Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
File: 5zfJpEKotKTJEvEbwrbTzxAK30I.mft (raw, json)
Hash identifier: 1s68dF4gTfQsMxIYiK1oqfNSdEUPNZGbdQUUlUAey2s=
Subject key identifier: BA:A6:82:63:ED:AA:B1:C6:C5:38:50:3A:A8:08:1F:CA:8E:79:2E:4B
Authority key identifier: E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
Certificate issuer: /CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Certificate serial: 019691F170A7D9431117D54D4440E384B39C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
Manifest number: 151F
Signing time: Fri 02 May 2025 17:00:41 +0000
Manifest this update: Fri 02 May 2025 17:00:41 +0000
Manifest next update: Sat 03 May 2025 17:00:41 +0000
Files and hashes: 1: 5zfJpEKotKTJEvEbwrbTzxAK30I.crl (hash: kHA+seDXECMrHF8QanZOeZGLVSFO/ikvxbZinz295G0=)
2: 9Gaptu7OegDOTWgwtAQ4TQ0AHTI.roa (hash: rkESQzEqL5Foo1j28OK1lOudeGd3GtI+57JqeG8POXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:f1:70:a7:d9:43:11:17:d5:4d:44:40:e3:84:b3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Validity
Not Before: May 2 17:00:41 2025 GMT
Not After : May 3 17:00:41 2025 GMT
Subject: CN=baa68263edaab1c6c538503aa8081fca8e792e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:0e:34:a6:cf:8f:e8:71:db:0a:ca:56:73:
bc:72:58:4f:34:5c:04:60:40:bb:a0:49:d9:c9:64:
36:7a:44:e1:b3:55:5e:ef:87:dc:2e:cb:f9:00:d2:
37:9a:2d:ff:12:62:46:85:04:a4:1d:55:2b:ed:07:
5b:9a:71:93:9a:7f:cd:70:f7:81:2a:df:f5:86:db:
9e:16:4c:d3:ad:bd:8a:62:45:ee:cd:f6:de:b6:12:
e8:73:b7:23:13:01:99:ad:12:46:f6:e4:ff:d2:d1:
61:b6:4a:f5:c7:a2:98:bc:5e:e7:72:6e:80:57:ae:
7e:2c:50:98:e3:00:f8:82:89:28:b2:8a:1e:0b:91:
e0:1f:80:d0:55:1f:67:da:7d:b6:63:5d:fb:de:35:
bf:20:ff:b9:a1:03:3e:01:93:c5:9d:bd:b1:57:bb:
a2:c4:19:a4:28:18:67:35:06:cc:bf:fc:e7:21:60:
36:85:47:43:d5:88:a0:75:13:09:08:31:3b:0d:ed:
cd:cc:77:ca:32:48:1c:6b:de:87:4b:e6:ca:6a:73:
b2:62:8d:e9:ce:a0:94:53:10:83:0c:d0:e5:b3:31:
f5:50:76:ae:8f:aa:10:29:4c:49:89:4f:10:9d:11:
d3:df:20:39:7d:5e:02:e8:1e:e3:7e:ed:49:4d:9a:
6a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A6:82:63:ED:AA:B1:C6:C5:38:50:3A:A8:08:1F:CA:8E:79:2E:4B
X509v3 Authority Key Identifier:
keyid:E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c0:60:07:48:90:ff:28:80:8f:f1:ca:64:a6:39:56:e6:04:
bf:34:8a:49:ac:c3:32:4e:90:76:84:3e:85:f8:b5:5e:4f:94:
b7:a2:59:27:6e:c5:83:bd:3e:e9:2f:28:ae:18:bc:70:98:5d:
74:40:ea:07:7c:21:bc:be:c5:f9:9d:8c:20:ac:13:7f:56:f2:
46:62:bb:c7:76:a3:69:6a:46:a3:4d:c0:21:74:45:d7:fd:67:
30:9a:65:58:a3:fa:fd:0c:47:e8:b7:68:3a:a1:cc:9b:2e:6f:
3a:7b:19:53:b2:21:a0:15:1e:e9:cc:d3:fd:a4:cc:8c:9e:4b:
ed:32:5b:1f:f1:86:48:02:f8:5e:6d:0e:f7:30:56:0d:29:87:
31:07:a9:89:d1:ce:8c:4e:7f:93:c1:1c:70:97:1c:79:3b:ea:
0b:f1:fc:7b:ed:61:13:13:f9:2f:32:a5:71:44:d7:22:57:0e:
06:7f:bb:4a:f4:67:ec:f9:de:29:a1:fa:b5:41:dc:8d:26:c6:
7b:f6:a0:a7:ac:8c:78:0b:52:c3:b0:6e:d0:04:d3:49:79:15:
ce:3c:49:9c:24:d1:bb:b3:70:f4:0c:e1:4a:39:f9:fd:d2:0e:
33:f5:8c:3f:42:fb:4a:14:0e:8f:17:c0:76:d2:32:35:de:75:
6a:65:f9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 18:31:46 2025 by rpki-client