Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json)
Hash identifier: oXAIBuittJ7BB3ZDUGe8RdDSGXFbooxA0/QU3jiflWg=
Subject key identifier: 40:EF:F2:F2:3B:D7:39:39:F6:9B:B0:01:9D:B9:EB:9D:68:D0:A2:4B
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 01969FE40025FC31B94FA6A0C023E7A5F212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
Manifest number: 053E
Signing time: Mon 05 May 2025 10:00:41 +0000
Manifest this update: Mon 05 May 2025 10:00:41 +0000
Manifest next update: Tue 06 May 2025 10:00:41 +0000
Files and hashes: 1: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: QKs9V7Qt8IvH4FfynKe3KWwLrYSxl9ALyQ7qStfUV7Y=)
2: bmXZpHHxtrkVL17e18KvIxTw5lc.roa (hash: 8ICDtcdjlLyMFFUIIbeNdV9LHsXmbPFx6BjBW2piZ4U=)
3: vQFumMlickMAeqfmQnyl7TY_Pzg.roa (hash: fsxJlhkOiwS8utSdO9amMMp5rJDtdsaC3KUWPM6ffgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:00:25:fc:31:b9:4f:a6:a0:c0:23:e7:a5:f2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: May 5 10:00:41 2025 GMT
Not After : May 6 10:00:41 2025 GMT
Subject: CN=40eff2f23bd73939f69bb0019db9eb9d68d0a24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:99:68:e3:b9:c1:44:69:91:86:98:0b:37:2a:
bd:41:52:ba:be:f8:ee:ce:f3:1f:53:e5:78:36:51:
47:a0:01:c3:1a:c6:83:c6:15:95:66:66:68:29:e2:
17:b3:b0:f0:24:cd:c6:9c:71:93:6b:64:32:ee:d1:
8c:37:b6:9f:e5:1b:ac:43:ee:7a:e3:03:63:31:48:
d7:eb:95:1e:04:49:d5:01:01:52:a0:eb:48:b5:d5:
87:c3:d3:fb:47:b8:36:88:d2:99:ee:6d:45:ae:ab:
45:ee:82:6e:42:1a:a9:69:20:6e:e5:7f:c9:74:e2:
f9:6f:55:eb:6b:e4:ae:f7:26:2d:27:85:54:b5:e3:
31:81:ce:bd:c8:87:4a:f8:e6:6d:71:b8:e7:34:4b:
5f:02:cc:76:8a:ad:ad:14:a3:43:1f:98:18:19:89:
6f:ec:b9:87:66:d1:fa:c5:f7:68:35:64:a8:80:e1:
9d:69:c0:7e:b2:72:26:e0:fa:af:3f:9b:e9:d7:63:
18:9e:10:91:0b:f7:f7:43:62:bf:d0:58:23:ff:71:
30:59:3f:e8:b3:7c:fa:3e:8a:33:4f:a7:a8:b3:7b:
bb:30:a0:31:10:24:ba:6f:4b:cf:65:1f:4e:56:c4:
ea:09:19:14:5a:40:a1:d3:e4:b6:df:cf:4a:16:c7:
73:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EF:F2:F2:3B:D7:39:39:F6:9B:B0:01:9D:B9:EB:9D:68:D0:A2:4B
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4a:09:86:b9:c5:a3:4d:87:f5:9a:21:44:23:54:9f:1c:22:
50:55:a6:7f:43:00:e0:86:d9:f7:e3:c8:e3:83:91:61:25:4b:
5b:e1:8a:19:6a:77:87:5d:cb:33:b4:56:25:09:b4:aa:dd:a1:
c1:a6:23:5a:d6:f7:97:c0:70:3f:b3:20:ee:4f:ab:d1:be:a2:
bb:33:46:1b:ee:44:45:06:35:56:0e:8b:9a:3e:bf:17:b2:7c:
a3:1c:ce:b8:af:03:fc:e0:d9:4f:32:6b:99:1c:bd:81:d8:0b:
5f:aa:01:1a:55:7c:8a:80:af:33:a6:c5:d1:0a:f0:59:50:9b:
1e:a8:d9:82:48:a1:cd:54:1c:9c:c9:0f:00:8a:78:3f:e3:e0:
c4:2d:b3:a0:d9:40:d5:0c:57:26:d9:97:c5:2c:e4:7a:63:2b:
ae:6f:d5:80:ec:ae:1c:29:43:d6:70:3e:d2:4d:d0:f5:7d:93:
56:3d:ac:2f:b0:a3:8e:68:27:b1:ac:cf:7e:6c:40:9c:d2:fb:
9d:bd:b1:37:c0:4e:8a:78:c5:0b:72:02:d8:03:70:a8:6b:c4:
68:12:62:ca:2f:a8:d9:eb:3d:4b:97:98:61:10:bb:5b:9f:d3:
20:e1:c5:23:1c:30:33:51:db:70:b9:fb:45:4f:c4:9a:0f:82:
1f:c1:cc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:46:29 2025 by rpki-client