Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
File: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft (raw, json)
Hash identifier: yXsL1cOMlbm4husJRkaWV70ZR+jzO6lDuc9MEOVf0Bo=
Subject key identifier: 5F:D3:6D:1F:93:C9:53:0D:60:8F:01:C7:F4:42:ED:41:EA:B6:78:4F
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Certificate issuer: /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial: 0196759E849009ABFA500DF7AF87304ED62D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
Manifest number: 0FEF
Signing time: Sun 27 Apr 2025 05:00:45 +0000
Manifest this update: Sun 27 Apr 2025 05:00:45 +0000
Manifest next update: Mon 28 Apr 2025 05:00:45 +0000
Files and hashes: 1: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl (hash: ZsH7wrLaXO/zfTcTMsZMiHhRAD1NEMHnlV0uGVA5Ncg=)
2: F2wMIUjJA3quoSXko94UBe524io.roa (hash: ohOfNDpG7k23hMoeoYfuhVGMBn9BMoNT8oiUfgHvVI4=)
3: bE9Rz-JEgnY1OAj9NvLaQK985n4.roa (hash: oGUETehCghwYm99EJnoOLB6Ay5aT0Q2AYzU5/8NcyJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:84:90:09:ab:fa:50:0d:f7:af:87:30:4e:d6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
Validity
Not Before: Apr 27 05:00:45 2025 GMT
Not After : Apr 28 05:00:45 2025 GMT
Subject: CN=5fd36d1f93c9530d608f01c7f442ed41eab6784f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d3:1b:50:a1:3a:89:46:b2:7b:d8:53:04:ea:
83:37:61:04:9d:6f:15:0f:d7:fe:92:11:92:d8:e0:
ee:6c:80:2a:7d:c6:da:70:a6:6f:b3:9c:9d:bb:43:
41:1a:f0:40:8d:9a:07:c8:bd:81:f5:c4:76:80:4b:
ac:f8:58:a1:64:8a:d5:ed:24:d0:ff:d3:d4:55:11:
18:c9:b3:cf:10:c1:f1:ae:c6:64:bb:d9:ec:ff:4e:
e2:6f:7b:76:cc:fe:df:4c:49:cf:17:43:c0:c0:53:
17:d2:9f:13:c0:a3:ed:f8:f0:49:f7:aa:18:57:65:
75:d9:af:48:16:d1:9d:2d:1a:ed:46:cf:cc:5c:ef:
a1:54:a8:7e:a4:bb:9c:6e:f3:a0:d0:6a:04:59:92:
65:dc:f1:f5:2a:8e:8b:84:5e:af:15:ec:9c:d0:86:
c6:21:5e:8f:ad:be:61:4a:45:ec:dd:1a:d9:94:f6:
78:21:4f:cd:e3:9f:04:96:81:11:23:b5:21:bb:48:
1e:4d:e5:9b:52:7d:ec:3f:21:44:f4:da:a2:52:ad:
e3:68:33:a1:1e:62:37:a1:32:b6:eb:dc:88:a4:39:
66:0c:3c:89:a8:4c:a1:47:90:84:82:b1:80:b2:eb:
6f:32:a4:d7:ee:2e:a3:61:e8:9c:07:fe:4d:8d:20:
58:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D3:6D:1F:93:C9:53:0D:60:8F:01:C7:F4:42:ED:41:EA:B6:78:4F
X509v3 Authority Key Identifier:
keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e1:3a:67:c1:1f:77:85:17:68:06:a7:79:f1:ed:2c:ec:8e:
e3:8f:f7:59:dd:2d:28:2b:f9:cc:34:44:44:43:c7:a8:99:51:
a5:20:3a:57:66:ee:31:0e:35:84:5a:bb:ec:99:c0:92:7a:a2:
fb:5a:45:84:03:76:31:a5:f2:4c:db:fe:fe:b4:df:75:8e:2a:
0d:b0:77:ae:0d:ca:82:09:de:a4:61:e1:0c:c5:e8:14:b0:0d:
f0:f6:37:c9:d3:d9:77:28:4f:f3:94:19:2c:c8:7c:0e:2b:42:
a9:38:48:13:3b:1b:92:40:87:f0:22:2c:2b:2b:df:3d:ea:ab:
e7:3a:49:86:ba:77:90:00:91:6d:31:0c:f1:dd:d0:e6:72:e9:
46:03:1e:35:46:84:9a:0d:38:b6:09:9a:58:31:c1:9c:2a:92:
d7:2c:95:7b:6e:40:39:06:5f:1c:18:9c:74:52:23:57:ae:8d:
94:9b:b7:56:cf:c2:94:32:8f:a0:f3:ce:27:41:5f:47:a7:db:
f1:6e:ab:50:b1:e6:ba:1b:ba:fe:8b:54:64:b3:d9:c9:41:4d:
d3:ea:d0:d7:ca:d7:86:f7:de:11:d9:0d:ad:ab:fa:96:20:5b:
b7:5e:0e:ba:87:72:75:01:ef:e0:7a:a6:33:43:f5:b3:6d:7f:
27:eb:21:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:56:15 2025 by rpki-client