Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
File: _l28QbEed7xEvSxzVVS1tCWNDDM.mft (raw, json)
Hash identifier: paNPT97Qq4OabxNRH8Dw6IFJNVQaufyqwEF0UItHsS8=
Subject key identifier: 46:C0:29:AB:4B:72:00:BC:1C:50:BB:3A:37:D7:78:69:D8:86:69:F8
Authority key identifier: FE:5D:BC:41:B1:1E:77:BC:44:BD:2C:73:55:54:B5:B4:25:8D:0C:33
Certificate issuer: /CN=fe5dbc41b11e77bc44bd2c735554b5b4258d0c33
Certificate serial: 0196BBC90D5911022E3F603D3C7C2E4B711A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 20:00:37 +0000
Manifest this update: Sat 10 May 2025 20:00:37 +0000
Manifest next update: Sun 11 May 2025 20:00:37 +0000
Files and hashes: 1: QQYnKZZEKh0t39rLRqceu8xA4vU.roa (hash: PxxqnNy49Cu4ltRHNTmmrI+SwKZQqPOvx1a9kq3y6xs=)
2: _l28QbEed7xEvSxzVVS1tCWNDDM.crl (hash: JBb1n7votduXikfVhu89a9/c5TIe0wzMLSwLes77SSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c9:0d:59:11:02:2e:3f:60:3d:3c:7c:2e:4b:71:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5dbc41b11e77bc44bd2c735554b5b4258d0c33
Validity
Not Before: May 10 20:00:37 2025 GMT
Not After : May 11 20:00:37 2025 GMT
Subject: CN=46c029ab4b7200bc1c50bb3a37d77869d88669f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c2:2b:7c:d4:74:47:6c:4e:72:fb:83:b0:1f:
23:05:e7:9c:71:fc:56:b5:56:3c:b9:64:ae:58:1f:
8c:24:89:74:f7:a6:30:fa:4e:60:fb:e2:d1:6e:0c:
7c:e8:19:eb:bf:96:e5:7d:e2:54:d0:23:a4:d3:b8:
e6:36:2a:77:ae:b4:ee:5c:45:4d:cc:5d:a8:d8:24:
52:7a:55:f4:80:4d:35:1d:75:93:14:83:fe:07:27:
74:b2:72:f8:c0:f3:34:ac:5a:10:20:fa:d1:c1:05:
16:75:c3:58:56:5b:b4:e0:2e:5a:b2:22:60:82:68:
c6:0c:97:ab:0a:83:b7:a1:3b:c6:48:d7:8c:14:08:
ba:dc:70:73:cf:f9:3b:af:0b:59:26:fa:91:0e:d7:
75:a0:13:d1:43:15:17:db:a3:ff:bd:ef:71:c4:39:
00:68:1b:7d:74:ae:08:d1:0e:6e:63:f6:9e:98:37:
73:96:db:fc:37:af:2c:ba:93:00:8e:52:a7:0c:df:
0b:72:5e:27:1c:e3:07:f4:bb:b7:88:98:b8:f3:d4:
62:b5:42:6a:1a:9b:5d:4f:52:95:2a:5d:0b:75:c3:
eb:0e:18:53:e3:fd:98:8b:6e:71:13:a6:48:4f:db:
44:09:a7:7e:08:3b:5c:e5:f8:04:31:8b:bf:a5:dd:
f4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C0:29:AB:4B:72:00:BC:1C:50:BB:3A:37:D7:78:69:D8:86:69:F8
X509v3 Authority Key Identifier:
keyid:FE:5D:BC:41:B1:1E:77:BC:44:BD:2C:73:55:54:B5:B4:25:8D:0C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:dd:90:b6:01:41:7c:34:ff:0b:29:42:58:3b:2f:23:a9:1c:
5b:36:c1:8a:5f:f1:de:73:46:e3:b7:9e:23:5b:61:17:b1:f5:
6d:be:7a:03:1e:f9:af:99:b7:33:2b:f0:02:ec:9e:3e:ce:15:
9b:b2:ec:9e:b1:c8:f8:b9:26:a2:74:22:f2:32:bd:dd:7b:6c:
22:d7:f9:39:c2:d8:ea:76:4d:ee:5a:4d:bf:0e:58:20:5e:c4:
4a:89:1f:ad:93:e8:10:b8:17:18:63:be:f3:cb:4c:c7:d9:af:
95:3f:e5:f1:22:53:b2:aa:21:0a:eb:8f:cf:66:eb:b8:a6:f7:
64:58:48:28:66:cc:b5:40:99:07:16:9b:d4:f3:0e:f6:e4:bd:
d4:a2:96:20:38:20:96:e1:bf:a2:e4:84:c0:02:3f:63:1b:66:
ba:a6:14:6e:bb:fc:2a:cb:93:00:f0:35:b1:1f:2b:00:7e:a2:
c1:ef:82:91:1b:bb:72:dd:02:e1:32:e1:51:20:79:04:60:17:
62:de:60:28:0b:96:e7:7a:5d:5c:1f:90:9b:f6:82:09:ef:73:
a7:bb:26:b0:25:4d:d7:28:32:80:64:88:2d:2f:6f:c1:33:6b:
ad:52:f4:b6:9c:12:12:9e:5f:5c:cd:72:69:78:23:8d:63:8e:
24:d5:92:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:22:48 2025 by rpki-client