Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
File: H5TRNU5yMGqff5Ufk_UujROkCr8.mft (raw, json)
Hash identifier: EjYZ5/B/2yzDNlB7nBOVD/cIjMMOcgqCbKHQEdpLE78=
Subject key identifier: 5C:96:C8:2F:62:5B:EF:F3:8A:0A:45:9A:10:D7:6F:C5:50:A9:35:80
Authority key identifier: 1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
Certificate issuer: /CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
Certificate serial: 0196B6A2C28DEBC3F21BA9741E342500B547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
Manifest number: 0D65
Signing time: Fri 09 May 2025 20:00:42 +0000
Manifest this update: Fri 09 May 2025 20:00:42 +0000
Manifest next update: Sat 10 May 2025 20:00:42 +0000
Files and hashes: 1: H5TRNU5yMGqff5Ufk_UujROkCr8.crl (hash: DYXmnniryE77K7gFYBkYTYbDt/LyqA15looJx5G8JTk=)
2: LKhlG3TMTYsgOdNspAeUKjE3FDY.roa (hash: ktutiAHlvXrlvrW8ZLJWK+gJEGiryttMuOJwRo+ROtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a2:c2:8d:eb:c3:f2:1b:a9:74:1e:34:25:00:b5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
Validity
Not Before: May 9 20:00:42 2025 GMT
Not After : May 10 20:00:42 2025 GMT
Subject: CN=5c96c82f625beff38a0a459a10d76fc550a93580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1f:75:cb:8c:40:7c:b7:55:e2:cb:be:e8:57:
f3:5f:0b:4a:6d:b2:27:e1:ac:44:6e:1d:6d:84:ea:
7a:d4:4b:6c:7b:5c:45:30:a8:ff:ec:a2:92:c2:17:
0c:d9:78:ca:f9:ba:92:4d:36:ac:0f:66:da:40:b0:
98:f6:f9:88:97:be:51:23:62:90:e2:b4:87:4d:65:
31:ac:14:43:37:55:66:9e:5d:96:f6:6e:fd:6a:04:
16:b1:8d:dc:ef:04:2a:b8:84:92:43:74:f9:0f:6e:
8c:0a:1d:38:a0:34:98:7d:13:ab:7d:27:12:21:13:
d3:a6:79:c2:43:29:03:67:02:12:ce:48:f1:c2:33:
4e:50:5b:cc:25:f7:39:56:fd:0b:83:c3:5c:f0:f5:
f4:67:7d:49:99:61:27:1d:8e:4c:7a:aa:60:f9:e7:
f1:50:1b:d2:b6:65:d3:d8:e4:5f:f4:f7:85:dc:e0:
6c:49:95:07:c7:70:8e:ac:5c:40:8d:15:f9:8a:b2:
8d:25:1b:00:fa:ad:3f:4a:98:03:bc:26:8b:1d:ed:
62:34:9c:7a:3b:41:bf:e0:fe:0c:2c:47:7b:98:f0:
02:2e:8b:28:9f:2e:9a:6b:8d:35:13:df:07:2b:ca:
16:6c:f4:75:a9:7a:ff:f9:15:36:91:b4:b0:b3:b4:
03:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:96:C8:2F:62:5B:EF:F3:8A:0A:45:9A:10:D7:6F:C5:50:A9:35:80
X509v3 Authority Key Identifier:
keyid:1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:67:58:58:88:aa:c3:2c:f9:3a:7b:f0:9a:b9:a5:2d:b7:23:
5b:4c:7c:be:26:31:4a:7a:cf:cb:68:86:73:1d:bc:72:1c:7d:
bb:cd:47:67:73:87:7e:37:1d:9a:dd:dc:e4:c7:13:e4:2b:ed:
a8:86:0b:76:4b:b9:5e:3b:a5:12:b4:b0:a2:5b:e4:fe:4c:50:
bf:8f:0e:5d:52:24:9c:72:55:a9:c4:0f:95:f9:84:b0:9c:f8:
58:66:b5:aa:54:f7:cf:b0:03:ad:8f:0b:71:e7:15:2e:3a:a4:
9f:2f:f2:bf:79:7e:e3:f7:40:fa:8c:4c:82:8c:e3:30:ea:f1:
79:cb:5b:e0:c5:b2:3f:b0:56:6a:3d:57:b8:f7:6f:9e:0b:6b:
14:9b:af:42:e0:0f:da:12:bb:5a:8f:e5:94:89:bb:56:ff:cb:
0e:67:96:b0:fe:1f:21:d5:6d:d5:00:53:3e:f9:a8:65:e8:15:
ed:42:46:11:0b:e8:19:0a:0c:2c:48:de:b6:b0:6e:d1:55:79:
02:d9:b9:c0:95:27:d5:d5:fe:32:da:77:f8:d9:a0:ed:2b:02:
e4:0a:ab:cc:6c:e8:fe:3f:ea:60:e3:2a:2f:97:49:3c:01:83:
04:80:c6:b9:9c:8a:d0:0a:76:fc:b0:27:95:d2:03:6a:cb:ba:
01:02:59:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:36:57 2025 by rpki-client