Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
File: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft (raw, json)
Hash identifier: OLrDZhkKDFUsXcxn9yWSRIM59n0uuMhNpskAvfOyiRg=
Subject key identifier: 92:10:0B:5A:CD:C2:60:6A:58:02:47:A8:F4:A7:32:64:B0:41:89:C5
Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
Certificate issuer: /CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Certificate serial: 0196CDCFBFD85A6957A14F0DBB003BBFD5F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
Manifest number: 153D
Signing time: Wed 14 May 2025 08:01:06 +0000
Manifest this update: Wed 14 May 2025 08:01:06 +0000
Manifest next update: Thu 15 May 2025 08:01:06 +0000
Files and hashes: 1: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl (hash: JtMyv6MTQ+RXZcW6u9UfQBh+7yTrcwpBP+trFwSQTq4=)
2: qvfFT1waDERLpkfbuL979IFfQzo.roa (hash: paMjx2cHD10xNMb2RegQEWwQPemRR0QtwqJzV/kovDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:cf:bf:d8:5a:69:57:a1:4f:0d:bb:00:3b:bf:d5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Validity
Not Before: May 14 08:01:06 2025 GMT
Not After : May 15 08:01:06 2025 GMT
Subject: CN=92100b5acdc2606a580247a8f4a73264b04189c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:53:20:60:34:97:cf:26:c2:b7:e7:e6:0e:5f:
49:fa:2b:e2:75:16:03:81:91:e4:70:de:0e:1b:64:
83:0f:c6:96:37:79:2c:5f:57:7a:db:0a:f1:1a:7b:
e2:9c:cb:f3:d2:98:1b:0c:cf:a7:31:0b:50:22:b5:
68:8d:0f:fc:62:ef:31:5a:16:12:03:b2:45:08:7b:
b1:7b:62:fa:1b:8f:49:2a:99:20:97:34:33:e2:ce:
94:8e:d0:8a:70:e1:09:e2:7b:0b:31:88:65:74:30:
d6:00:08:4b:fd:03:f4:08:f5:4f:54:d4:15:9d:29:
f1:f7:9c:59:24:49:94:23:67:d0:8e:36:b8:dc:52:
a0:09:5e:68:1f:a4:cb:19:54:f5:ca:54:86:3b:f2:
37:6c:f9:aa:a5:cb:8d:0e:78:75:43:17:98:57:60:
07:7b:81:c3:09:6e:06:54:ee:6f:a1:36:b2:20:bc:
a1:76:69:35:6e:a8:e6:65:1b:52:73:89:d4:95:31:
4b:bb:ee:8c:00:1c:9a:68:62:8e:c2:06:c1:2f:7a:
3f:9a:bd:e3:5f:fd:80:b6:59:50:db:02:bd:e9:88:
c9:ea:ab:e7:54:a1:36:2d:21:c6:3b:3e:2a:b6:f4:
3c:ca:be:8c:e2:25:b4:b3:d6:47:d7:27:b9:ec:61:
cd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:10:0B:5A:CD:C2:60:6A:58:02:47:A8:F4:A7:32:64:B0:41:89:C5
X509v3 Authority Key Identifier:
keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ca:78:4d:0d:f3:76:ad:ca:82:b9:08:6d:8a:71:7b:8f:e9:
7f:8f:65:12:e9:0a:75:a1:f2:4f:61:46:c3:07:83:c5:56:46:
6a:fc:f8:dc:e5:25:b4:35:8e:05:b9:26:be:08:8b:24:a4:0d:
91:da:65:01:24:7c:4e:81:24:e1:f2:d8:63:1a:ee:c7:f5:3c:
1a:26:3e:e3:81:65:09:d3:46:07:22:0c:62:d4:15:f7:b6:00:
74:9d:2b:8e:23:00:f1:75:42:87:21:a4:ef:e3:f8:f0:da:b6:
46:7b:f1:a8:71:2c:f6:7b:d2:e6:c0:c6:98:67:0b:02:83:e1:
d5:e3:7e:d9:fb:61:85:8a:0f:45:b5:55:a8:57:08:39:b3:11:
0d:93:0a:ea:75:b1:90:10:e3:71:83:23:de:f8:9b:2a:35:a0:
7e:e1:18:e3:6f:0e:24:95:5a:5c:f8:63:11:69:3d:e0:13:a5:
c3:b6:3c:91:06:92:9b:9f:b7:32:7c:1b:6b:ca:b4:93:ac:7d:
45:2e:17:bb:d2:b7:da:c7:d1:6c:8f:31:0e:72:94:c0:b9:13:
de:18:b1:86:9a:0f:37:86:76:8e:1c:f0:0c:e8:3f:51:56:5e:
a6:13:69:f2:bd:f4:fb:e7:2b:25:39:c9:ac:39:6f:21:a4:b1:
2c:b8:05:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:39:00 2025 by rpki-client