Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
File: 5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json)
Hash identifier: a7/AO0VVQyiMTbybWyGfO2ZR5ir+SXO7/R2Vx5PSJr8=
Subject key identifier: 4A:3F:7D:63:9C:AF:FA:D7:8C:9A:F0:C9:B0:46:F8:2E:C6:DC:78:07
Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
Certificate issuer: /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Certificate serial: 019684DA72EE02E55D4900F1AF2A5CB9D38C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
Manifest number: 0672
Signing time: Wed 30 Apr 2025 04:00:30 +0000
Manifest this update: Wed 30 Apr 2025 04:00:30 +0000
Manifest next update: Thu 01 May 2025 04:00:30 +0000
Files and hashes: 1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: z+6g7TaA9cLUCG7FaKmBL9AXPUQRr+1Vs0Gtpi5iYcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:72:ee:02:e5:5d:49:00:f1:af:2a:5c:b9:d3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Validity
Not Before: Apr 30 04:00:30 2025 GMT
Not After : May 1 04:00:30 2025 GMT
Subject: CN=4a3f7d639caffad78c9af0c9b046f82ec6dc7807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:70:d7:ea:19:6b:f1:bd:14:d1:b7:95:b2:
c5:63:ea:5a:2e:62:ae:d5:e9:18:76:dc:5e:90:b3:
b8:6e:55:34:54:ea:0d:31:94:45:38:3e:3c:8a:61:
85:1e:0e:2a:45:03:f3:d2:57:24:b5:b8:ef:a1:2a:
ca:63:e9:fe:d7:11:90:2a:05:3c:bb:05:46:f2:40:
49:80:00:a0:8b:66:1c:24:78:28:f7:98:80:35:74:
07:78:b4:22:ed:df:3a:19:1f:a5:ce:a3:f3:30:67:
ee:77:8a:c2:f0:62:62:4a:d8:ac:4a:9a:aa:94:28:
35:97:91:63:33:77:0a:75:6b:48:23:4e:35:ea:bd:
2f:2e:77:20:07:84:27:8d:34:ba:4d:91:f2:03:d2:
b8:7b:99:16:a0:14:46:6d:9e:a3:79:33:2a:1d:dd:
11:a5:da:93:f4:c8:b4:2b:af:68:a5:0b:1a:c0:9f:
ef:cb:12:f3:48:f2:6d:37:35:c9:a2:53:e0:84:06:
be:6f:23:a3:8d:bf:97:50:2c:79:27:12:49:a8:0b:
0e:f3:96:b6:a0:f8:36:8d:09:71:da:af:76:1e:5b:
eb:48:95:85:c0:a2:cf:06:b4:18:d8:4d:95:2f:29:
26:5a:61:77:00:ef:84:66:42:ee:52:f2:0a:3b:13:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3F:7D:63:9C:AF:FA:D7:8C:9A:F0:C9:B0:46:F8:2E:C6:DC:78:07
X509v3 Authority Key Identifier:
keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8e:f5:e4:91:20:f2:79:bf:30:7b:db:1b:e8:49:b5:05:fa:
79:eb:75:91:58:c9:77:68:46:a6:c4:7b:86:8c:bf:ca:ec:59:
e5:d1:4b:d4:e9:0e:51:b1:a2:03:b6:ed:28:d2:26:c1:63:c3:
42:4b:09:7c:b9:41:4e:5b:89:0f:b5:c7:cf:f6:03:0b:f4:72:
3f:6a:2e:50:9c:d3:cf:ab:86:e9:d1:d1:f1:62:6c:06:b5:32:
0e:c0:66:b1:8e:11:8a:f0:b9:5c:1a:d0:2a:7b:d8:7c:fb:cb:
5f:0f:e8:d8:9b:cc:e2:1a:4e:1b:a8:ef:9f:27:94:9d:5b:8d:
f9:90:30:6f:07:ee:5b:bc:08:fa:c5:af:de:4f:26:41:c1:45:
c8:de:5c:83:29:07:85:05:8d:54:ea:43:4f:5e:79:fe:63:d5:
bf:48:ea:9b:0b:3c:8a:d5:62:96:1c:c0:73:03:8d:e9:cc:2c:
3b:e6:e4:bc:72:68:d2:d8:02:89:b0:af:4e:f1:66:04:01:2e:
46:b1:24:be:fd:e7:9e:46:dd:ed:1d:4c:62:de:e5:7b:f2:28:
fd:b5:02:17:22:8c:93:82:3b:91:c3:5f:2d:5e:e3:c3:64:2d:
1b:4f:69:ed:84:c2:fb:b9:3b:58:bd:13:fa:c9:50:9c:ab:a0:
83:19:db:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaE2nLuAuVdSQDxrypcudOMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Mzg2YzE3YjQ1NjEwYjU4YmJlMDljZDMwY2E5ZmIwYzE5
NjFmZDMwHhcNMjUwNDMwMDQwMDMwWhcNMjUwNTAxMDQwMDMwWjAzMTEwLwYDVQQD
Eyg0YTNmN2Q2MzljYWZmYWQ3OGM5YWYwYzliMDQ2ZjgyZWM2ZGM3ODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1Jw1+oZa/G9FNG3lbLFY+paLmKu
1ekYdtxekLO4blU0VOoNMZRFOD48imGFHg4qRQPz0lcktbjvoSrKY+n+1xGQKgU8
uwVG8kBJgACgi2YcJHgo95iANXQHeLQi7d86GR+lzqPzMGfud4rC8GJiStisSpqq
lCg1l5FjM3cKdWtII0416r0vLncgB4QnjTS6TZHyA9K4e5kWoBRGbZ6jeTMqHd0R
pdqT9Mi0K69opQsawJ/vyxLzSPJtNzXJolPghAa+byOjjb+XUCx5JxJJqAsO85a2
oPg2jQlx2q92HlvrSJWFwKLPBrQY2E2VLykmWmF3AO+EZkLuUvIKOxM5AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEo/fWOcr/rXjJrwybBG+C7G3HgHMB8GA1UdIwQY
MBaAFOc4bBe0VhC1i74JzTDKn7DBlh/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXpoc0Y3UldFTFdMdmduTk1NcWZzTUdXSDlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80YTM2ZGYtNDgwOC00OGU2LTg5NmYt
NmJiZDY4NWQ5MjMxLzEvNXpoc0Y3UldFTFdMdmduTk1NcWZzTUdXSDlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC80YTM2ZGYtNDgwOC00OGU2LTg5NmYtNmJiZDY4NWQ5MjMx
LzEvNXpoc0Y3UldFTFdMdmduTk1NcWZzTUdXSDlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhY715JEg
8nm/MHvbG+hJtQX6eet1kVjJd2hGpsR7hoy/yuxZ5dFL1OkOUbGiA7btKNImwWPD
QksJfLlBTluJD7XHz/YDC/RyP2ouUJzTz6uG6dHR8WJsBrUyDsBmsY4RivC5XBrQ
KnvYfPvLXw/o2JvM4hpOG6jvnyeUnVuN+ZAwbwfuW7wI+sWv3k8mQcFFyN5cgykH
hQWNVOpDT155/mPVv0jqmws8itVilhzAcwON6cwsO+bkvHJo0tgCibCvTvFmBAEu
RrEkvv3nnkbd7R1MYt7le/Io/bUCFyKMk4I7kcNfLV7jw2QtG09p7YTC+7k7WL0T
+slQnKuggxnbrw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:09:40 2025 by rpki-client