Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.mft
File: 5zil-TBkI5q0_3k9-Kh54bqo4cc.mft (raw, json)
Hash identifier: SUSItXV5zBBXsYOB1flQEDH2JQqQCVv6gu8t56trzd0=
Subject key identifier: E2:9A:4B:70:CB:06:DB:C6:B6:23:66:A5:0E:5A:91:9A:7F:72:E8:4B
Authority key identifier: E7:38:A5:F9:30:64:23:9A:B4:FF:79:3D:F8:A8:79:E1:BA:A8:E1:C7
Certificate issuer: /CN=e738a5f93064239ab4ff793df8a879e1baa8e1c7
Certificate serial: 019767E08CDE637498DBAF9DE535F9E8E1AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zil-TBkI5q0_3k9-Kh54bqo4cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.mft
Manifest number: 128A
Signing time: Fri 13 Jun 2025 06:00:58 +0000
Manifest this update: Fri 13 Jun 2025 06:00:58 +0000
Manifest next update: Sat 14 Jun 2025 06:00:58 +0000
Files and hashes: 1: 5zil-TBkI5q0_3k9-Kh54bqo4cc.crl (hash: sRYfAnGBPeqmCnFSrCUZfKzRTR9twTeAssiSlzxja/0=)
2: 8LEaGJ2CuKxeHjxR7nj6ufV6Y7Y.roa (hash: oPPydQy+Sv4ZpQjf6oDCm3YgcVIg/Za6wdL618vPB84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zil-TBkI5q0_3k9-Kh54bqo4cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:e0:8c:de:63:74:98:db:af:9d:e5:35:f9:e8:e1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e738a5f93064239ab4ff793df8a879e1baa8e1c7
Validity
Not Before: Jun 13 06:00:58 2025 GMT
Not After : Jun 14 06:00:58 2025 GMT
Subject: CN=e29a4b70cb06dbc6b62366a50e5a919a7f72e84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:4a:3b:ca:b7:9a:8d:29:ec:78:ef:c8:d4:
da:58:28:a7:98:cd:51:a0:df:8f:74:9c:f7:f9:5f:
6c:51:82:d4:95:8b:f5:39:db:27:31:e8:76:63:eb:
91:e5:a9:96:06:89:47:ec:ad:78:07:e0:d3:b6:94:
55:63:42:87:48:00:6d:f4:0d:52:b5:61:b5:c8:3d:
df:20:29:31:31:17:77:10:c1:b1:24:3a:11:a0:a3:
47:8d:91:f6:f8:d7:0c:10:5b:d6:39:b7:36:8a:cf:
c1:f0:31:08:ab:43:59:6a:51:cb:34:94:30:62:56:
a5:2b:7f:43:32:05:7b:4b:ff:f2:76:b3:d7:24:3c:
11:a6:2d:42:fd:75:ae:47:69:3f:0e:bf:5b:9a:85:
80:9b:aa:07:15:83:34:7d:ac:60:fd:d0:bf:47:10:
5b:bf:cf:d2:60:7d:d5:2a:cb:09:df:0a:b4:b5:c4:
e2:d1:c0:33:bd:6e:7e:f3:5d:4d:6f:6c:50:dc:d3:
fb:bb:61:b1:47:5b:ae:06:fd:21:e4:54:d6:8c:36:
10:57:68:80:12:e2:d6:b7:3d:c2:19:31:1d:d5:87:
13:75:6e:59:99:f5:d7:ae:85:6d:80:d0:00:f0:86:
f6:42:2d:44:bb:ea:b3:d9:9f:f2:6b:d7:e4:15:0f:
b2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9A:4B:70:CB:06:DB:C6:B6:23:66:A5:0E:5A:91:9A:7F:72:E8:4B
X509v3 Authority Key Identifier:
keyid:E7:38:A5:F9:30:64:23:9A:B4:FF:79:3D:F8:A8:79:E1:BA:A8:E1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zil-TBkI5q0_3k9-Kh54bqo4cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:24:56:a9:60:15:80:99:6e:2e:cd:ac:77:68:12:15:34:c5:
1e:38:75:ec:e6:dc:09:66:34:7c:d2:64:7e:b0:63:3d:9f:2d:
f8:53:36:ec:7a:a4:48:73:24:53:0e:d9:37:51:34:38:32:5e:
44:d5:d0:2b:47:0f:cb:57:8d:6b:0c:ad:fe:e9:cf:5e:8e:e7:
f8:b8:1e:c7:f0:48:03:f5:22:3d:65:ce:94:af:b5:f2:f0:c5:
6a:eb:24:63:c9:38:99:32:cb:18:cc:da:d6:98:06:fc:d1:51:
37:ce:5b:b6:a7:61:4a:eb:d0:94:d2:7f:2a:70:95:f1:01:19:
30:32:56:6b:2e:56:e7:27:9e:31:48:92:c7:70:2d:bd:81:09:
d3:06:b3:d0:1c:d3:a8:18:8f:88:d0:e3:ae:4c:91:f6:ab:d9:
0f:99:2d:98:a6:51:4e:f7:a5:45:6e:6a:e3:3f:1e:fe:03:ee:
9e:2e:56:70:53:07:42:0e:fe:1b:2e:2e:89:45:8f:0a:ac:31:
c0:09:dd:0b:89:3f:51:e1:de:87:da:07:92:58:46:60:49:59:
c7:05:85:56:cb:e5:e4:88:b8:30:98:27:50:c1:8f:7c:c5:b7:
8d:bd:89:06:72:b7:4a:b2:c4:e3:4c:82:d9:06:6c:82:f1:13:
95:85:89:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:07:44 2025 by rpki-client