Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
File: 5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft (raw, json)
Hash identifier: lVHlpe0ZZ26QvsByjDwX1j5BqkIpfeH9RCyQV4NeSBw=
Subject key identifier: CE:18:45:57:0A:D8:D3:0D:77:45:7C:56:0B:2C:86:95:CD:19:04:B5
Authority key identifier: E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA
Certificate issuer: /CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
Certificate serial: 01967C7C4D83DE7D47B626E6D6A5517D6F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
Manifest number: 150F
Signing time: Mon 28 Apr 2025 13:00:42 +0000
Manifest this update: Mon 28 Apr 2025 13:00:42 +0000
Manifest next update: Tue 29 Apr 2025 13:00:42 +0000
Files and hashes: 1: 5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl (hash: XVyPdwPFSDpNE3Tlq9g8SrC4gGD4G1sPZh4oclmUN58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7c:4d:83:de:7d:47:b6:26:e6:d6:a5:51:7d:6f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
Validity
Not Before: Apr 28 13:00:42 2025 GMT
Not After : Apr 29 13:00:42 2025 GMT
Subject: CN=ce1845570ad8d30d77457c560b2c8695cd1904b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ae:4f:fe:92:d3:49:38:dd:8f:48:e8:94:8a:
5f:f3:60:39:d0:ef:d5:b5:74:92:91:2f:cc:4a:79:
b8:48:83:5d:0d:21:fc:a7:58:47:d2:3e:c9:94:1a:
8f:47:02:c3:7b:39:cb:c9:5b:34:1d:ec:2b:fe:ee:
6b:8d:c8:70:0a:52:16:4a:49:70:c8:e6:9c:67:1e:
42:88:90:52:f9:b2:a1:90:cf:18:c6:72:90:5a:28:
93:d9:f3:89:1d:7c:de:aa:0e:84:1a:83:b3:75:c1:
da:53:10:7d:8c:54:6e:f2:a8:7c:eb:c2:f4:b8:61:
a9:cd:24:4d:ee:ab:d7:18:6a:93:d7:78:ea:49:b0:
9b:5e:41:06:ae:f7:dc:30:d9:bd:fd:f9:2c:6e:6e:
f7:27:30:81:25:53:49:6f:2d:76:82:c8:dc:9b:fd:
a3:d1:dd:8a:04:b4:f4:b9:2f:9f:aa:e7:58:f6:b1:
af:76:6d:a2:fb:a3:54:49:17:1a:25:40:ce:1e:db:
57:40:60:55:d1:65:83:f6:32:74:14:bb:42:8f:8d:
20:b4:b9:5a:49:8d:01:b5:09:69:6b:8e:16:27:70:
5b:57:bc:d2:56:96:5a:ec:10:5c:89:e8:21:40:2f:
eb:33:26:4d:01:5a:08:d1:99:b7:c9:1c:0b:cf:4c:
af:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:18:45:57:0A:D8:D3:0D:77:45:7C:56:0B:2C:86:95:CD:19:04:B5
X509v3 Authority Key Identifier:
keyid:E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e6:7a:e0:ec:3f:99:a1:aa:bb:be:17:0f:87:04:9a:fd:10:
43:12:02:79:4f:cc:f4:ac:3e:c4:ea:1f:3a:fa:1b:a4:48:9e:
6a:08:e7:3f:9f:69:43:c0:e3:c1:c9:bb:7b:1f:bf:7a:e2:1e:
a5:71:9d:de:b6:fe:f1:3d:13:30:59:67:8a:0b:c1:0f:f0:d7:
0f:84:a1:8f:97:75:5d:1d:d5:0c:68:0f:e2:1a:d8:f6:b4:7d:
c9:ca:73:e1:8a:d8:4d:7f:ce:1d:76:cb:2e:aa:c2:e1:f1:a0:
fe:87:0e:f6:17:db:5b:0a:5d:ae:97:aa:fd:9b:47:d4:fb:41:
0f:57:be:0a:06:54:05:34:9b:96:2f:65:39:d7:2f:53:49:da:
43:e7:ee:70:c1:a2:25:17:d2:b3:9b:86:91:cc:21:5c:97:bf:
22:cc:95:d3:4a:97:76:20:a8:05:7a:29:87:8c:69:0e:4b:50:
64:ec:24:fb:89:b0:e7:27:13:05:4b:78:6c:f6:e3:59:0a:4c:
a2:c6:56:59:53:23:0c:17:f1:83:1c:16:ba:2f:37:36:4f:95:
8f:f9:3d:35:a5:50:11:ef:d1:83:f9:fb:06:9c:d9:d0:fa:18:
c4:e3:b6:c2:40:de:fa:95:b9:cf:80:9b:ac:24:af:bd:d3:31:
d6:00:c1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:49:32 2025 by rpki-client