Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
File: ISvg6nHPQ34I798_55jq-YQTHEY.mft (raw, json)
Hash identifier: XyXr5qSXEpI9v9WnKILsFohATQQZFMN205Hbe538F+c=
Subject key identifier: 5E:6E:C7:DC:BD:5D:8B:9A:FB:C2:0F:B5:38:7D:64:AC:C7:54:DC:8C
Authority key identifier: 21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
Certificate issuer: /CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Certificate serial: 0196C50306BAD141CEB1F8942C2BFE4F96F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
Manifest number: 153D
Signing time: Mon 12 May 2025 15:00:31 +0000
Manifest this update: Mon 12 May 2025 15:00:31 +0000
Manifest next update: Tue 13 May 2025 15:00:31 +0000
Files and hashes: 1: ISvg6nHPQ34I798_55jq-YQTHEY.crl (hash: /tIbIXwB80ttSbRIi2zuFKZ2DthJv58VMmFP31wDhO0=)
2: KtlxuE_8Rk2uPH3RNNTJz5tQ-98.roa (hash: Zkhu8f8yjf/QHqOQXe12PGw2OKR9LJM6Q4zyvvvVxD8=)
3: isGPTkBcxk2AKZ3pqWNrimW3LHo.roa (hash: Y2V5pd0IY6biUxiXA3E5dpmuRX9YWawCufz2noSbIak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:03:06:ba:d1:41:ce:b1:f8:94:2c:2b:fe:4f:96:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Validity
Not Before: May 12 15:00:31 2025 GMT
Not After : May 13 15:00:31 2025 GMT
Subject: CN=5e6ec7dcbd5d8b9afbc20fb5387d64acc754dc8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ef:20:04:2b:b0:d4:43:02:44:b2:69:a8:93:
7e:d2:51:e7:f8:32:dc:75:39:53:b4:4b:d1:c6:e3:
58:74:30:0f:a7:14:8b:13:d3:5e:92:60:2b:04:13:
95:b0:9a:87:9a:42:f1:7a:73:b2:05:19:3b:06:eb:
a5:c3:c7:e0:03:54:d4:d1:a4:b8:93:de:d9:a1:54:
04:20:51:84:9f:e6:f5:5b:47:1d:d9:ab:90:57:e2:
47:cf:78:b5:cc:b0:87:65:b0:ca:65:90:34:47:8c:
a0:b1:bf:75:bf:57:31:7d:a8:42:54:36:57:b9:f7:
d9:6e:82:7d:b6:fa:b0:11:f3:90:fe:2d:ac:41:45:
02:a7:08:03:7f:a7:2c:29:8e:80:61:91:ed:da:c6:
00:19:a8:29:65:8b:3c:83:0f:e0:fa:4a:00:b4:66:
79:30:a3:12:3d:58:c1:77:62:84:69:60:3b:e1:bd:
6a:1e:f5:ed:1c:a6:0e:84:7b:c4:56:91:fd:64:90:
1e:59:7b:9f:f6:ce:7d:cf:42:72:1c:f8:b3:3c:3d:
da:55:39:b8:5e:d2:76:f5:ea:92:de:4c:d2:ab:be:
2a:97:7d:62:01:7a:60:86:24:6b:0a:fd:30:77:e3:
2d:cd:2c:1a:a4:8a:37:49:b2:9f:da:98:e9:26:64:
bb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6E:C7:DC:BD:5D:8B:9A:FB:C2:0F:B5:38:7D:64:AC:C7:54:DC:8C
X509v3 Authority Key Identifier:
keyid:21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:dd:2a:ab:53:e1:51:dc:54:f3:36:c6:e1:5d:f1:a8:c9:d9:
c2:6e:82:db:93:ed:34:36:65:71:25:18:82:19:76:65:fa:44:
f6:99:ea:8b:73:5c:38:51:8f:c2:43:0e:3a:a4:d7:6c:8e:2d:
b4:29:ef:b9:e0:7d:08:be:66:aa:03:2e:9a:30:34:e4:fc:fe:
dc:76:d5:ef:b0:83:b8:0f:c7:2d:2e:8d:46:50:9b:d4:3e:52:
4c:de:d1:05:ab:44:bc:e7:56:06:32:d5:08:fc:7a:b6:9e:2d:
5d:b8:35:ca:66:55:4e:dc:9f:72:91:a8:9a:70:f3:3f:cc:d4:
06:e5:73:c4:61:06:41:35:9f:c1:bb:0e:28:3a:9e:be:98:32:
b3:36:ab:23:f1:0c:6a:6c:ce:9a:8f:67:95:04:6e:7d:c6:06:
b0:81:7a:a7:4d:31:f3:dc:94:7f:7a:c3:d7:19:16:ed:c4:7f:
24:2d:56:17:42:8a:b0:3a:67:c5:e2:43:4e:4c:25:af:82:26:
5d:fc:74:f1:e6:93:db:7e:74:7d:c5:90:69:a5:91:42:bd:1f:
14:20:e3:2f:ef:f7:85:8e:18:32:a2:0b:14:bf:53:b2:33:f6:
68:7e:b9:19:6a:82:44:b7:f8:79:20:ec:c1:6a:72:66:b2:ae:
b4:08:ec:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:04:49 2025 by rpki-client