Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
File: 5zfJpEKotKTJEvEbwrbTzxAK30I.mft (raw, json)
Hash identifier: gs4VSnLouBSw617iMAwLptJ8eFGOtItBFI0x1EQ/3ck=
Subject key identifier: 6D:05:EC:3E:E6:70:20:CA:10:CC:31:A2:41:24:68:BE:68:4E:67:14
Authority key identifier: E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
Certificate issuer: /CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Certificate serial: 01968C266F0A58B3A2F384049F63CBD742AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
Manifest number: 151C
Signing time: Thu 01 May 2025 14:00:50 +0000
Manifest this update: Thu 01 May 2025 14:00:50 +0000
Manifest next update: Fri 02 May 2025 14:00:50 +0000
Files and hashes: 1: 5zfJpEKotKTJEvEbwrbTzxAK30I.crl (hash: DLXExK6ohwrjRkIdv45QvCnqFmvmbzDAoerqeT4y3aQ=)
2: 9Gaptu7OegDOTWgwtAQ4TQ0AHTI.roa (hash: rkESQzEqL5Foo1j28OK1lOudeGd3GtI+57JqeG8POXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:26:6f:0a:58:b3:a2:f3:84:04:9f:63:cb:d7:42:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Validity
Not Before: May 1 14:00:50 2025 GMT
Not After : May 2 14:00:50 2025 GMT
Subject: CN=6d05ec3ee67020ca10cc31a2412468be684e6714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:45:23:43:14:80:ab:46:c6:08:e0:c8:23:
28:85:7d:da:11:a0:36:93:28:44:25:1d:55:0c:64:
52:d9:6c:93:8a:22:25:f3:73:52:f8:a9:09:77:fb:
9f:85:37:84:72:c9:f1:06:b9:38:17:51:a7:7b:86:
de:5a:48:66:a2:23:38:c9:c2:f5:5f:5e:cc:0e:a1:
56:7e:ce:87:52:72:36:e7:94:a2:1c:09:73:a7:e9:
19:87:d5:50:4f:98:7d:a9:9a:25:76:ad:63:87:c9:
d0:35:94:2e:38:b8:d1:4c:70:93:c4:cf:ff:b9:13:
71:0b:f5:20:57:92:d1:6a:9d:24:ee:26:bb:a5:7b:
c2:75:60:84:20:fb:14:ed:16:0f:67:99:d3:98:27:
f5:4c:a9:ec:f0:93:9e:38:90:92:e9:81:61:87:b4:
ed:68:da:4d:62:7e:be:ab:bf:76:f9:13:89:e3:d1:
66:67:ae:c4:97:d4:8c:8f:5b:7b:00:7e:3b:2f:52:
30:eb:07:6a:ac:09:a8:06:98:d7:24:58:cc:70:4a:
8e:e6:97:dc:4f:81:3a:a5:49:18:98:9b:7e:b2:49:
6b:04:5f:74:23:c7:fe:2f:30:88:5a:6d:01:ae:6a:
1c:56:50:75:60:7e:74:39:c4:df:ac:5f:34:c0:21:
c9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:05:EC:3E:E6:70:20:CA:10:CC:31:A2:41:24:68:BE:68:4E:67:14
X509v3 Authority Key Identifier:
keyid:E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d4:6e:2d:c0:07:34:24:db:9a:9e:f6:fd:84:d0:dd:92:e5:
cd:b8:f6:48:e9:93:b9:91:5c:b1:41:1e:f2:4e:bc:8b:e6:dc:
31:38:c6:52:44:56:ea:42:b4:f5:d3:0e:f4:19:eb:ca:c0:1e:
6a:90:71:73:9c:12:4e:4d:f8:0b:e9:f4:8c:2f:66:2b:14:ef:
fe:25:a4:f4:2b:bb:94:07:90:6e:c2:c1:92:a7:d3:27:3c:5f:
bf:12:c0:04:5c:a1:68:5e:f1:91:db:d3:a9:17:f0:7f:ab:9b:
3e:14:5b:fa:aa:62:0a:3b:fc:77:99:07:bf:82:e0:4b:c5:0d:
6a:ce:38:6e:4c:56:ad:91:55:f9:6f:45:c6:94:df:22:8f:bf:
26:09:49:6d:3e:79:e2:7d:2a:00:2d:4e:79:37:f6:6a:e8:fb:
c7:fa:a2:72:db:d9:6b:15:3e:e5:62:f6:93:fd:fc:db:05:1f:
a2:6a:a2:e5:95:c4:10:a3:3b:b8:44:73:6a:46:88:4f:d4:bc:
80:98:17:f5:5a:bb:66:9e:94:29:b5:7f:ec:37:80:af:39:a0:
39:5f:83:bd:2e:10:62:ad:8c:37:73:39:a6:51:91:bb:71:3c:
9a:ba:9f:fc:fd:bd:de:88:6f:3d:03:ea:75:7f:8c:3e:b3:28:
d5:72:0e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:24:38 2025 by rpki-client