Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
File: T5CKbYaKuem9sQRy--wxyWbpQnQ.mft (raw, json)
Hash identifier: H9G2RkZ0DVn/UlVDp1p+lNBKFfDFHnLJtvN0sfoEs/E=
Subject key identifier: 9D:18:25:1E:7D:F7:68:E2:AB:60:6B:DD:87:B8:8A:67:C9:CF:8C:F8
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Certificate issuer: /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial: 0196C72818D7100254E695F8BCC4838FB4DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
Manifest number: 153B
Signing time: Tue 13 May 2025 01:00:15 +0000
Manifest this update: Tue 13 May 2025 01:00:15 +0000
Manifest next update: Wed 14 May 2025 01:00:15 +0000
Files and hashes: 1: N4O1f1HdN3aaUng8Ezj5qGov-Js.roa (hash: sfcsuhZVAT4PlLRFtuXFGetuMIfE20AC6DkhL2YQizc=)
2: T5CKbYaKuem9sQRy--wxyWbpQnQ.crl (hash: VKh8ms6Vi6CmW1GezCB9TTN49AF1K764iH3bePWtcJs=)
3: _UFtjPZkJY8PTrDfIiY7fIJkM78.roa (hash: 8nSnhnVWRfLLWBF2I/d3mZE5/5hk3aPfKW0pXvBb3bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:28:18:d7:10:02:54:e6:95:f8:bc:c4:83:8f:b4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Validity
Not Before: May 13 01:00:15 2025 GMT
Not After : May 14 01:00:15 2025 GMT
Subject: CN=9d18251e7df768e2ab606bdd87b88a67c9cf8cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:6b:9c:58:65:ad:eb:c9:5a:8a:d8:b5:be:
44:99:2a:6f:c6:d5:a5:ba:2c:f5:ad:e8:5a:c0:2c:
b6:bd:72:d4:f0:25:ca:fb:cc:4d:b4:ab:3a:92:8b:
80:94:cf:cf:e5:c6:f7:b2:f8:bd:d8:d8:2e:ae:df:
25:12:84:97:49:e4:8f:83:5f:ad:3a:c2:97:fc:e1:
de:7e:78:db:cb:8b:fd:7c:da:d7:e4:6f:a5:35:23:
95:15:a5:4f:fe:08:3d:60:fc:7d:45:c9:d7:07:12:
35:e8:39:5f:61:b4:6d:d5:02:b3:e6:51:eb:97:c0:
63:97:ae:3e:e3:07:35:ee:e5:87:e4:85:04:e4:ac:
55:38:03:42:d3:85:67:9d:93:2e:33:14:68:83:36:
a8:7f:e5:b3:bc:63:f6:42:58:38:15:29:74:15:58:
4a:02:32:62:95:01:0d:ad:5b:f1:4e:ef:6a:89:74:
84:ae:0b:08:a6:ba:06:46:a7:88:c4:3a:48:6c:cc:
de:08:f4:a6:04:51:6c:33:c1:77:4d:3b:90:51:2d:
2d:59:50:a4:4f:b5:79:47:86:cd:3e:28:51:92:90:
09:1f:fe:00:6f:e3:5f:6f:f4:c1:be:51:9d:78:e8:
a0:e8:b7:81:62:01:3b:e2:70:80:6e:9f:71:01:40:
98:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:18:25:1E:7D:F7:68:E2:AB:60:6B:DD:87:B8:8A:67:C9:CF:8C:F8
X509v3 Authority Key Identifier:
keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:63:57:85:74:29:b7:45:b6:2c:3c:9f:8f:fe:52:12:ec:29:
01:dd:50:e8:e8:0c:2c:a5:57:71:56:e6:a7:80:a3:a5:b5:80:
82:4c:a9:42:b5:b9:e0:b1:66:6b:ed:91:c0:da:6d:ab:15:c6:
74:84:57:37:f2:2e:b5:a7:9d:20:75:84:21:69:e5:b8:12:94:
4e:70:4c:42:4e:b8:23:20:6b:88:b3:6c:09:3b:c3:7d:1a:f1:
af:9d:92:c2:49:1d:15:cf:05:9f:cf:2d:08:f2:cc:4a:d6:a0:
99:84:51:fa:e2:e8:04:1a:b2:04:98:97:e5:61:f1:50:bc:95:
8d:c4:05:d4:0e:0d:99:bd:54:12:f7:13:06:f5:53:8c:ce:8c:
db:af:d0:99:c1:a5:55:52:f7:76:48:5f:4c:06:9f:b0:60:99:
1a:9a:47:b5:c9:bc:57:90:81:29:84:a2:ec:16:47:5c:ab:73:
c3:2d:78:e7:ae:15:5f:d4:bd:98:d9:bc:ab:32:cd:b4:ad:9a:
23:b5:81:4b:85:49:33:da:f9:d8:46:ec:91:c1:bf:14:c3:9f:
5d:78:db:b1:c5:d8:1c:c0:8e:58:9b:9d:0d:66:fa:ed:02:b0:
18:ac:94:b8:4c:82:eb:1a:b0:83:55:2f:29:37:21:7a:53:19:
20:00:07:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:20:24 2025 by rpki-client