Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
File: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft (raw, json)
Hash identifier: UlnH3nDu03T6Z9889nQqv7hIqM7ZV9GL7kd/0e6Dwxc=
Subject key identifier: 64:BA:6A:28:DD:E1:13:2E:39:32:26:3A:38:51:C6:F0:44:35:F5:77
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Certificate issuer: /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial: 01969E2C90B0976F8F64F85A3A139B37326F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
Manifest number: 1004
Signing time: Mon 05 May 2025 02:00:42 +0000
Manifest this update: Mon 05 May 2025 02:00:42 +0000
Manifest next update: Tue 06 May 2025 02:00:42 +0000
Files and hashes: 1: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl (hash: PW+qBjfv9Xm/ItSt3ETsmmB2TuF3Nm1Mq043EbAA3hk=)
2: F2wMIUjJA3quoSXko94UBe524io.roa (hash: ohOfNDpG7k23hMoeoYfuhVGMBn9BMoNT8oiUfgHvVI4=)
3: bE9Rz-JEgnY1OAj9NvLaQK985n4.roa (hash: oGUETehCghwYm99EJnoOLB6Ay5aT0Q2AYzU5/8NcyJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:90:b0:97:6f:8f:64:f8:5a:3a:13:9b:37:32:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
Validity
Not Before: May 5 02:00:42 2025 GMT
Not After : May 6 02:00:42 2025 GMT
Subject: CN=64ba6a28dde1132e3932263a3851c6f04435f577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7e:ed:c2:fb:5f:0b:4d:74:b0:ee:e9:cf:00:
73:9a:fc:ff:0d:ad:7d:4c:be:7b:4d:05:5e:f2:84:
dc:b8:19:28:ff:23:35:27:a2:3d:91:2c:69:b6:a6:
a9:af:ff:91:38:f3:fa:60:99:50:5e:22:4f:40:23:
62:5e:54:39:b2:f1:c1:2d:26:84:95:f5:b5:01:ee:
ae:2e:fe:f1:28:ec:21:4f:ed:fc:a6:7c:a3:79:f1:
1a:9b:7b:45:72:7b:d9:1a:86:55:87:1e:43:03:df:
85:03:16:b0:30:df:24:31:ae:ea:54:ec:1e:e1:3d:
af:71:4b:0a:03:86:9d:7b:74:ee:a4:ef:50:36:65:
69:28:c7:15:a0:49:f2:bb:b9:38:50:ed:e7:24:71:
99:b3:76:07:2e:46:fa:f1:fd:93:9a:6b:0d:41:4d:
84:e4:0e:0f:69:f6:7d:ab:73:ba:1c:0f:17:5d:dd:
5d:b2:99:6b:21:1d:cd:a1:e3:1f:77:2b:e9:d6:04:
58:bf:a0:b0:72:0b:74:b2:5c:b8:c0:96:d1:82:15:
70:81:16:02:98:44:b6:7a:2c:58:6c:3c:3e:fc:fd:
65:35:49:45:11:64:f5:53:96:45:ca:60:66:ac:bd:
2c:e2:c2:29:1d:c6:a5:d6:0d:ca:29:44:e8:d1:e3:
e5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BA:6A:28:DD:E1:13:2E:39:32:26:3A:38:51:C6:F0:44:35:F5:77
X509v3 Authority Key Identifier:
keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a0:1d:cc:e5:15:0a:be:35:84:73:15:8a:cd:cb:92:e3:7d:
3c:85:52:55:82:2c:21:65:33:0d:af:e6:e0:7e:f1:2c:37:57:
90:66:d4:52:c0:bb:d8:1b:35:91:18:49:2e:cc:e1:aa:52:fb:
40:2d:2a:35:a0:2c:a2:64:96:01:57:26:2f:1a:1f:b4:af:c6:
69:7d:bc:52:b7:72:95:84:04:d6:a1:50:d4:07:e6:8f:39:83:
cd:fd:45:3e:14:6c:f8:89:67:36:ff:81:d5:e9:a0:1a:30:a9:
85:ee:92:1b:be:41:9a:77:ff:2f:75:59:bf:1b:18:d2:ce:38:
3a:19:f7:5a:6f:c6:cc:f9:47:e7:ef:dc:58:a2:5e:54:86:40:
37:a6:4f:93:db:92:81:5d:53:58:81:75:07:da:d2:9e:b6:69:
4a:4b:85:f1:8d:4c:7c:b6:c4:21:f0:e1:08:cd:6b:b6:3c:0d:
ed:0b:11:10:70:ff:93:24:5f:f8:ac:1c:54:a2:98:fd:03:7e:
23:b1:2e:53:3f:61:4f:a9:9d:ff:6f:ce:14:0d:a3:f5:01:86:
fa:e6:3f:3d:af:35:d8:a4:cf:c2:00:7d:31:8c:8b:d5:7f:de:
ea:19:50:80:a7:00:7b:c6:08:92:62:ae:98:59:43:71:3f:f8:
c8:be:d3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:52:14 2025 by rpki-client