Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
File: 5z3xVch6WQrB5ThUTPM1bk_IF0g.mft (raw, json)
Hash identifier: GrnATh12B/eqmXiTrV7AbpVNaFNZCTbeY8s9stYYJZo=
Subject key identifier: E0:70:94:52:4F:21:95:FD:BC:32:55:29:27:2E:1F:94:E4:3D:F0:80
Authority key identifier: E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
Certificate issuer: /CN=e73df155c87a590ac1e538544cf3356e4fc81748
Certificate serial: 019652005E61283A9C612B277C5C17151682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
Manifest number: 149E
Signing time: Sun 20 Apr 2025 07:01:17 +0000
Manifest this update: Sun 20 Apr 2025 07:01:17 +0000
Manifest next update: Mon 21 Apr 2025 07:01:17 +0000
Files and hashes: 1: 5z3xVch6WQrB5ThUTPM1bk_IF0g.crl (hash: 49mh66aDaz+Dy8ECOcCalZXpDB95oM2GoronqnF4pzI=)
2: pOwukpz6uQtAZQ26wgZyWA0w-Pc.roa (hash: 0LNaJ+BbQgNK+Ci6/J4w+3/assiqy/xOnI28WaXKzkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:00:5e:61:28:3a:9c:61:2b:27:7c:5c:17:15:16:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73df155c87a590ac1e538544cf3356e4fc81748
Validity
Not Before: Apr 20 07:01:17 2025 GMT
Not After : Apr 21 07:01:17 2025 GMT
Subject: CN=e07094524f2195fdbc325529272e1f94e43df080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b6:8f:42:ab:94:d2:cb:e8:1f:00:f8:8f:3b:
48:89:af:8b:1a:6d:85:35:56:68:bc:af:cb:71:ba:
9b:1b:b9:29:2d:7a:85:73:00:4a:f1:37:d0:a0:5d:
c1:c0:7a:df:77:28:3b:93:29:8d:94:70:62:54:29:
0c:c7:98:8c:10:e7:e8:33:40:87:92:82:ce:f5:83:
b7:2d:a9:d0:ab:54:9f:69:bd:46:6d:60:ca:0c:d1:
3b:28:50:39:b5:91:01:07:24:9c:58:0a:96:9e:ba:
07:74:bb:f3:8b:1d:50:50:68:15:c0:91:ac:2c:cf:
87:bc:1c:e7:08:b7:8f:8b:0b:4b:1b:58:57:46:7a:
f5:05:46:cc:9c:e1:77:f3:2b:38:5f:df:7a:44:d6:
79:1c:cb:bd:28:f6:81:03:78:7d:ff:6f:34:4d:70:
0d:62:ba:d2:30:72:b1:60:52:93:99:22:a3:fa:df:
91:9c:a7:37:a7:b1:f4:ca:33:6a:97:85:bc:01:f6:
1d:5a:bd:ff:1c:b2:8b:fb:f2:2f:80:e8:20:bf:c7:
77:bb:34:c6:4e:2c:f6:39:52:2c:90:30:69:1b:51:
99:0c:3b:4b:dd:25:3f:c4:4e:0c:4b:e6:b8:78:ba:
9b:a6:2f:03:d8:b2:14:13:19:38:b1:3a:4e:19:33:
e3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:70:94:52:4F:21:95:FD:BC:32:55:29:27:2E:1F:94:E4:3D:F0:80
X509v3 Authority Key Identifier:
keyid:E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:6a:64:9b:b9:de:a0:9b:29:c7:4c:fe:60:1a:75:37:a9:7f:
96:a8:31:25:f2:b5:dc:95:45:8f:f4:28:b9:13:18:46:e0:52:
a1:9a:90:ed:a3:4f:e2:26:c5:fc:09:18:7c:71:4d:a7:4e:33:
01:be:d4:3a:16:59:3f:e7:f5:3a:95:16:a3:9a:93:23:84:c0:
12:c4:7d:8e:05:da:07:d1:61:fd:fd:b1:be:5e:26:29:33:09:
15:e9:ef:b2:f7:5d:8e:04:56:db:3c:81:15:e7:22:3a:bf:fa:
29:d2:07:ec:61:05:32:00:56:2b:99:b8:bf:df:d6:59:8f:7a:
b5:9a:51:e4:b1:ae:5e:20:98:59:ef:b4:74:b2:2e:81:12:4d:
45:9a:d1:7c:95:a8:f0:56:12:3d:6e:f0:7b:59:25:cc:ce:b9:
a9:71:af:f4:0e:01:28:4c:d3:bb:b0:4a:78:cf:9f:f3:eb:b1:
08:2e:69:5a:35:32:de:00:9f:6c:5c:0a:9b:11:42:7a:ac:3b:
48:ff:f5:5b:ce:b1:91:20:73:74:9f:38:f2:9f:48:36:f4:3c:
a9:05:86:b7:13:1c:9b:0e:43:26:36:d0:03:9f:de:64:d9:36:
0e:d1:09:bf:11:6d:70:29:e9:30:a5:e0:2d:42:72:f8:4e:63:
b4:fe:57:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:08 2025 by rpki-client