Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
File: 5zqbo56LjiuL9OiCUq-_3czN0aE.mft (raw, json)
Hash identifier: P99iqTSNS9Haaj4bmVP3p8n8S7M4yCcMWBQJkx00kSk=
Subject key identifier: 7E:AC:5A:D2:74:36:D2:B0:E8:1B:DE:31:66:9F:4D:93:5B:2A:EF:9F
Authority key identifier: E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
Certificate issuer: /CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Certificate serial: 0196857F3082FF3E51A57585AB634A0F4F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
Manifest number: 0E3E
Signing time: Wed 30 Apr 2025 07:00:27 +0000
Manifest this update: Wed 30 Apr 2025 07:00:27 +0000
Manifest next update: Thu 01 May 2025 07:00:27 +0000
Files and hashes: 1: 5zqbo56LjiuL9OiCUq-_3czN0aE.crl (hash: NEUuTciLWqdy4Ge5nFsD7dv4pbfVXG3JHZTJYE249gQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:30:82:ff:3e:51:a5:75:85:ab:63:4a:0f:4f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Validity
Not Before: Apr 30 07:00:27 2025 GMT
Not After : May 1 07:00:27 2025 GMT
Subject: CN=7eac5ad27436d2b0e81bde31669f4d935b2aef9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:ee:18:b8:e1:2b:82:aa:e9:78:db:1d:98:
22:95:90:70:b8:be:ab:f7:d0:0f:3c:61:b8:8b:b9:
69:c6:39:05:14:36:77:64:de:59:bf:57:a0:16:1d:
15:68:44:ec:f6:de:88:c5:44:18:fc:a1:55:f9:cd:
32:37:02:28:b5:10:4f:91:86:81:91:d8:6b:6a:fc:
5b:cb:5e:38:a9:da:c7:3c:1f:18:2e:53:6e:55:92:
0d:26:2f:fc:b0:4a:09:d8:7d:0a:9f:87:69:19:02:
c2:6c:39:69:37:57:8b:c8:05:8b:4d:78:7f:61:20:
0c:40:89:4f:2c:57:87:fe:f2:22:c3:82:e4:75:6a:
f3:04:e6:69:50:92:5e:52:06:37:2b:06:2c:4d:89:
63:36:73:a0:ce:54:31:74:1a:42:2e:04:c4:65:3d:
cd:49:bc:a8:45:57:fd:b8:55:ee:61:13:49:1c:b8:
21:8c:5f:72:52:b2:6d:8e:fc:50:61:f5:44:c8:b2:
b4:8a:0b:a0:23:5c:18:dd:ad:c4:f3:ea:ae:ba:bd:
dd:8a:4b:b3:aa:c1:36:ce:35:e0:46:9c:05:2b:b1:
61:ac:4a:25:0d:6b:41:9c:af:61:04:4c:f7:ee:e6:
19:e3:03:e4:1f:b7:62:ff:03:ea:8b:49:52:13:fc:
8a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AC:5A:D2:74:36:D2:B0:E8:1B:DE:31:66:9F:4D:93:5B:2A:EF:9F
X509v3 Authority Key Identifier:
keyid:E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0e:7c:8d:ab:4b:8e:1f:90:e2:d4:45:57:b3:98:21:2a:a2:
b8:99:7b:a3:88:38:34:e9:bb:1a:1b:4d:09:d3:7b:b4:8c:bd:
d0:47:7a:93:7a:9a:5c:1a:fa:b4:b2:8b:53:95:97:e8:49:70:
7d:07:c6:8e:96:27:de:36:42:9c:fa:28:e1:c9:c1:16:19:8a:
31:7f:77:c6:74:39:06:73:09:42:9e:80:a8:1f:02:7d:0b:fb:
92:5d:aa:2d:42:1e:f7:27:d9:cc:ff:37:59:3f:8e:c7:23:bb:
fb:ce:2b:13:45:3c:fa:d2:d8:80:4e:99:cd:46:36:f3:b8:c3:
a3:8d:c7:47:69:62:d1:83:d5:11:68:db:62:91:97:e5:bd:9d:
b3:fa:07:1b:0d:b3:58:b9:0e:57:5a:10:68:01:9c:7e:cd:b3:
53:8e:67:96:b9:e8:1f:8f:7b:46:9f:0f:bd:f5:b1:20:7c:19:
41:8c:b2:7f:27:71:a7:05:b7:0d:e4:ea:ff:3f:ad:1d:0f:a6:
fa:06:13:bd:22:fb:05:30:95:d3:1c:62:ea:ff:2a:49:35:c8:
56:1b:d6:62:62:96:61:06:3f:bc:40:f1:78:9c:b1:68:0d:9b:
24:b8:27:86:aa:14:77:dd:a6:9f:30:8a:f3:ad:47:73:7b:7a:
0d:20:bf:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:09:17 2025 by rpki-client