Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.mft
File: 5zil-TBkI5q0_3k9-Kh54bqo4cc.mft (raw, json)
Hash identifier: 8RT8i4KvIweoI3QdgyW61+Zx21aSAfUJAeNBXcy79Zc=
Subject key identifier: AF:AA:57:AE:A0:15:BE:7F:22:EF:8D:C1:53:A0:DF:9D:4D:60:AD:4F
Authority key identifier: E7:38:A5:F9:30:64:23:9A:B4:FF:79:3D:F8:A8:79:E1:BA:A8:E1:C7
Certificate issuer: /CN=e738a5f93064239ab4ff793df8a879e1baa8e1c7
Certificate serial: 01975C4A2AFA5086B4094D9E19931168931F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zil-TBkI5q0_3k9-Kh54bqo4cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.mft
Manifest number: 1284
Signing time: Wed 11 Jun 2025 00:00:53 +0000
Manifest this update: Wed 11 Jun 2025 00:00:53 +0000
Manifest next update: Thu 12 Jun 2025 00:00:53 +0000
Files and hashes: 1: 5zil-TBkI5q0_3k9-Kh54bqo4cc.crl (hash: 0tdvJUHZBnRgRhUtYFWpDcgOGKmUjy945YSutYkpYtk=)
2: 8LEaGJ2CuKxeHjxR7nj6ufV6Y7Y.roa (hash: oPPydQy+Sv4ZpQjf6oDCm3YgcVIg/Za6wdL618vPB84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zil-TBkI5q0_3k9-Kh54bqo4cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:4a:2a:fa:50:86:b4:09:4d:9e:19:93:11:68:93:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e738a5f93064239ab4ff793df8a879e1baa8e1c7
Validity
Not Before: Jun 11 00:00:53 2025 GMT
Not After : Jun 12 00:00:53 2025 GMT
Subject: CN=afaa57aea015be7f22ef8dc153a0df9d4d60ad4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5d:2b:ab:97:1d:0a:e7:17:4c:3e:5c:e9:38:
e4:ad:ca:17:f5:3b:9d:73:72:3e:20:c2:ef:8a:09:
9c:67:dc:89:d7:ec:7b:8c:36:27:5a:f0:1e:59:57:
fc:99:a9:25:0e:41:d8:27:b5:b6:bb:4b:e6:49:a3:
93:f2:0e:42:7b:da:b0:bb:5e:ad:13:6b:32:43:a5:
31:f1:8e:02:a2:e2:24:2b:7c:6c:65:d2:ae:8a:74:
4b:43:3d:a1:45:9d:19:f5:bb:a5:96:8a:f7:b2:1d:
b7:20:74:99:4e:3c:71:2c:0d:e0:2d:f4:0a:79:7f:
54:13:0b:81:8e:53:06:e3:98:42:b9:93:82:2a:c3:
e8:58:52:2a:6e:6f:4d:bf:0f:a7:17:e3:3e:9b:a7:
07:83:95:b5:0a:31:cf:65:16:dd:d7:e7:e5:aa:88:
2c:b8:4e:9c:3d:ca:a9:e7:a6:12:4b:3f:57:f9:8e:
75:06:ff:e0:4d:f4:e7:a8:fa:ef:86:7c:bd:06:ec:
09:d1:01:7e:2b:92:ad:67:01:b2:7b:a3:17:c2:14:
f3:1d:d4:60:ea:35:23:09:ee:45:2c:cf:00:a2:66:
eb:ff:da:45:c6:d4:2e:1b:7b:cd:17:86:6a:38:ee:
53:ff:eb:7b:97:14:a7:de:31:a7:fd:51:1e:82:22:
fd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AA:57:AE:A0:15:BE:7F:22:EF:8D:C1:53:A0:DF:9D:4D:60:AD:4F
X509v3 Authority Key Identifier:
keyid:E7:38:A5:F9:30:64:23:9A:B4:FF:79:3D:F8:A8:79:E1:BA:A8:E1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zil-TBkI5q0_3k9-Kh54bqo4cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:13:45:da:55:ce:00:66:d3:4c:be:3a:f8:0c:a1:25:c4:ac:
9b:31:41:fa:f2:38:bf:e7:5e:a4:70:8e:55:f2:3d:07:4d:76:
94:00:4e:d0:f3:33:e9:77:1b:f1:fb:2f:0f:d6:3e:c1:a4:30:
c8:ba:ec:0d:88:57:28:f8:b9:04:d1:80:f7:ad:d2:98:52:82:
c5:a7:49:e9:9b:72:4a:2a:f2:80:bc:65:f9:a5:f0:e8:b0:ac:
9b:16:6e:3c:e5:18:b8:1b:05:70:bf:b1:2e:cf:72:7e:63:06:
c6:73:37:6d:8e:73:e1:28:7b:f5:ba:c2:52:65:53:b6:eb:0f:
03:24:06:4f:75:76:56:00:7e:75:73:4c:17:4d:92:3c:c3:de:
22:d1:07:e8:29:3a:f1:05:30:0d:ed:03:d5:e3:ae:35:e6:4f:
c2:83:a8:f3:28:d7:e1:8e:59:dd:25:e6:14:4b:72:13:74:6a:
21:f4:b7:c8:c4:16:a9:60:a7:7c:7c:1b:4a:0c:fd:9c:9f:aa:
2b:78:74:ec:e3:42:92:89:ae:53:58:c5:e1:08:fd:9b:0a:b0:
df:99:69:6b:26:23:ea:96:c9:96:34:b9:2b:72:50:af:48:02:
46:f4:19:03:db:6d:87:54:22:1e:f4:cb:a9:e6:b6:75:6e:a6:
ac:41:52:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:16:25 2025 by rpki-client