Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
File: X5ZnbPOY05lMTdSilllGFN_1hsc.mft (raw, json)
Hash identifier: uUoFuWAPNYYe9DrwM82UQN2gGWRi4jyx9k8qmMO8v1c=
Subject key identifier: 9C:D0:21:4E:2E:CD:95:BE:29:76:4F:36:6B:C7:D7:56:8D:78:75:6A
Authority key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
Certificate issuer: /CN=5f96676cf398d3994c4dd4a296594614dff586c7
Certificate serial: 0196BAED913AE01BD8B9458229F227713D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
Manifest number: 154A
Signing time: Sat 10 May 2025 16:00:53 +0000
Manifest this update: Sat 10 May 2025 16:00:53 +0000
Manifest next update: Sun 11 May 2025 16:00:53 +0000
Files and hashes: 1: 2zkARhYQi5MZVSVViedBzAUUfQU.roa (hash: DjES1xG44afB1DWsZff60m/UWnCi+Z0rElpzn4HCOqg=)
2: X5ZnbPOY05lMTdSilllGFN_1hsc.crl (hash: pGuXLcDlIyNtnTO7TBFcDiGuDB/7WQhv2yPCcvhSDE8=)
3: XyWUYm4k4aoyZu4exVkzUEY6NsM.roa (hash: nfbYF1NSykMyHcBytLNKjU++mQtuxfs2vY7BM12cSnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:91:3a:e0:1b:d8:b9:45:82:29:f2:27:71:3d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f96676cf398d3994c4dd4a296594614dff586c7
Validity
Not Before: May 10 16:00:53 2025 GMT
Not After : May 11 16:00:53 2025 GMT
Subject: CN=9cd0214e2ecd95be29764f366bc7d7568d78756a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:3a:02:23:be:d3:75:47:d1:1c:3b:6a:b5:
1d:df:3d:dd:79:b4:20:a0:d9:0e:54:ab:45:1c:80:
81:16:f4:09:0e:2f:a4:60:22:f0:11:63:94:04:55:
f9:c0:20:3e:03:05:13:df:46:7b:11:5f:b1:16:c8:
f1:91:7e:bc:43:f1:17:cd:ac:e6:6d:6c:01:67:99:
d5:83:07:98:83:30:01:26:ea:e5:9b:14:5b:91:22:
e5:b9:78:d5:ec:83:54:d9:b3:0f:d7:cf:82:5b:cc:
fb:1b:5b:bf:f7:d2:5d:1f:af:43:9b:55:33:b9:4c:
0a:b3:1a:1e:ef:e9:54:a8:03:11:77:0b:33:fc:6a:
41:82:2e:4b:0f:41:30:c7:cd:8b:4b:87:0f:b8:1d:
da:80:ef:76:92:74:1a:d4:96:82:ff:f8:9c:77:4f:
59:cf:43:2f:53:b3:32:30:12:8e:4f:7d:f1:6a:ec:
79:91:47:f0:a9:86:a8:05:2b:27:25:0f:50:a4:66:
b8:6d:6a:c7:7d:42:ed:89:b9:74:f3:bc:b7:ff:fa:
ec:08:9f:5f:c1:b1:8c:21:d6:fa:4d:a2:8d:f5:8c:
d3:05:66:1e:bc:24:16:48:5b:ac:2f:af:06:b0:62:
81:9a:53:42:9a:36:39:57:37:d5:a4:82:c7:e9:c4:
36:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D0:21:4E:2E:CD:95:BE:29:76:4F:36:6B:C7:D7:56:8D:78:75:6A
X509v3 Authority Key Identifier:
keyid:5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:95:27:0e:6e:33:b0:b3:e7:12:d5:41:c2:5f:8b:35:a1:47:
4b:1d:98:d6:c4:8e:ac:db:e6:e5:97:f5:51:42:87:c5:6c:58:
7c:39:88:63:45:9e:83:be:5b:a6:35:f5:8b:92:50:1f:38:7e:
24:cb:d1:0b:9e:54:14:e1:67:76:a1:f2:44:5a:c1:38:66:02:
80:3e:84:69:40:9b:e7:6e:a2:8d:0f:cf:0b:ab:e0:2d:e0:70:
10:a3:25:49:c4:a3:c8:7d:a0:d5:b8:06:0a:e9:eb:a2:1e:d2:
ef:19:0e:fa:fc:e5:41:b1:c0:27:42:c6:6d:4d:0c:d6:8b:8e:
2b:3d:a2:15:f5:fe:55:6a:f0:5e:d4:14:52:92:63:0f:e6:55:
ff:ec:21:ee:a9:b9:6c:78:00:44:cb:b2:04:d5:98:fe:30:b9:
fb:6c:c8:20:cc:dd:b1:d3:05:46:55:e2:3a:a4:36:0a:b2:0c:
75:81:79:d5:23:b4:ff:4f:e5:7b:98:f7:ab:e1:76:ba:28:f0:
23:e8:cc:d5:8d:18:e5:b4:c6:f2:e4:9b:3d:b5:23:9d:d0:6c:
25:ff:10:64:50:ed:0d:0c:2a:0b:b5:5b:5e:ef:f1:9d:5b:26:
eb:a6:74:ad:c6:9e:7d:c5:14:09:91:8a:b3:41:09:e7:80:70:
f8:a0:e4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:56:20 2025 by rpki-client