Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
File: cN5wfWwBAGsqymh-qrKctHNrdmg.mft (raw, json)
Hash identifier: GkA9f4idsx7kNMwgL5pWocjfL8RXDt27Y7OQ5f7sovU=
Subject key identifier: A4:34:7F:FA:C1:47:77:CB:80:A6:C5:70:5A:95:87:C1:1A:46:48:F9
Authority key identifier: 70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
Certificate issuer: /CN=70de707d6c01006b2aca687eaab29cb4736b7668
Certificate serial: 0196BDB76FF3814AA39831038D87B69CC040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 05:00:37 +0000
Manifest this update: Sun 11 May 2025 05:00:37 +0000
Manifest next update: Mon 12 May 2025 05:00:37 +0000
Files and hashes: 1: Jo8Y435n3Pd_3zXxNtedYgjItDk.roa (hash: s59FKEp30KDhXVkiZy91uysMmddt+n0/jacR5LsK5DU=)
2: cN5wfWwBAGsqymh-qrKctHNrdmg.crl (hash: 1BLkyWwTpOCrkC9YZNDk/4jqBLft4V0u89v1VUx8p10=)
3: fvocZOR5mjQw63-hlnTV0AYJ-n0.roa (hash: EDtt1bNtketuScVPOmt7fRRKZDdXsTL+CjwO3mYdaKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:6f:f3:81:4a:a3:98:31:03:8d:87:b6:9c:c0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70de707d6c01006b2aca687eaab29cb4736b7668
Validity
Not Before: May 11 05:00:37 2025 GMT
Not After : May 12 05:00:37 2025 GMT
Subject: CN=a4347ffac14777cb80a6c5705a9587c11a4648f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f2:d7:cf:da:cd:55:70:9b:85:53:28:91:b6:
84:e6:70:9e:80:3b:ff:07:22:38:3a:b6:38:5a:e9:
db:2b:e1:71:13:df:e0:d8:91:f5:da:4b:52:3a:d5:
b4:29:09:11:d6:f0:a5:09:9f:64:9c:33:f0:d0:e4:
27:55:69:41:a8:d6:1f:63:48:91:0b:8e:32:de:a3:
be:e7:21:7e:05:cb:f2:e4:4b:ee:00:7c:81:0b:30:
ac:0f:21:e4:01:c7:11:d2:76:bd:8f:13:84:05:a8:
a6:30:90:42:9b:df:02:5c:bf:83:04:92:d5:4f:19:
2e:b8:db:94:a5:f5:80:e9:c8:86:6a:aa:53:30:b1:
f5:ef:8d:2a:4f:fc:55:9a:6f:e1:51:bb:2b:81:90:
ed:03:c3:5c:c6:2d:3d:f8:1f:ec:b1:d3:8b:c6:4f:
7a:f7:08:32:7a:d8:10:c1:55:42:7f:bd:49:6b:66:
9c:c3:f4:49:6b:bd:9f:02:f2:a7:66:04:89:48:5e:
8f:20:89:21:45:4e:c1:ae:0f:47:59:91:73:d5:0a:
ca:78:42:38:9d:cd:84:db:08:90:ad:96:b4:8d:6a:
10:38:a5:f3:a3:32:c2:e9:db:d6:e2:5f:06:0b:63:
c4:c6:16:40:c3:d5:30:cb:05:9d:3a:39:89:ba:5f:
93:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:34:7F:FA:C1:47:77:CB:80:A6:C5:70:5A:95:87:C1:1A:46:48:F9
X509v3 Authority Key Identifier:
keyid:70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:98:4a:28:48:24:7e:5e:d5:6e:a4:62:a3:32:53:f1:7d:04:
0d:cd:93:f7:ef:d6:38:d9:74:65:17:dc:c0:cc:50:28:96:7d:
a0:f6:14:2c:0e:c8:b9:b7:53:6b:a0:78:14:fa:0b:e1:4d:87:
e7:cf:de:31:d3:9a:b5:5a:32:c3:95:cd:70:4a:25:5b:fb:58:
01:62:6f:ea:ef:aa:b2:2f:42:83:da:e1:e8:aa:6d:e6:90:c7:
be:9d:65:ba:0b:07:2a:08:4b:a8:a8:95:b7:0a:b4:51:ad:9f:
7a:40:6f:8a:8a:9e:18:d6:d1:89:50:c8:5c:1e:57:06:30:1d:
4b:f5:24:1d:06:d2:17:fd:d8:bd:65:0a:1b:81:09:81:1e:25:
cc:9a:dd:d9:7a:d8:b4:74:e2:09:00:99:a0:5d:a1:7c:21:4e:
9e:ed:11:db:d4:6a:a0:89:aa:09:5b:e7:7a:ad:07:bf:6b:2d:
2b:ab:18:0e:95:b3:59:21:4f:a5:76:dc:b0:ce:d3:3f:25:a1:
70:8f:a2:f2:b4:5d:39:5f:37:f4:fe:22:a2:45:df:11:72:5d:
d1:f6:34:f3:3f:1c:b9:39:32:80:fe:df:a4:e2:81:29:db:e4:
45:88:fd:f3:6c:46:28:aa:ad:5f:b0:f8:18:70:ed:67:36:b2:
b3:76:8e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:05:27 2025 by rpki-client