Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
File: 5zfJpEKotKTJEvEbwrbTzxAK30I.mft (raw, json)
Hash identifier: EHlazk6Ku9uqiBS8gc4qjY5865xMQrtEczPSI/wSzmc=
Subject key identifier: FE:E9:6A:05:03:10:23:3A:01:3B:B1:9F:70:10:F5:85:19:09:CC:55
Authority key identifier: E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
Certificate issuer: /CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Certificate serial: 0196D776FC7128E834D00DEF9F2683AFDB47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
Manifest number: 1543
Signing time: Fri 16 May 2025 05:00:21 +0000
Manifest this update: Fri 16 May 2025 05:00:21 +0000
Manifest next update: Sat 17 May 2025 05:00:21 +0000
Files and hashes: 1: 5zfJpEKotKTJEvEbwrbTzxAK30I.crl (hash: ROQo+indgzC5/PDmqH0ND+q/oyodV2/m5kOdWd4f320=)
2: 9Gaptu7OegDOTWgwtAQ4TQ0AHTI.roa (hash: rkESQzEqL5Foo1j28OK1lOudeGd3GtI+57JqeG8POXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:76:fc:71:28:e8:34:d0:0d:ef:9f:26:83:af:db:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Validity
Not Before: May 16 05:00:21 2025 GMT
Not After : May 17 05:00:21 2025 GMT
Subject: CN=fee96a050310233a013bb19f7010f5851909cc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9a:49:18:a4:c7:1a:a1:43:ac:74:47:39:8f:
e7:52:6e:87:99:9f:55:88:71:cc:76:62:9f:b9:4d:
aa:67:bb:45:b3:52:05:3a:5d:f1:71:1b:1d:32:9b:
ab:bd:01:cb:f3:33:1b:e6:5c:4f:2f:0d:49:e7:4c:
ab:05:02:78:53:ed:03:4b:29:f4:e2:3e:e9:e8:1f:
1a:73:5b:b4:e2:06:e9:45:d0:77:73:31:11:fc:56:
13:fc:d9:33:ac:54:cd:b7:40:0a:9d:b7:4d:ed:cf:
7d:19:5a:08:5e:4e:5f:35:ce:07:91:f2:31:54:db:
b2:07:a2:cb:4e:ef:b3:99:81:8f:fb:8c:f4:4c:c2:
48:c0:65:e9:f4:7d:8a:a1:24:7d:e5:6a:fc:f8:b7:
1f:79:e4:6f:48:ab:c2:37:05:af:b1:51:82:66:86:
7b:eb:25:df:73:c1:a3:a0:d6:fa:51:64:51:b9:9e:
06:16:a0:c9:41:b7:4a:03:d9:23:6e:4a:77:9f:0f:
65:30:b2:92:f3:4c:cd:79:bc:1c:ee:9c:3f:d2:43:
cb:de:0f:a5:8f:66:c3:be:f1:8c:12:93:57:15:61:
48:0c:95:94:eb:79:1b:d0:8c:b8:44:4d:c9:05:82:
6d:0f:bf:94:92:7f:4f:06:e2:0b:ee:ea:cb:10:84:
5b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E9:6A:05:03:10:23:3A:01:3B:B1:9F:70:10:F5:85:19:09:CC:55
X509v3 Authority Key Identifier:
keyid:E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:9c:36:43:ae:b1:1f:87:ce:f4:a6:d6:96:2a:13:99:1c:01:
10:97:a4:74:85:40:41:f2:42:72:ee:04:43:a7:23:23:cf:ef:
f1:ef:82:53:b1:51:57:71:9a:ff:5c:20:fb:56:48:8a:20:5c:
f7:27:27:03:c9:ce:e3:c1:ed:eb:fc:bc:7e:ea:c1:98:d1:cd:
9b:da:24:a3:b6:87:cb:43:5a:17:21:b0:18:5f:88:e5:41:90:
38:a3:59:ce:43:85:41:ad:a0:b6:79:9f:74:f0:ee:0c:a2:ff:
5b:08:b5:a4:54:66:9c:4f:6d:72:75:4b:38:8b:f3:a2:d6:9f:
6d:73:38:b2:0e:fa:4c:28:5d:8e:f9:a5:24:b8:66:63:a4:06:
35:61:d1:57:8c:49:26:33:65:a2:f3:c6:2f:64:84:db:39:11:
c4:99:5b:9e:68:76:f6:5b:93:a2:4e:05:9b:a1:99:2c:67:03:
05:3c:ad:0b:5c:85:50:d7:f7:1b:78:79:04:6b:4e:2d:fd:a0:
04:8d:f1:09:46:69:80:ae:ea:42:f6:5a:1b:ac:7a:48:3a:13:
ae:da:44:79:d8:cf:2a:3b:2f:b0:bc:f6:b3:56:84:0b:b1:d7:
99:e5:35:0d:d0:ec:37:30:07:53:0b:80:e8:64:ab:cc:ba:c9:
68:54:de:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:32:28 2025 by rpki-client