Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
File: 5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json)
Hash identifier: JsRW1FpI4armQX0MDGcf5n9zW8rXryAMOz3FGkUaRYk=
Subject key identifier: 78:EB:A8:86:98:94:EB:17:23:88:37:FB:5B:B4:8E:48:D4:F7:12:19
Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
Certificate issuer: /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Certificate serial: 0196BEC9CF2E4E5DB4410EB607D3D74A4EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
Manifest number: 0690
Signing time: Sun 11 May 2025 10:00:18 +0000
Manifest this update: Sun 11 May 2025 10:00:18 +0000
Manifest next update: Mon 12 May 2025 10:00:18 +0000
Files and hashes: 1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: ZLHLK7ZUswFSnBSAFBfyBjg2MU8TZVzk2dmIs7gtdGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:c9:cf:2e:4e:5d:b4:41:0e:b6:07:d3:d7:4a:4e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Validity
Not Before: May 11 10:00:18 2025 GMT
Not After : May 12 10:00:18 2025 GMT
Subject: CN=78eba8869894eb17238837fb5bb48e48d4f71219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:59:ed:97:be:6c:79:9f:92:db:3c:c9:f9:c0:
4a:84:74:19:0c:b1:31:6a:fe:60:c7:08:be:9c:cf:
b3:ad:98:00:30:15:8d:06:36:f1:92:ec:1b:a2:13:
ee:0e:03:50:00:df:3c:4f:66:6b:d5:53:13:9b:1b:
2a:38:e1:5b:16:52:26:b7:b3:94:6d:23:f9:fa:5f:
5f:a1:40:4b:07:d6:d4:e8:9e:03:c0:6c:3a:7c:41:
71:3d:90:67:77:de:aa:46:7f:f7:2f:46:ee:a6:00:
cc:45:de:53:60:f2:b2:d9:27:17:ae:15:75:be:16:
15:36:1c:53:a7:d2:5a:f2:21:c4:52:59:1c:a4:ba:
c4:8e:43:23:93:da:ae:a8:3a:04:94:27:81:c3:61:
76:ff:4d:29:9c:54:f8:e0:73:7f:2e:b3:e7:79:fc:
4c:80:d8:00:03:ee:d6:2b:61:3c:4d:28:11:e8:1f:
9b:e0:97:09:68:1e:38:51:2d:f6:fe:dd:3c:35:68:
1d:71:97:cb:3b:99:94:6b:6a:45:19:3c:9c:b3:3d:
ad:de:42:a4:c8:ef:5c:2f:82:42:7c:8a:0e:14:8a:
b1:84:fd:78:f2:09:5c:af:09:d0:b5:38:22:62:8e:
9b:68:e5:cd:d7:40:6e:cf:d1:8c:77:3a:b4:1a:d5:
35:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EB:A8:86:98:94:EB:17:23:88:37:FB:5B:B4:8E:48:D4:F7:12:19
X509v3 Authority Key Identifier:
keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:25:b5:81:b4:5d:9c:82:ec:b7:94:01:70:52:19:0f:34:c2:
85:72:c1:05:b6:9c:c1:5b:ea:4f:6c:b3:d6:ed:db:99:c3:63:
81:a1:55:78:5c:18:fe:e1:98:a7:04:3e:69:45:c9:23:5f:88:
1f:75:5f:13:d9:f1:67:08:fb:4a:0f:9a:b6:41:1a:37:5c:52:
75:20:37:08:0c:c6:eb:6e:79:cf:1f:84:8d:e5:dc:24:8b:d0:
06:f4:5b:f9:7a:18:99:dd:65:41:01:a8:2a:d0:5a:a4:41:54:
64:11:07:b8:0d:a0:79:66:9e:17:ce:cb:93:7a:94:31:25:1d:
42:25:df:01:6a:a3:1c:ba:12:37:48:8f:ee:33:a6:02:42:f2:
75:56:d0:c2:02:15:9a:5a:5e:3e:e8:53:11:46:72:20:71:3d:
f4:33:8c:f5:39:a9:fb:8f:9a:de:f9:29:11:ef:a4:6b:dc:49:
14:7d:2e:ee:d0:9f:96:58:de:e8:b6:59:3d:44:00:28:ff:00:
21:77:91:ae:97:3c:6c:41:4d:2a:00:28:26:5f:bb:0a:72:87:
ef:b1:fd:8a:e5:ee:12:52:46:93:29:4a:d0:37:c8:97:51:d6:
ec:42:4b:3c:5c:07:9f:f9:79:70:e0:9a:5d:53:35:04:37:10:
3b:ff:8d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:47:31 2025 by rpki-client