Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
File: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft (raw, json)
Hash identifier: 7jAU1gIuQ0WtrTSYeqT9mErL+KfjCvWPVFEGRij5UHk=
Subject key identifier: 5A:5D:A4:53:5F:69:7D:1E:A2:DC:5B:93:B8:87:31:01:A0:BD:D1:5D
Authority key identifier: 2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
Certificate issuer: /CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Certificate serial: 0196AE0D5B0B3A33B279832DBE6CB0181D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
Manifest number: 152D
Signing time: Thu 08 May 2025 04:00:32 +0000
Manifest this update: Thu 08 May 2025 04:00:32 +0000
Manifest next update: Fri 09 May 2025 04:00:32 +0000
Files and hashes: 1: HF_iZrXdVvTKE2NYXNHiTyOcQ64.roa (hash: WVml14eDTh4qN4FFOa9q4K+T7+9z6Qbi8JZGS0EECf0=)
2: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl (hash: pdiCC/Ezzj6vci9z8a2H4bAoEsoewK+l6JXwC57qMLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0d:5b:0b:3a:33:b2:79:83:2d:be:6c:b0:18:1d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Validity
Not Before: May 8 04:00:32 2025 GMT
Not After : May 9 04:00:32 2025 GMT
Subject: CN=5a5da4535f697d1ea2dc5b93b8873101a0bdd15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:70:d2:8a:fa:a5:ee:f8:29:98:43:ef:85:e1:
86:f4:86:97:7a:39:81:48:b1:68:5f:a2:3d:a5:97:
30:0b:dd:b7:7b:62:df:6c:e3:51:16:c5:dc:eb:ae:
b5:54:e4:a9:7e:69:16:6d:c3:ae:49:4d:c3:2a:c9:
c2:ff:9f:c2:0f:c7:3d:62:b1:ee:6e:b5:ea:a2:b4:
d8:af:68:ca:d3:f4:02:ab:f6:e3:1a:3b:92:1f:e7:
8e:58:02:88:0e:b4:b1:9d:21:cf:ff:63:92:ab:08:
88:30:14:8d:17:60:54:4e:ee:8f:de:3f:25:df:ac:
0c:58:7c:5e:23:74:04:9a:31:2b:9a:d4:8c:ba:5d:
89:71:4d:10:aa:a6:1e:0d:ad:8f:c7:6a:8c:d0:3e:
a9:43:25:81:19:74:25:28:a3:a2:8a:f3:d2:72:e9:
65:ba:2c:b1:1f:6d:85:5c:74:96:a7:60:fe:68:44:
39:8c:95:38:86:0b:41:44:6a:88:79:2f:2b:1e:d6:
d9:8e:00:85:35:63:e6:13:7d:83:51:e5:92:13:55:
05:f4:b2:c4:5c:9c:93:c5:50:9b:7b:e8:eb:66:77:
2f:31:f3:70:b4:e9:d9:58:59:2a:85:ad:b7:f4:76:
07:0a:e6:19:7c:18:33:1e:fa:61:7f:90:25:bc:29:
9b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5D:A4:53:5F:69:7D:1E:A2:DC:5B:93:B8:87:31:01:A0:BD:D1:5D
X509v3 Authority Key Identifier:
keyid:2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b7:df:61:59:fe:9f:95:d3:53:4e:0c:56:26:1e:ec:2c:11:
57:f0:28:40:77:41:c5:01:2d:21:05:b1:a3:ca:56:d4:3a:ce:
f4:75:9b:01:31:bd:ce:4f:9c:d8:1d:41:b8:f0:46:31:31:a4:
79:86:1b:08:4b:c0:a1:3d:82:70:af:6b:fd:6d:fb:55:fc:06:
8e:c3:b7:30:e8:7f:48:d0:a0:d8:2a:47:f2:cf:6f:87:88:26:
4b:55:88:c8:98:70:2a:56:61:f8:fc:7d:cf:f4:fb:0d:a1:8a:
0d:91:91:92:ab:1a:31:86:7f:a5:ec:e0:b7:68:88:7d:ef:4a:
5a:53:0b:b7:25:db:a2:82:24:83:ee:8e:dd:dc:d0:2c:b1:54:
93:5e:9c:e4:a5:c4:c0:6f:82:31:a3:bd:85:db:bb:f5:29:45:
bb:a4:ad:8b:fd:22:d9:8f:bf:53:13:5c:d2:f8:d4:13:7a:8d:
99:c6:a5:85:e2:77:cf:fa:da:a9:0d:23:4c:96:12:12:1a:7a:
39:48:72:9c:cf:3b:be:83:b2:c0:5e:e4:a8:3b:79:9e:7b:3f:
94:52:a4:42:5c:57:29:da:6f:32:6f:fb:ca:f4:57:e3:80:90:
64:02:31:d1:bc:61:b4:25:b0:ce:68:2d:1e:79:8b:7a:0e:90:
1a:82:ec:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:23:31 2025 by rpki-client