Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
File: X5ZnbPOY05lMTdSilllGFN_1hsc.mft (raw, json)
Hash identifier: cT+KlDbNAePoa1qfyKL/IGOljDHLrNTQoxnvGkBvPOs=
Subject key identifier: 58:48:E4:87:E2:1A:5B:24:92:D9:48:EF:7E:CC:61:A6:17:BB:D6:E5
Authority key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
Certificate issuer: /CN=5f96676cf398d3994c4dd4a296594614dff586c7
Certificate serial: 0197B7EA6CCE42EB645AE020A78247ACADDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
Manifest number: 15CD
Signing time: Sat 28 Jun 2025 19:01:22 +0000
Manifest this update: Sat 28 Jun 2025 19:01:22 +0000
Manifest next update: Sun 29 Jun 2025 19:01:22 +0000
Files and hashes: 1: 2zkARhYQi5MZVSVViedBzAUUfQU.roa (hash: DjES1xG44afB1DWsZff60m/UWnCi+Z0rElpzn4HCOqg=)
2: X5ZnbPOY05lMTdSilllGFN_1hsc.crl (hash: 0SWvpNnZbk4nGewhpPhQiVW8KW09ffWiRQOrNPP9AgE=)
3: XyWUYm4k4aoyZu4exVkzUEY6NsM.roa (hash: nfbYF1NSykMyHcBytLNKjU++mQtuxfs2vY7BM12cSnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:6c:ce:42:eb:64:5a:e0:20:a7:82:47:ac:ad:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f96676cf398d3994c4dd4a296594614dff586c7
Validity
Not Before: Jun 28 19:01:22 2025 GMT
Not After : Jun 29 19:01:22 2025 GMT
Subject: CN=5848e487e21a5b2492d948ef7ecc61a617bbd6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:82:b9:77:53:77:14:f7:a7:9d:ba:41:0f:
a1:e7:3f:ac:59:60:8f:0a:4b:9e:39:38:89:97:d5:
d8:9d:b3:2e:1e:49:e8:ab:b4:5b:94:f4:76:ba:9f:
99:f9:9f:13:44:2f:ca:80:5b:c4:75:85:16:39:38:
08:13:b0:e5:87:f9:6f:2a:b6:db:72:8c:25:7a:9d:
c1:fc:17:9c:48:4a:ea:3f:b8:1f:0c:a1:ad:77:a7:
b7:3b:3e:e4:d3:3e:92:25:28:77:8a:eb:ed:33:7a:
76:9f:d1:81:be:29:cb:c5:2b:e4:25:04:a4:3c:0a:
f2:a7:94:12:f2:ea:75:ad:d4:bf:c1:f4:15:0f:54:
b8:b6:01:5f:db:9f:cb:a5:af:f8:49:b8:60:18:d2:
33:fe:29:3b:40:b0:ce:f6:a5:87:3e:68:7d:d1:f9:
51:01:93:2e:1e:f4:0f:1d:dd:cb:92:00:4c:cb:f2:
2d:71:34:4d:ab:71:e5:ef:bf:9a:07:a5:b5:25:cc:
78:cd:b6:43:f5:53:a6:c8:ec:c9:43:89:b9:9d:e2:
e9:d8:1f:76:16:83:df:ec:50:6b:21:cf:b7:d3:7b:
73:e4:22:de:5f:bc:cf:48:8d:e0:b6:5d:c3:c4:5a:
f7:af:d4:25:9b:54:8e:d6:60:68:c9:b9:b0:79:10:
19:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:48:E4:87:E2:1A:5B:24:92:D9:48:EF:7E:CC:61:A6:17:BB:D6:E5
X509v3 Authority Key Identifier:
keyid:5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:11:3b:fe:55:b5:39:94:69:7c:d2:53:64:b2:0e:2a:9b:9e:
fe:18:4f:26:3e:5b:6d:2d:8e:aa:75:3a:e8:05:c6:39:4f:38:
54:b0:9a:f3:58:d8:f5:41:cd:7b:d5:15:4f:c9:53:65:f9:45:
b1:e0:ea:07:3d:8a:5b:b3:be:13:3f:40:19:be:34:12:f3:9c:
59:aa:4c:ed:d9:42:fa:d5:5b:c5:ea:6d:32:84:7f:54:7e:25:
34:31:30:5f:83:d0:cf:ce:ff:f4:1b:0a:53:aa:ee:1d:bc:b3:
c9:7f:77:68:d2:33:73:d7:9b:45:b5:0e:cf:56:0b:ca:78:9a:
dd:f2:07:98:cb:60:06:10:ae:7e:c8:83:3f:4f:7f:2c:38:40:
a0:65:a2:f8:44:cd:65:a4:75:7c:43:9c:5d:b0:a0:c3:67:26:
4a:30:d0:36:64:2e:38:1e:97:08:75:ef:8d:f8:71:60:5e:74:
b8:7b:fb:01:dd:55:d8:44:88:09:9b:00:30:19:9b:2e:8b:79:
09:e9:d2:83:82:40:82:05:cf:8e:cd:75:cc:03:07:a5:29:af:
b7:5c:64:ce:1f:24:64:97:54:71:d2:51:1e:02:5a:3c:fa:15:
5a:92:00:ea:fc:a3:4b:e4:c4:1c:90:bf:29:8b:9a:d1:33:1a:
0f:53:4a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:49 2025 by rpki-client