Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
File: N5SayE0LhpEPT9PPWWKSfYNFCus.mft (raw, json)
Hash identifier: RSbCzUphhbaQ/mi0QVwJxZWXDkxDYJi1Jz8oK1jnOIk=
Subject key identifier: 58:8D:6E:0B:82:96:1E:D3:0B:97:99:50:84:9F:C7:51:59:90:3F:23
Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
Certificate issuer: /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Certificate serial: 0196B7B565C300167040558A54D52DC2277C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
Manifest number: 153E
Signing time: Sat 10 May 2025 01:00:40 +0000
Manifest this update: Sat 10 May 2025 01:00:40 +0000
Manifest next update: Sun 11 May 2025 01:00:40 +0000
Files and hashes: 1: N5SayE0LhpEPT9PPWWKSfYNFCus.crl (hash: PgpPfmEc9F4hbOlDoeQvJ1JpXSxmFl3VodgN2xZypFY=)
2: PRhohmSPpTdafiCYHQlb6tS5RSA.roa (hash: rmrtG9C35CBJyHZUuhN45njc7Z7w311hCWAJB2ctSsg=)
3: U3FGMgcx33zABNd6WUQZ6FgIXMg.roa (hash: Wpl9P0cBekHap/iywSD8clsCi8JMACpk0Rm1bx3lrQQ=)
4: ag6Uw2WZeIksxGOXDr4DgUkmA5c.roa (hash: Dv4MeWf6ZNTTsICz0sxMh5s96US2ndB/BMpQt263Gn0=)
5: hn5PYDOLpsdmTwt2qZTXNCawnyY.roa (hash: 3JeglmLM9o2mfs2x0MSYzgxU3A+vKl/1QHtc/EU9QCM=)
6: ncXYiMMk7Py1Om5tGMqWGLBtpDE.roa (hash: ue3PRYMatnVnCc7uFg9uHpheEoijmvmRSQgE1aUj8Qs=)
7: pehnBB-B-wysgLV5x41--aRvVZU.roa (hash: znIOUjgtTlPjJizZbJTREWW6ctyWS6FYMjde0/qvy2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:65:c3:00:16:70:40:55:8a:54:d5:2d:c2:27:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Validity
Not Before: May 10 01:00:40 2025 GMT
Not After : May 11 01:00:40 2025 GMT
Subject: CN=588d6e0b82961ed30b979950849fc75159903f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1e:9f:ae:f1:73:7b:ed:3e:ea:fb:29:59:d5:
41:da:d2:88:c3:04:57:bb:1e:20:b4:41:91:6d:31:
98:e2:23:65:63:c6:d7:ac:ca:9a:b1:2f:fd:14:c2:
6c:37:1e:1e:ef:88:7d:41:f2:79:54:16:e1:ea:c1:
91:fb:40:b6:0b:8f:69:a2:c5:31:3b:0f:56:80:f5:
db:1d:94:7e:6f:99:f0:07:9b:b9:84:ef:41:7a:d5:
c6:c8:9e:22:41:84:18:fa:30:6d:c9:9c:a5:4b:c7:
71:c0:3d:89:9f:90:3d:bf:0b:e9:d9:09:6e:fb:57:
60:6b:15:ef:cd:8d:9e:1e:85:60:74:66:4c:90:7f:
7e:6e:31:03:e0:ea:8f:77:ab:53:e9:0b:8e:7c:f6:
07:7c:9b:56:dc:7a:12:52:c2:ad:e2:0c:b1:73:7a:
c5:c8:e6:04:65:88:59:15:49:7d:14:7c:1d:a3:fa:
13:1c:f3:f0:7e:40:b4:c4:f4:6f:c5:61:99:17:11:
83:e6:5a:43:76:88:a1:41:a4:43:d9:1c:c1:5f:f3:
c9:8b:8b:ae:68:cb:60:38:d2:5e:15:9b:4b:09:47:
43:89:49:9e:47:cf:61:87:88:1d:34:ce:fc:f2:43:
b0:7d:0b:9e:68:20:57:12:26:00:5b:12:43:75:ee:
97:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8D:6E:0B:82:96:1E:D3:0B:97:99:50:84:9F:C7:51:59:90:3F:23
X509v3 Authority Key Identifier:
keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f3:d1:7b:52:57:fa:78:e3:74:81:b6:3b:23:b8:a9:3d:ef:
7e:7c:46:ca:8f:9e:13:8d:3d:ac:4f:3d:47:3b:82:d7:b4:87:
1d:d6:c4:e2:10:dd:d6:f4:72:25:e1:b8:b6:7a:21:a6:cd:c6:
ce:14:be:20:05:d5:df:f7:0f:13:22:6c:cc:6d:3f:52:78:bf:
c4:f7:e0:b4:f8:a5:3d:4a:92:17:96:d7:c1:8d:24:84:56:4e:
3e:8c:1a:a3:3e:ee:4c:49:ef:94:21:07:00:a6:2d:e4:ce:2f:
a0:28:be:f1:29:86:f0:2f:c3:78:c7:cd:a1:09:2a:ab:db:c8:
2f:d2:26:48:65:77:c6:a0:b2:04:a8:c0:07:77:4a:d2:16:a9:
87:87:1c:3d:53:a6:b2:fc:d9:68:68:01:90:80:ec:55:96:26:
ef:39:f9:3c:ff:4c:90:2a:e1:76:3a:ea:1a:4a:80:b3:89:9b:
eb:25:5f:07:80:57:80:5c:6f:3c:68:a6:c5:6b:5f:71:d9:60:
c4:82:46:4d:48:7c:73:ce:4b:2d:be:1d:7f:b3:1b:5a:51:63:
58:ee:de:82:b7:50:59:38:43:89:1c:a3:22:c9:fb:df:7a:31:
38:52:04:92:56:77:ca:57:fc:51:79:75:29:2c:7d:c8:9f:1a:
ce:d0:ce:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:44:37 2025 by rpki-client