73:
ae:da:76:59:15:3c:4e:71:6b:54:30:e3:da:4b:d2:
0b:8a:04:df:d6:f2:6b:24:83:04:ca:17:02:ce:2c:
03:f1:a0:9a:b3:ab:bb:37:5d:59:0e:0d:9e:f5:ef:
36:fa:bc:65:bf:e2:b8:6d:b5:28:88:25:b9:dd:48:
2e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F3:B4:2B:1C:23:40:39:07:07:21:5F:54:56:D6:4C:F7:DF:0D:01
X509v3 Authority Key Identifier:
keyid:E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7a:90:c8:d7:29:d1:b4:25:bb:72:23:a2:29:41:a2:aa:86:
68:f5:d7:f8:91:aa:8c:a8:5d:d4:c9:b3:cf:40:f0:04:9d:d6:
32:48:cb:d8:ac:ee:dc:42:65:85:15:b7:ae:14:1f:62:eb:c4:
24:a9:4a:54:7c:74:43:31:24:b6:d1:c0:cd:66:a2:6f:2e:59:
f7:27:7c:3f:70:15:af:b2:88:7d:9e:18:b3:91:67:88:68:63:
26:24:2f:cb:36:f8:03:85:74:4e:3b:27:22:4b:0d:39:0d:b9:
cf:d3:9b:59:e2:82:16:fb:00:13:ea:00:52:75:ca:81:84:ff:
4b:9d:85:fb:3e:2b:f2:d0:2f:c4:2f:3d:7c:12:86:83:91:df:
0b:0a:47:b7:16:44:30:5a:a7:fe:6c:42:49:51:76:db:53:5c:
46:c5:bc:ee:37:4e:b6:0b:1d:16:5d:20:a0:77:39:9d:af:5e:
19:c2:45:bb:5b:72:8c:6e:40:26:74:e8:1a:88:88:5f:20:be:
c3:5d:1b:c8:80:54:51:02:7d:f7:94:79:4d:86:7e:0f:36:40:
36:3d:fe:b3:a0:89:77:be:27:d1:70:56:f7:ff:c0:be:e4:8d:
88:3e:be:19:77:6e:db:be:92:77:23:49:3e:ed:54:57:4e:e1:
da:9f:0c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:26 2025 by rpki-client