Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
File: 5ZAclsdH6RYsrv5QFArlMhsjxXw.mft (raw, json)
Hash identifier: hmsJAXdmU/rHXtpLkipmalk5v135sG4vqm7GprBsPbU=
Subject key identifier: 88:5D:79:E3:79:98:B8:5D:B8:76:31:20:2F:3C:58:25:06:52:FA:87
Authority key identifier: E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C
Certificate issuer: /CN=e5901c96c747e9162caefe50140ae5321b23c57c
Certificate serial: 01976960AC48392BE47FB98451866D916614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
Manifest number: D7
Signing time: Fri 13 Jun 2025 13:00:32 +0000
Manifest this update: Fri 13 Jun 2025 13:00:32 +0000
Manifest next update: Sat 14 Jun 2025 13:00:32 +0000
Files and hashes: 1: 5ZAclsdH6RYsrv5QFArlMhsjxXw.crl (hash: 8SuPO37mGy41cTSW33G/zrEj0hNLyTffXBFiTHr9xF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:ac:48:39:2b:e4:7f:b9:84:51:86:6d:91:66:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5901c96c747e9162caefe50140ae5321b23c57c
Validity
Not Before: Jun 13 13:00:32 2025 GMT
Not After : Jun 14 13:00:32 2025 GMT
Subject: CN=885d79e37998b85db87631202f3c58250652fa87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:16:2b:80:bd:d1:b8:58:d1:57:79:56:13:36:
43:d9:77:77:cf:ac:5c:97:81:60:10:8f:09:71:e2:
76:b8:9a:93:d2:e6:59:cc:43:f0:7e:7c:10:b1:d7:
68:00:c9:e3:98:16:88:d5:2b:d2:58:fd:58:f9:7e:
0c:6d:4d:12:57:97:98:49:e4:a6:89:39:38:e3:4f:
8d:86:be:80:25:ac:99:c0:3d:74:a4:1c:b9:6d:b3:
a1:5d:20:d0:fe:93:24:19:ae:4b:9d:9f:9c:6f:1b:
d6:05:83:b8:fa:c3:db:b5:50:f9:5b:64:f9:f2:ef:
ad:c7:a1:97:75:10:23:6e:56:60:f0:f1:24:ba:ac:
e4:d1:53:30:4a:30:0d:5c:16:94:84:d3:37:85:cc:
ea:5f:82:7a:d2:6d:18:22:ed:2e:a7:83:d6:54:1d:
b5:32:ea:f4:2a:bb:22:d9:19:b1:f3:c9:b4:70:0b:
89:95:ec:14:8f:6d:30:c8:ae:5b:63:4f:20:99:4f:
02:2a:96:bd:d2:7e:4a:47:d9:3d:8b:e6:0e:47:5b:
eb:32:92:0c:c7:03:4b:64:3f:5d:c1:f7:6b:3a:5b:
7f:a4:00:14:03:0e:cf:48:73:38:f8:30:c2:80:6c:
e7:f7:50:2d:da:92:b9:9e:d7:4f:86:af:fc:ac:b4:
4b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5D:79:E3:79:98:B8:5D:B8:76:31:20:2F:3C:58:25:06:52:FA:87
X509v3 Authority Key Identifier:
keyid:E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1d:6b:00:39:3e:61:1e:a9:97:db:27:9d:a3:9b:73:ba:fa:
33:2c:34:1c:4f:94:56:5f:3f:53:6a:3e:1b:23:68:08:fd:75:
f6:6e:76:ee:cd:15:63:12:77:c0:0b:e8:21:1f:f6:86:51:2b:
06:37:c2:dd:b2:8c:6f:ad:da:5a:7d:5c:82:1f:69:5b:5a:be:
f6:73:69:5b:ac:9c:e7:42:41:03:9a:0c:b5:47:7c:fc:e3:76:
ef:04:20:29:56:33:95:1f:49:e4:b5:54:e5:0c:ce:29:1b:0b:
ec:dd:cd:c5:1b:9d:16:d0:76:c4:52:d9:0f:e5:09:77:5b:f3:
ab:05:1d:27:fa:21:ee:78:f3:21:02:97:76:f7:50:06:62:a9:
2d:27:99:06:fa:6c:69:66:81:3a:4b:1e:d0:2a:33:f0:aa:ea:
6c:e5:78:4d:3e:f3:fd:c7:d4:ee:ec:2e:c7:60:8f:99:58:fb:
53:6a:4f:26:f3:a6:ad:3f:4d:94:bc:ba:ca:fd:1c:d3:4f:51:
91:26:39:9e:53:20:4d:fa:b5:d6:75:c8:b4:04:b2:01:02:d0:
24:99:f0:68:a7:e9:31:dd:81:d2:2e:ec:89:c7:10:17:39:a1:
08:81:cd:49:8c:30:30:4b:0c:3a:e4:25:d9:52:5e:85:67:f2:
d5:4c:2e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:19:20 2025 by rpki-client