Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft
File: 5zqmpwU3TttxYIbqzxppeqLwjmE.mft (raw, json)
Hash identifier: yMWYoB/n5hX0iDYBMWXcBNSVwmN/BieZhB6RcObaP0k=
Subject key identifier: 4C:5A:C1:D2:DB:32:1F:49:86:DA:70:25:B2:BA:C7:24:83:CD:40:E1
Authority key identifier: E7:3A:A6:A7:05:37:4E:DB:71:60:86:EA:CF:1A:69:7A:A2:F0:8E:61
Certificate issuer: /CN=e73aa6a705374edb716086eacf1a697aa2f08e61
Certificate serial: 0196DE5540D18828A63AE2187B8CD354579E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zqmpwU3TttxYIbqzxppeqLwjmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft
Manifest number: 0593
Signing time: Sat 17 May 2025 13:00:51 +0000
Manifest this update: Sat 17 May 2025 13:00:51 +0000
Manifest next update: Sun 18 May 2025 13:00:51 +0000
Files and hashes: 1: 5zqmpwU3TttxYIbqzxppeqLwjmE.crl (hash: v89bI3O++5eLOUN4cRoVLBZUN7GluCDTf4XmGH5Us7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zqmpwU3TttxYIbqzxppeqLwjmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:de:55:40:d1:88:28:a6:3a:e2:18:7b:8c:d3:54:57:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73aa6a705374edb716086eacf1a697aa2f08e61
Validity
Not Before: May 17 13:00:51 2025 GMT
Not After : May 18 13:00:51 2025 GMT
Subject: CN=4c5ac1d2db321f4986da7025b2bac72483cd40e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4c:df:ac:f3:06:aa:70:b2:ed:d7:d3:ea:49:
d0:65:17:bf:72:c4:02:28:7b:6c:d0:12:4a:67:d9:
b2:d3:02:0d:d3:0a:4a:29:b0:9b:7a:94:88:f9:94:
7e:a1:f5:c5:ed:f4:1f:e2:49:36:42:c1:4a:78:4e:
39:47:46:1f:25:4e:57:2a:d4:b0:4a:0f:f7:18:4d:
9e:33:d5:25:df:76:43:b2:a3:29:c5:e0:bd:d3:6f:
a5:a9:ac:ef:32:3d:c7:07:2d:c9:7e:26:5c:82:7e:
92:21:f4:7e:dd:75:67:79:df:a5:f6:58:1e:bd:3b:
d8:c2:ec:d1:cb:e7:6a:e0:4d:14:77:e6:dc:68:c0:
95:21:01:36:9f:88:34:40:83:c0:60:31:6d:06:79:
45:8b:a3:d4:e5:aa:57:2a:62:04:60:fd:f8:0c:30:
30:f2:33:0f:b7:60:62:8d:aa:0e:87:e5:47:de:77:
ab:14:d1:6c:d9:87:77:2f:2d:84:78:1e:32:2a:c7:
12:e8:b7:a7:fd:df:3a:26:96:bf:75:51:03:a1:93:
cd:0c:83:0d:52:83:72:f0:10:ca:21:08:f3:59:5e:
a2:5c:d5:b5:2a:a9:c1:58:b2:2d:f8:65:f8:9b:8b:
51:1f:e0:41:4b:2c:c9:92:8f:31:a5:18:d9:40:4a:
d1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5A:C1:D2:DB:32:1F:49:86:DA:70:25:B2:BA:C7:24:83:CD:40:E1
X509v3 Authority Key Identifier:
keyid:E7:3A:A6:A7:05:37:4E:DB:71:60:86:EA:CF:1A:69:7A:A2:F0:8E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqmpwU3TttxYIbqzxppeqLwjmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:73:87:11:1a:cb:79:3b:14:c4:40:ac:3e:ae:db:51:ef:58:
e1:1a:12:9d:a2:f0:f1:ad:fb:ae:38:74:53:9e:ec:a9:9a:bf:
38:ab:eb:d1:26:8e:b7:57:1d:06:f4:27:1b:24:a4:1b:80:50:
c3:a6:d7:2f:a2:e7:1a:1a:bb:8c:0d:01:ca:ee:65:82:7b:95:
91:4d:56:c3:55:05:8a:94:12:d9:46:38:b0:a3:6f:9e:3d:51:
6c:cd:a1:79:a9:37:58:43:4e:cf:df:0a:28:a4:11:15:37:42:
08:ce:e0:61:76:d4:21:bd:8d:10:5f:1e:b0:13:a3:67:1b:12:
aa:69:f3:b9:7b:33:10:74:8e:fe:51:c6:16:57:ed:39:8a:b4:
89:a0:eb:8a:c6:74:80:02:f8:72:61:97:fb:90:49:2c:59:2c:
f0:56:d4:ad:e1:be:a9:4a:b0:35:db:d2:d3:32:33:b0:18:cb:
40:95:7a:91:9c:22:6f:3b:ef:c9:7f:f0:d6:12:6c:6f:63:03:
80:92:e7:79:18:8f:7d:ac:23:e5:b9:ca:be:2c:52:11:8d:f0:
46:7b:b6:a4:f7:81:b0:87:5f:b4:77:40:3c:cf:3d:7f:b8:c2:
c9:c2:cf:89:1e:72:fd:44:84:c4:39:20:ee:6a:9e:c1:d2:f7:
93:9d:dc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:44:17 2025 by rpki-client