Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
File: 5ZAclsdH6RYsrv5QFArlMhsjxXw.mft (raw, json)
Hash identifier: 7cDE4ey8oM7n1nxTl3lwgnJgEEZxmf03/5jo68XNRnY=
Subject key identifier: 70:A3:ED:08:03:77:7D:BC:C6:BA:54:66:63:70:C6:BD:25:FA:91:1A
Authority key identifier: E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C
Certificate issuer: /CN=e5901c96c747e9162caefe50140ae5321b23c57c
Certificate serial: 01969E9AF7B2E4BB7813634C0E09D5267EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
Manifest number: 6E
Signing time: Mon 05 May 2025 04:01:18 +0000
Manifest this update: Mon 05 May 2025 04:01:18 +0000
Manifest next update: Tue 06 May 2025 04:01:18 +0000
Files and hashes: 1: 5ZAclsdH6RYsrv5QFArlMhsjxXw.crl (hash: CM1yN4WeiKG/1PxdFBvVRWZbGjuNM3+5sX1v/5piYrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:f7:b2:e4:bb:78:13:63:4c:0e:09:d5:26:7e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5901c96c747e9162caefe50140ae5321b23c57c
Validity
Not Before: May 5 04:01:18 2025 GMT
Not After : May 6 04:01:18 2025 GMT
Subject: CN=70a3ed0803777dbcc6ba54666370c6bd25fa911a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:18:ca:c0:85:a8:f5:b9:75:1c:cd:54:b5:18:
d9:68:b8:a1:1d:7d:e1:17:5b:35:a6:9d:53:81:88:
c6:33:80:94:2f:0f:5b:c1:f7:ec:a0:09:c5:8c:4d:
4e:4a:5e:f5:af:81:3c:78:89:1b:ac:20:ac:af:a1:
d4:67:3b:ef:81:da:26:07:99:34:cb:a9:bd:eb:81:
86:35:1b:9b:3c:fb:dc:d3:a9:d0:ba:7e:06:93:2d:
4a:cc:52:4d:c1:04:9f:a1:6c:3d:7a:2a:45:93:2f:
10:eb:8c:cd:98:fa:ad:a0:80:94:af:17:a1:87:26:
58:4d:83:ef:0a:b4:05:4b:51:ef:02:1e:5b:8a:30:
b9:62:20:e0:9a:5b:42:da:b8:5c:0c:85:36:ad:a5:
c5:b2:55:e4:46:3e:09:7f:15:f9:e8:fa:35:10:ba:
ef:f8:e3:c7:9a:56:65:b0:c7:5b:4c:21:5b:40:df:
3c:44:05:81:53:6d:bb:47:4b:2c:23:a7:06:a1:8e:
f8:21:f3:27:7b:52:47:1e:1f:5e:09:8b:fa:24:d0:
82:3f:55:6f:0d:e7:23:5d:c0:cd:39:96:68:ca:24:
4e:f5:bf:73:06:1f:3f:f6:44:5b:8d:01:d7:be:18:
23:57:5a:60:ca:25:10:18:1e:e5:05:d0:e4:8d:89:
17:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A3:ED:08:03:77:7D:BC:C6:BA:54:66:63:70:C6:BD:25:FA:91:1A
X509v3 Authority Key Identifier:
keyid:E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ff:b0:36:2c:d6:e7:b3:29:1d:20:5a:c9:91:8e:02:8a:dc:
fe:a5:59:7f:39:a2:72:03:d5:cb:44:a8:fe:fb:ea:67:49:6e:
f6:65:7a:01:66:b3:a2:2c:e5:53:cb:c8:c6:18:d5:06:f1:fb:
2d:b4:af:45:0e:a4:25:5f:9d:d2:cc:6e:f0:f0:56:71:9e:31:
aa:8a:6c:92:75:30:a2:92:e0:91:a1:64:cc:72:91:5e:12:f5:
e7:05:b6:6f:f6:f7:fd:24:cf:a7:a4:c3:fb:0b:e1:e3:b5:95:
35:c3:cc:01:83:f5:2e:0a:58:00:3e:e1:98:94:8c:64:95:20:
ba:e3:10:25:9c:1d:ca:f9:d1:7f:05:03:7d:eb:46:37:9c:51:
90:1f:5a:b2:2b:16:93:06:6f:c2:6f:ff:2d:2e:69:40:1e:8a:
ff:c5:d7:be:14:c6:e5:6d:b2:da:d8:07:bf:12:4c:f5:96:a9:
a1:c0:0d:d0:b3:1e:22:b1:4d:12:40:d2:d7:11:71:25:14:cc:
21:6b:50:8a:f7:d9:43:3e:9a:f2:1c:f5:6f:31:42:99:53:98:
ac:96:5b:8e:1d:66:bd:35:78:65:b4:a5:4d:07:9d:03:3d:97:
89:2f:e7:b8:33:f3:57:f3:8b:82:1f:54:62:c7:d3:60:a4:34:
50:4f:c5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:04:00 2025 by rpki-client