Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
File: 5RZFNJeeYKVkcBIysuUgCIlUJgY.mft (raw, json)
Hash identifier: lHSHCvJABtJA7IBOOBVNi/z1tsOURBT1yxiGOQ71nyw=
Subject key identifier: 7B:B6:04:08:39:B5:5E:EF:59:16:FF:11:23:38:C4:86:52:1F:AD:4E
Authority key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
Certificate issuer: /CN=e5164534979e60a564701232b2e5200889542606
Certificate serial: 019674F991CA3C317167FFAB93147A558176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
Manifest number: 05BB
Signing time: Sun 27 Apr 2025 02:00:34 +0000
Manifest this update: Sun 27 Apr 2025 02:00:34 +0000
Manifest next update: Mon 28 Apr 2025 02:00:34 +0000
Files and hashes: 1: 5RZFNJeeYKVkcBIysuUgCIlUJgY.crl (hash: 1dTyZzPIBLe1CsSW05dIAHtmIV39ikuqqjp6XYta9Go=)
2: d099hTA9N0rBX0a4mIMTtvx7dLM.roa (hash: LT02ny7o04CIcPy2ptlO2f83f/uDQvGL+KruqdAn2tw=)
3: jfgLmk_8BZt8FNL99fA-Isnp7jU.roa (hash: 3hldq5xpp8oSt4a5EF6tgPHwrwLntpc0Iw/stE0N/MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:91:ca:3c:31:71:67:ff:ab:93:14:7a:55:81:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5164534979e60a564701232b2e5200889542606
Validity
Not Before: Apr 27 02:00:34 2025 GMT
Not After : Apr 28 02:00:34 2025 GMT
Subject: CN=7bb6040839b55eef5916ff112338c486521fad4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:c9:85:15:0f:70:1f:1c:42:e4:d2:e3:0f:
13:8d:fb:c9:e5:32:ec:f7:13:43:cd:93:98:db:f4:
c3:1e:40:32:57:56:7e:23:2a:d2:96:03:58:ed:1e:
c8:25:15:07:30:7b:b8:21:0f:ad:d9:1f:91:9e:ce:
02:bd:ae:a6:3c:8f:de:21:7d:d6:e7:27:b7:52:18:
9d:3b:b4:cc:38:28:cb:64:d4:77:4c:ce:0e:20:9e:
c1:f8:1b:bb:b9:a3:0c:92:07:25:8d:44:af:82:23:
05:92:16:f6:0f:cd:7c:e5:cd:1c:11:6d:b3:f1:d2:
7e:a9:e6:0d:8a:d1:0e:74:37:6a:e4:5d:17:55:d0:
db:db:0d:99:7c:1d:67:02:be:f3:1f:f5:63:76:c8:
08:45:ec:27:63:ab:e0:a2:9c:67:58:0d:04:fd:c6:
23:8f:45:e7:d6:5d:97:f6:8b:db:33:4f:b4:02:9c:
44:a3:88:c2:87:02:65:cb:0d:37:85:90:53:f9:2b:
95:00:b3:6e:41:e0:af:b5:d3:ce:7e:81:7f:49:96:
b4:9a:88:cf:3f:39:11:99:b3:3d:d7:da:b7:c7:5c:
9e:7d:d7:40:05:4a:22:f4:ce:38:68:7e:6c:83:d5:
fc:03:ae:0d:9b:0d:b5:d8:64:10:35:69:56:c9:b9:
41:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B6:04:08:39:B5:5E:EF:59:16:FF:11:23:38:C4:86:52:1F:AD:4E
X509v3 Authority Key Identifier:
keyid:E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:60:63:6b:d7:56:d3:49:ac:cc:1d:5a:45:ca:90:2b:fb:4b:
68:c2:08:b0:23:90:6a:7b:17:fd:6e:a3:28:a9:87:58:ab:89:
e8:5e:02:db:99:84:91:01:00:d5:12:98:7b:79:cb:be:a5:7f:
8f:28:59:6d:ff:81:d5:66:32:0a:99:c4:c9:41:3f:d7:9f:58:
2e:b3:d1:9d:db:85:00:e0:3d:a2:8c:06:20:e1:56:c6:4f:b4:
88:42:9f:fd:ce:98:b3:b2:81:96:89:22:2e:54:99:dc:97:2b:
64:e8:e5:a9:b1:a3:7d:fb:e1:ac:02:90:08:99:84:3e:d8:3c:
f3:46:3d:d8:79:8b:59:5e:55:a1:eb:55:4e:61:05:a2:d4:6f:
8a:37:8e:fd:e3:ee:0c:58:b9:5c:95:15:35:5e:ad:73:32:25:
f6:c3:33:ca:b1:62:9e:f0:4a:c7:d5:83:c4:32:c7:fc:06:6c:
8e:29:dc:ec:10:38:8c:5e:cd:57:76:c8:a9:55:28:4d:0b:cc:
c5:9d:50:66:15:84:c4:49:b6:ee:f6:20:e2:be:50:df:55:a5:
18:de:1b:13:b4:b2:13:31:72:c1:73:5f:dc:0d:5d:64:6e:4f:
ff:c0:5b:9d:75:27:e5:49:31:a8:27:f7:96:fd:22:e4:d8:00:
a7:1a:b8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:44:18 2025 by rpki-client