Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
File: 5zcPsJ5SI60eRI9MDxYv6plae1Y.mft (raw, json)
Hash identifier: d7yAEK6YR0DUDi3LeY4zw7S8sTf1i/Fdxr10WPsw3S8=
Subject key identifier: 8B:22:93:3F:31:5F:5E:93:E6:24:4B:BB:72:A5:0E:03:DA:59:7E:EF
Authority key identifier: E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56
Certificate issuer: /CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
Certificate serial: 0196515BA228405210955FAE7AEEA2A0DD34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
Manifest number: 131B
Signing time: Sun 20 Apr 2025 04:01:21 +0000
Manifest this update: Sun 20 Apr 2025 04:01:21 +0000
Manifest next update: Mon 21 Apr 2025 04:01:21 +0000
Files and hashes: 1: 5zcPsJ5SI60eRI9MDxYv6plae1Y.crl (hash: wc4dTLCb56q69A6+jfgt1c8VX1uLXq90RgUP6nLKDX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:a2:28:40:52:10:95:5f:ae:7a:ee:a2:a0:dd:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
Validity
Not Before: Apr 20 04:01:21 2025 GMT
Not After : Apr 21 04:01:21 2025 GMT
Subject: CN=8b22933f315f5e93e6244bbb72a50e03da597eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:c9:02:34:ce:32:6e:5d:83:54:be:ee:e9:
7b:d3:38:8c:1d:bb:ac:0c:41:3e:36:bd:9f:56:4f:
e9:95:2a:17:57:f9:8e:b1:de:93:f9:d2:7a:70:10:
28:72:96:43:2e:b5:1f:8f:db:20:36:9c:19:7b:95:
ad:4d:94:9b:e0:4e:96:da:34:2f:b8:33:e6:56:a6:
ef:54:1e:a5:9b:57:89:ce:c5:5c:83:44:ca:6b:e8:
f5:c6:9c:f7:05:ee:06:68:eb:56:f0:42:57:41:53:
9a:0f:dc:2a:72:5c:a0:34:84:e9:08:68:b9:72:8e:
4a:7f:3a:00:f8:fc:9d:29:34:b8:18:4c:b3:ea:d2:
41:7e:29:e9:46:65:84:73:28:a6:9a:30:f8:2b:bb:
b2:22:39:c2:cb:9c:58:dd:eb:07:59:9a:ba:ba:62:
24:27:76:d2:9a:5c:c0:b8:2d:5d:f3:7a:0e:03:c9:
69:e6:2d:4b:b0:ab:e1:c3:2a:6b:c2:a3:4d:3f:80:
78:05:70:ce:1a:be:2c:6c:f8:05:5d:a6:4d:0a:d2:
4c:ab:36:80:0a:a2:b7:9b:b2:4f:8f:b8:68:a5:8a:
04:53:e4:4c:dc:96:a3:6f:c9:58:60:23:4a:ab:c1:
7d:7c:ec:20:fe:5e:da:87:56:83:92:7f:06:0b:90:
d5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:22:93:3F:31:5F:5E:93:E6:24:4B:BB:72:A5:0E:03:DA:59:7E:EF
X509v3 Authority Key Identifier:
keyid:E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e0:c0:91:32:9c:2c:a2:4b:c5:42:c9:76:95:64:69:a7:2d:
3f:d0:d3:b8:2f:88:ca:c1:bd:59:00:d4:4f:b9:dd:8d:0e:c5:
fb:e2:56:6f:07:ad:b0:92:32:45:f9:1f:d5:cd:b5:59:c9:b8:
a2:e8:f2:f1:45:63:b7:9f:dd:e4:61:e2:41:d9:ae:ae:4d:1a:
e4:b0:a2:ff:f6:b0:03:f9:f1:b4:60:bc:fa:ed:72:2a:25:1e:
a3:f8:7f:b4:f9:62:31:b5:1c:3a:90:0b:7d:a9:53:ca:7c:47:
9a:c9:61:16:54:1a:da:4b:fb:3d:9a:18:ae:9c:5b:a2:df:7b:
8f:0d:39:2d:82:78:53:b9:31:d1:b3:ad:2a:28:3b:23:ea:ba:
67:bb:ed:1c:7e:48:2f:be:f5:23:d5:5e:b9:c5:dd:75:c8:fc:
87:1a:65:d2:0f:93:86:80:44:9e:43:76:76:d8:b5:8d:0b:40:
29:3c:49:2d:4b:23:ad:d1:bc:7b:85:9e:84:81:d5:19:4a:fd:
ad:9c:f4:e6:14:ec:ea:3e:80:a2:34:e8:bd:48:0f:ca:4d:e1:
9e:a9:fa:8d:77:94:b4:a5:58:38:a2:1b:13:13:8d:5b:e6:2b:
d9:b8:b3:3e:92:cb:74:02:8a:ba:c3:11:06:8c:53:39:d7:c5:
ed:8c:38:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:39:37 2025 by rpki-client