Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
File: X2c9L2Ia4xQHABdIu95jisvYYFA.mft (raw, json)
Hash identifier: B3/Kfcx9MMFJ91gQ1faRERcRCf4zcgGOwcx5sU+SXWM=
Subject key identifier: 32:5E:35:FB:3F:F0:E6:C1:7B:26:61:85:3C:B5:0B:E2:43:14:E2:CE
Authority key identifier: 5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
Certificate issuer: /CN=5f673d2f621ae31407001748bbde638acbd86050
Certificate serial: 0196AC1F38162DA5999106983BA739E38D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
Manifest number: 05A0
Signing time: Wed 07 May 2025 19:00:49 +0000
Manifest this update: Wed 07 May 2025 19:00:49 +0000
Manifest next update: Thu 08 May 2025 19:00:49 +0000
Files and hashes: 1: HqDRIksWN36QXauqYoD2knIGjbc.roa (hash: 05DMa/ontaHtCWdbIzNxIFAgYET2ZoK4nwid3joHlm8=)
2: X2c9L2Ia4xQHABdIu95jisvYYFA.crl (hash: G1R7/XXIqLgJa2LA3XJ/qmoRDrwJ1kUmGQwTPcloHls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:1f:38:16:2d:a5:99:91:06:98:3b:a7:39:e3:8d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f673d2f621ae31407001748bbde638acbd86050
Validity
Not Before: May 7 19:00:49 2025 GMT
Not After : May 8 19:00:49 2025 GMT
Subject: CN=325e35fb3ff0e6c17b2661853cb50be24314e2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:15:ff:48:94:65:8c:dd:ab:a0:f5:ff:43:73:
1c:3c:da:b7:65:6b:ab:08:e5:ab:35:5b:45:06:5b:
fc:f2:be:92:d2:7c:cf:37:9d:aa:1f:5e:83:cd:bb:
f9:d2:a3:5c:eb:d6:b4:b6:2a:72:d5:f0:50:19:86:
ae:3a:b0:52:37:7a:b4:ec:28:1e:79:cc:e3:19:d1:
fe:f9:fa:4c:69:d4:ff:48:df:97:86:62:21:6d:70:
10:71:07:1c:d8:ec:d4:81:e2:97:00:0f:da:10:60:
8c:51:e1:d1:1e:3b:84:94:4e:49:46:c2:6a:17:33:
49:d1:24:7c:8d:89:c5:4e:b2:b6:4c:c7:06:00:1b:
32:5c:94:c5:9a:81:df:5b:92:19:b6:31:fe:64:62:
43:1f:5d:12:06:46:77:c2:4e:5f:3c:9d:24:1c:56:
cf:cc:fb:d7:5e:91:b7:87:33:54:0f:d5:99:2c:5d:
2f:14:7c:a3:1e:52:dc:23:ce:8f:08:8a:8c:c0:9f:
c2:6b:b1:3f:d1:b5:1a:a9:51:ce:c5:ad:7a:03:78:
ba:4a:8e:15:36:6a:4c:1b:98:2d:7d:85:10:8f:a5:
00:87:e5:65:fb:cf:e0:69:be:d8:15:f1:1b:4b:df:
c8:92:b8:14:23:e3:a8:c2:d6:ce:c3:70:a8:b9:01:
f8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5E:35:FB:3F:F0:E6:C1:7B:26:61:85:3C:B5:0B:E2:43:14:E2:CE
X509v3 Authority Key Identifier:
keyid:5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ce:af:fb:1a:69:ec:fa:b6:d6:6c:f8:d7:a5:e5:f5:7b:71:
6d:ca:a0:db:9f:5f:5f:fd:27:6c:2f:d1:7e:7e:a1:cb:ff:de:
67:c2:69:3e:bc:d4:ca:55:6c:05:52:20:a2:27:be:81:d9:9e:
f8:3c:41:2e:8d:0b:ba:e5:2e:de:6f:f4:52:36:23:99:89:ce:
d8:0b:d5:6d:37:c1:73:7f:e7:28:9b:95:da:9d:ed:fb:28:48:
69:46:94:b1:ee:0a:4a:d9:a8:cc:bf:88:c6:4a:64:e8:93:ec:
6d:31:8f:ed:3d:db:67:a4:6e:9c:97:46:3c:73:27:04:bf:f5:
24:25:66:e8:86:da:70:4d:5c:43:7a:59:fa:dc:9d:ce:79:37:
95:2a:9e:57:61:87:06:71:17:43:3a:1c:05:b1:4b:60:4f:12:
f8:78:54:dc:62:b3:cf:91:4d:4a:26:ef:2f:a1:7f:53:88:43:
16:21:1e:ae:13:a8:45:d3:7f:7c:bc:58:d1:d9:34:a1:ea:8d:
39:19:2e:04:cd:53:8c:27:e0:41:01:2d:ba:ee:30:fc:83:1f:
8d:ff:5f:95:24:f3:38:c5:0a:71:53:07:c7:24:64:fc:91:8b:
44:3b:0f:66:5d:bf:cd:b3:7f:b3:92:72:68:67:42:b6:51:24:
26:3f:c1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:51:26 2025 by rpki-client