Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
File: Z5JSueId-BdsxTgCeJX39FhWZqs.mft (raw, json)
Hash identifier: 0jvsjEtko0q0owUYiqeomlgFO9xJ9QufOJeEe3NTIPI=
Subject key identifier: CD:18:DA:0D:47:87:12:F0:00:1E:91:31:96:EC:82:B2:B1:B5:AA:FA
Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
Certificate issuer: /CN=679252b9e21df8176cc538027895f7f4585666ab
Certificate serial: 0196BDEE12B2CD9683894EBB8A04ADAC5DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 06:00:18 +0000
Manifest this update: Sun 11 May 2025 06:00:18 +0000
Manifest next update: Mon 12 May 2025 06:00:18 +0000
Files and hashes: 1: FePFuzEqB9f7ilajywdQpEPMzKo.roa (hash: I5eMCXbNJhaHcUecOqZBTRMoNOXYmdT0pvUT3eEKqpo=)
2: Z5JSueId-BdsxTgCeJX39FhWZqs.crl (hash: FFKx8sHjdsmKTGY0ut6j2jc2fnDHWLPcxqpjYrfb4TA=)
3: hfiXuQJrWIHjhJiPlnaZjIZtJqs.roa (hash: ORTJO6ddZYLHT8LgOqJTg/+OzIjgkcwhz85BPQA8qzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:12:b2:cd:96:83:89:4e:bb:8a:04:ad:ac:5d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab
Validity
Not Before: May 11 06:00:18 2025 GMT
Not After : May 12 06:00:18 2025 GMT
Subject: CN=cd18da0d478712f0001e913196ec82b2b1b5aafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b0:2b:42:d8:fa:4a:02:0b:2b:aa:06:38:ee:
9e:10:0d:de:53:77:16:8a:30:f2:45:2d:54:a7:3b:
a9:d4:f3:58:c3:ed:ae:95:7d:90:4b:7b:0d:4f:a6:
62:32:6a:4d:83:36:72:0a:96:e1:ae:d7:fc:ab:e9:
99:a9:8d:9c:cf:8e:b9:04:75:ba:e2:66:2d:0a:0c:
61:09:47:d8:1f:5c:0c:d1:0d:c6:ce:90:db:9f:64:
e9:a9:cc:5f:35:d9:ad:e8:17:3a:c7:a0:51:f6:93:
67:59:92:3e:11:e9:1f:9c:47:d7:24:da:52:11:45:
50:d5:61:92:91:da:07:0a:1a:64:bd:fd:e0:f0:b5:
df:cc:07:b5:99:af:cb:fa:c6:1e:67:57:4e:07:1c:
1a:6b:65:90:d3:45:21:1d:fb:44:c4:1f:73:85:c4:
ed:93:c5:e6:58:d2:d8:6d:e6:fb:e5:36:07:08:55:
b9:f5:20:e0:0f:41:7b:59:72:cc:23:a9:4b:43:f0:
3f:6e:34:c5:1f:44:eb:b8:d8:f4:64:25:e0:17:58:
87:94:1f:3f:01:36:dc:31:64:2d:f3:b6:5c:65:f2:
74:61:1c:18:bf:ec:e1:4b:6d:1a:92:90:98:43:8a:
1d:7e:ec:66:96:83:fc:c3:3e:50:66:95:67:c0:e7:
35:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:18:DA:0D:47:87:12:F0:00:1E:91:31:96:EC:82:B2:B1:B5:AA:FA
X509v3 Authority Key Identifier:
keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:94:c4:6d:76:e5:91:ca:81:ac:f0:ca:10:9c:ea:ca:ed:86:
97:87:cd:12:48:26:56:6d:80:41:5c:c1:84:c4:e8:51:85:1d:
56:07:20:e8:ff:97:b3:78:16:bf:eb:d2:94:c0:a4:58:3a:80:
c0:be:2b:19:f5:d4:c3:ad:7b:e9:69:5e:3d:11:65:64:56:5a:
2e:b7:00:89:f9:3f:be:b8:1e:5b:8e:9e:67:4c:f4:2a:90:2e:
ed:40:ad:0c:54:30:df:49:cc:70:5e:17:4e:73:5d:89:ad:ac:
86:e1:a4:f5:e7:be:24:aa:a4:a6:5a:7e:f2:24:a0:20:73:9b:
4c:a3:6f:75:ce:11:4e:e9:10:44:58:8c:0a:2d:7f:74:53:52:
52:9a:87:76:86:da:ce:90:50:9f:8e:18:a6:e2:fc:32:f8:3d:
d6:d7:64:52:54:d6:7f:a1:50:c4:0a:d6:1f:31:e0:cc:fc:68:
b2:0d:73:a9:c4:9d:10:ff:41:e1:09:71:fb:af:4d:00:fd:2c:
76:cd:7d:31:a3:17:11:c9:46:c8:05:1f:f1:27:dd:37:2a:61:
60:e5:34:d4:f4:d9:9c:2a:cf:96:51:dc:b6:27:5a:29:b9:91:
ea:69:d5:53:ce:5b:b1:4b:01:fc:ce:dd:ed:91:5c:5f:3f:f9:
0c:e5:39:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:48:28 2025 by rpki-client