Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
File: 5vOOPoarVh-g3TywmnDWGyykR0A.mft (raw, json)
Hash identifier: by5+eICeepFKADv0V0Vok5bjxBe/YI4+A37vMqvemZ4=
Subject key identifier: 95:AC:BD:3D:6A:C8:24:1D:FE:0A:8B:1C:3C:F7:B2:6C:EB:0D:09:D4
Authority key identifier: E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40
Certificate issuer: /CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740
Certificate serial: 0196C1CB219E55AF4EABDA9D2FD89CAFAA51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
Manifest number: 02DC
Signing time: Mon 12 May 2025 00:00:37 +0000
Manifest this update: Mon 12 May 2025 00:00:37 +0000
Manifest next update: Tue 13 May 2025 00:00:37 +0000
Files and hashes: 1: 5vOOPoarVh-g3TywmnDWGyykR0A.crl (hash: g+b332AMDuSCsDEmIZoGCXWBk+ELHGn+73NTWmdfCh8=)
2: l3aNToPytPwYHgxWfH_Fxe7l9-8.roa (hash: rud0x/u1K9V6C61gkvZO4dPUmEXcZ8EJf2+cgfvlR5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:21:9e:55:af:4e:ab:da:9d:2f:d8:9c:af:aa:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740
Validity
Not Before: May 12 00:00:37 2025 GMT
Not After : May 13 00:00:37 2025 GMT
Subject: CN=95acbd3d6ac8241dfe0a8b1c3cf7b26ceb0d09d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:d1:58:a8:15:3b:1d:3d:ea:b0:4e:6f:b3:
18:72:d1:af:46:58:34:4f:6e:d7:c1:96:57:72:93:
f9:1c:d8:34:e0:9b:ff:15:f1:81:1a:68:e0:74:40:
fa:79:52:98:82:ea:d7:5e:3b:b5:54:c1:50:8d:82:
39:db:20:e0:fe:c9:46:49:4b:12:5e:3f:d1:06:d5:
82:d3:66:ae:c6:09:fe:3c:e5:68:6e:37:c3:e5:b3:
1e:0f:a8:d9:e6:ca:fe:77:91:52:6f:65:1d:5a:5e:
e9:23:52:91:c9:19:63:e6:e7:89:a2:62:b8:2c:a1:
60:21:a8:08:c9:e0:6d:22:cf:04:92:22:c0:97:b6:
b6:e3:87:54:1c:3f:aa:6a:2f:2e:02:a4:96:66:99:
dd:bc:ae:a9:ac:65:80:65:7b:24:62:a6:30:99:a4:
c6:9a:8b:3a:93:8d:51:c2:c6:b3:80:2f:fe:f2:6d:
fd:e4:83:13:40:32:d1:5c:01:f7:bc:05:cc:6f:ea:
ad:d7:25:89:69:d8:84:8c:00:03:1b:e2:eb:8c:d5:
97:93:95:43:03:52:88:ba:56:fd:66:db:79:13:a0:
b5:a5:87:43:f7:00:a0:2c:7f:6b:50:17:79:27:ec:
eb:e8:46:a9:75:19:3f:56:7b:f0:87:f3:d9:c4:4b:
1d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AC:BD:3D:6A:C8:24:1D:FE:0A:8B:1C:3C:F7:B2:6C:EB:0D:09:D4
X509v3 Authority Key Identifier:
keyid:E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c8:8a:11:40:16:1a:b8:7e:20:f3:1f:ed:bd:3a:0a:b8:d6:
95:91:74:19:f7:37:b5:44:8d:31:f4:e3:b9:a1:66:9c:e5:29:
9f:6a:37:5c:3e:b3:4d:03:b5:c2:f1:1a:ea:30:1c:d8:9a:9e:
ce:55:e1:a3:a1:a6:fe:62:86:cd:60:77:ba:30:f2:96:89:57:
a3:b2:05:b8:fc:04:a0:ed:3c:a7:5e:30:de:79:63:02:a7:2a:
84:67:8b:39:15:ae:4f:68:a7:cb:ae:ff:28:83:b0:9b:9d:6b:
60:cd:3d:a5:dc:30:80:f9:d1:b2:74:7c:6a:f6:5d:5c:bb:37:
88:38:36:3c:60:74:8c:b6:17:4f:0f:3f:fd:dc:15:a2:e9:77:
ff:01:8c:14:26:13:fc:de:a9:1a:a9:8a:32:a7:db:41:1f:95:
f3:92:ee:c6:e8:20:7a:5b:72:cc:2a:3a:ff:fb:60:1b:87:fd:
f5:4a:6f:89:56:6a:9d:9c:ec:ce:66:07:ef:bb:b6:96:bd:1a:
7b:6f:66:1a:ad:f0:b5:90:01:09:6b:61:0d:aa:59:3d:fc:69:
e6:20:39:dc:3f:8c:0b:cd:c5:db:3a:79:a1:2d:b3:f0:29:bd:
99:44:95:b1:25:85:f9:92:e0:f7:b2:1f:89:38:8f:3d:7a:14:
07:a6:1b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:03:11 2025 by rpki-client