Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
File: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft (raw, json)
Hash identifier: Kj6HwOmVXaMWKr4DSU8Y2oAofxDuxlV0J0vUhvvJG7s=
Subject key identifier: 04:4D:D9:94:C4:5A:F0:DD:A1:B0:EE:AE:51:81:03:66:37:B9:2A:10
Authority key identifier: EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
Certificate issuer: /CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Certificate serial: 0196C2DD740E85C4F85BD9E787262780BB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
Manifest number: 1536
Signing time: Mon 12 May 2025 05:00:15 +0000
Manifest this update: Mon 12 May 2025 05:00:15 +0000
Manifest next update: Tue 13 May 2025 05:00:15 +0000
Files and hashes: 1: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl (hash: D7wVLzSXmzDst+Ff7lrSAo298d1tRg25GQtT1MKJgm4=)
2: fGQ3YVDh2zkecLRGo_WA_JJKmDU.roa (hash: mv8AdpdjP5/diFcicEaZODtxwOkiTIPwxcyY8ZLf9hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:74:0e:85:c4:f8:5b:d9:e7:87:26:27:80:bb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Validity
Not Before: May 12 05:00:15 2025 GMT
Not After : May 13 05:00:15 2025 GMT
Subject: CN=044dd994c45af0dda1b0eeae5181036637b92a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:52:11:7d:2b:42:14:fa:04:42:4d:48:ab:
0a:1a:df:15:c8:8d:82:bd:15:41:39:4e:c5:12:62:
9b:73:2d:8d:36:a4:22:19:65:71:3a:d4:50:f6:a6:
8a:f9:a2:d9:64:0f:ad:d7:7f:0f:10:08:66:35:0f:
17:4b:88:2b:e2:0f:b6:ec:5a:b7:2d:91:3d:c4:d1:
66:5e:44:be:ef:46:9e:84:96:db:1c:cf:36:f6:f0:
84:05:74:d1:ce:26:f8:23:14:b0:be:06:78:d9:ad:
f2:98:50:8d:2e:6f:f0:5f:50:0f:45:23:5a:b2:0f:
c3:8e:c9:25:24:5c:5a:37:ec:c5:3e:98:bf:c6:5f:
aa:a8:a2:77:98:cf:19:d6:ed:fa:2e:3d:f8:ba:07:
ed:bd:f3:27:a1:0a:64:89:41:ee:cd:84:14:e7:3b:
b8:63:0d:2b:64:03:bb:a2:60:d3:43:ef:d7:59:1e:
2b:bf:51:4c:75:dd:66:2e:73:69:3a:93:a0:a3:95:
32:d6:53:1b:ff:93:df:87:59:20:f8:30:45:6b:7d:
3c:78:df:57:dd:34:9c:19:05:a9:61:9a:83:d5:94:
e1:3f:c1:8b:39:54:5e:76:da:10:49:a2:89:78:86:
6c:2e:bc:2e:b5:be:f1:98:23:05:31:a7:2d:6f:b2:
c6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4D:D9:94:C4:5A:F0:DD:A1:B0:EE:AE:51:81:03:66:37:B9:2A:10
X509v3 Authority Key Identifier:
keyid:EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9a:06:7f:35:2b:bf:6e:d4:62:a0:8c:a2:0e:82:4d:99:a5:
98:b3:da:59:c3:d7:49:91:1e:20:71:47:d7:2a:36:6b:b2:53:
b1:5a:08:12:45:81:13:7a:c8:4c:14:be:cd:eb:dc:9f:44:02:
e5:17:3e:df:b2:71:69:02:66:e6:24:f4:ca:f2:e3:ac:2a:96:
bf:55:a0:92:df:7f:ba:64:a1:5c:86:72:b1:49:e7:36:26:27:
d3:ac:21:f3:0c:ad:e5:ee:4a:78:1a:d0:04:a6:0c:12:06:b4:
9b:65:56:2a:47:22:22:2c:6e:aa:77:ae:c2:f1:b6:ad:7b:01:
bc:0a:25:6e:2e:af:40:42:db:bf:49:31:1e:3c:bf:a6:15:e9:
d4:61:bf:32:1e:7d:54:ce:d8:d0:c6:18:5f:de:37:b8:19:5d:
2d:aa:9f:ea:fc:6e:86:a3:77:18:6e:31:f1:f9:b9:fe:83:65:
4f:56:15:c0:2c:9b:7a:49:bd:2c:28:56:85:d1:30:a0:ed:55:
f1:5b:d7:b9:c0:0a:9f:1b:3e:61:c4:7f:8b:c9:c9:c6:73:72:
f8:c1:aa:53:54:b4:8b:9b:7c:02:74:e6:9b:24:ee:1b:78:7c:
3c:e1:6c:ab:19:8d:20:06:34:54:02:31:8c:fb:bc:1e:82:06:
42:70:08:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:31:42 2025 by rpki-client