Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
File: 5ZAclsdH6RYsrv5QFArlMhsjxXw.mft (raw, json)
Hash identifier: KcZz4o3dbMAXkGHLJNrNYEl8PODefKbO+GAM9SyB1Ds=
Subject key identifier: 18:0B:B5:B6:71:2B:54:8B:51:C0:1B:57:C4:A7:57:3C:A4:BA:BC:90
Authority key identifier: E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C
Certificate issuer: /CN=e5901c96c747e9162caefe50140ae5321b23c57c
Certificate serial: 0196741EBB81DFC6EFB5889B39A65E98002F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
Manifest number: 58
Signing time: Sat 26 Apr 2025 22:01:33 +0000
Manifest this update: Sat 26 Apr 2025 22:01:33 +0000
Manifest next update: Sun 27 Apr 2025 22:01:33 +0000
Files and hashes: 1: 5ZAclsdH6RYsrv5QFArlMhsjxXw.crl (hash: W5VLB+2vchuuKKr31FOXaWD4XyRkSfSTBolC45ucVZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:bb:81:df:c6:ef:b5:88:9b:39:a6:5e:98:00:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5901c96c747e9162caefe50140ae5321b23c57c
Validity
Not Before: Apr 26 22:01:33 2025 GMT
Not After : Apr 27 22:01:33 2025 GMT
Subject: CN=180bb5b6712b548b51c01b57c4a7573ca4babc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:89:39:49:7f:a8:2e:32:ce:72:75:e6:18:
79:23:89:fd:99:8e:21:7b:ec:69:64:3f:73:70:29:
a9:bc:63:ae:63:fe:28:dc:2e:06:8e:c9:4c:52:22:
c1:56:ff:ab:52:4f:ca:81:7a:c9:0a:47:fd:8c:7d:
50:f9:bf:c3:20:c9:a0:60:93:88:7a:b2:68:14:d6:
bb:51:fc:6b:d5:14:9b:70:51:ce:1a:46:14:dd:dd:
64:f0:f2:5d:f5:32:ae:62:8f:0b:48:dd:0a:64:36:
d9:0f:05:17:24:e5:18:49:46:e6:c1:32:e5:1b:35:
8f:ae:c5:57:d8:66:b1:09:70:c2:16:7b:17:2f:7d:
6f:da:48:43:d0:d0:5f:9e:37:bb:eb:b6:8c:80:e4:
e6:6e:62:f6:ba:35:6b:52:78:d3:a2:b1:7c:ef:7a:
00:29:00:8c:14:4f:4f:fa:5f:f8:aa:2e:96:1a:40:
7e:e6:de:1b:de:d5:b6:12:b6:9f:eb:34:3e:8f:e2:
61:5a:af:d6:ee:3f:01:47:25:60:9d:14:b2:07:6b:
f7:d7:2b:e0:35:b2:27:92:e8:8b:1d:ef:ab:81:3b:
3a:95:e3:4c:d0:77:52:6b:31:8e:d7:a9:ec:37:47:
68:4e:41:73:f1:ea:35:f4:6e:88:ab:53:39:ab:b0:
87:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0B:B5:B6:71:2B:54:8B:51:C0:1B:57:C4:A7:57:3C:A4:BA:BC:90
X509v3 Authority Key Identifier:
keyid:E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2d:3b:39:7a:19:b4:d7:93:f3:de:54:ed:30:b2:91:65:8f:
df:1a:76:34:98:53:3e:8a:9d:3e:a7:27:23:a4:8d:dd:43:74:
fc:60:bf:1d:e9:61:25:58:5b:b2:6d:06:21:67:1a:46:8d:45:
b2:25:56:79:80:9c:75:12:62:fe:94:ee:60:65:69:89:a8:1c:
c4:00:ec:ab:c6:9d:12:c1:0b:ec:af:75:ff:b4:3a:cc:f1:5d:
76:90:26:31:a4:bb:19:a6:df:11:c1:90:c4:dd:26:ce:17:5d:
e9:25:8c:cf:22:9e:31:0b:f5:c5:74:95:d6:ec:90:f8:fd:ec:
a1:23:55:bf:ce:6e:a6:76:07:49:4e:f1:ee:82:a0:aa:77:5d:
9a:71:c2:f5:57:76:c1:f2:fc:c6:6d:9c:ba:98:0a:60:b2:7a:
f5:42:26:34:08:cd:92:a3:2d:96:5d:20:e7:77:4c:c9:e6:fd:
27:73:52:57:83:02:4d:16:f3:8c:e9:0f:ee:58:1b:7a:0f:c1:
a7:f4:76:b0:8e:7f:2b:3e:e2:f6:b3:3a:55:9d:8d:bc:3f:b3:
76:28:38:31:51:5e:f7:2f:54:7d:08:6e:9d:bd:6f:11:01:10:
e7:26:d8:52:e1:83:0a:07:c0:aa:8e:97:0a:b5:db:2c:ca:96:
e0:00:cd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:53:07 2025 by rpki-client