Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json)
Hash identifier: uzvoajmwdTXF9GtU037ZaNbN87WXZEV4/+o7U1cZzPw=
Subject key identifier: 00:15:3E:38:C8:3F:A8:4B:9C:9B:94:FA:75:12:08:98:7D:86:E6:92
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial: 0196BE2578CE05C557A35DD8D3688EFFA237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 07:00:48 +0000
Manifest this update: Sun 11 May 2025 07:00:48 +0000
Manifest next update: Mon 12 May 2025 07:00:48 +0000
Files and hashes: 1: MkBFGKrOUFJR_PtFzbIm_0Kt8Os.roa (hash: MWAGOdYdWLQQEq03DBK0C/7h2rvKgHmATNjHLt1oAQQ=)
2: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: lUl3YfiRO/+Bc98JwoqU+Z5MnH4apIjbVv/EL59ae64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:78:ce:05:c5:57:a3:5d:d8:d3:68:8e:ff:a2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Validity
Not Before: May 11 07:00:48 2025 GMT
Not After : May 12 07:00:48 2025 GMT
Subject: CN=00153e38c83fa84b9c9b94fa751208987d86e692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:6d:98:c0:f7:ba:17:a1:0d:4b:ce:13:2d:
88:5b:b3:69:26:9b:d8:18:7d:68:15:29:4a:cf:28:
32:57:ad:78:ee:a8:97:73:c1:b9:41:a0:e8:fc:7a:
27:fb:64:16:f2:06:47:6a:ae:91:65:58:b3:07:d3:
dd:f2:cb:6d:3f:9a:3e:50:57:c2:75:28:78:81:34:
7e:57:9c:bd:46:8d:d5:7e:92:23:36:80:38:17:e2:
48:d1:d6:64:58:1c:db:26:db:a7:f9:81:85:cb:e3:
ca:d1:df:f8:5a:7f:6b:29:06:86:6a:24:fc:6a:bc:
06:6c:f7:be:6d:b7:92:02:ea:bf:ab:ed:56:0e:75:
f7:e9:17:58:47:58:8e:5a:bd:e2:69:47:23:7a:0a:
52:e6:26:6b:de:82:90:05:96:b6:97:00:b4:0f:12:
dd:7d:d4:e7:e5:14:79:b4:04:be:0d:95:24:83:b2:
aa:70:29:b7:c8:78:90:d6:46:5d:d9:43:d9:73:44:
82:76:ac:ca:78:2d:6a:ef:1c:86:1f:7d:ee:0d:25:
14:94:5e:bd:13:8c:76:3e:45:29:34:d8:a7:2e:7e:
03:06:e3:e3:bd:20:08:df:44:28:cc:05:bb:fc:cc:
9a:a2:e8:c9:fe:e6:64:19:54:9e:3e:ec:df:43:78:
46:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:15:3E:38:C8:3F:A8:4B:9C:9B:94:FA:75:12:08:98:7D:86:E6:92
X509v3 Authority Key Identifier:
keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:42:51:57:df:f4:05:42:c9:61:54:63:87:ae:61:ca:af:9e:
71:1c:61:69:3a:26:69:92:87:d9:c9:4c:15:41:cc:3e:a5:77:
69:37:b2:4b:87:30:a5:2b:03:01:68:b0:43:4e:8f:ed:b5:26:
e8:26:36:73:c9:fa:38:c6:32:98:2b:48:41:92:8f:fa:fe:9a:
2f:ab:90:80:9b:78:01:6e:ce:2c:2e:78:c5:1b:8c:6e:83:24:
8f:8a:6c:ad:63:2a:f7:a0:9d:53:fd:61:eb:9a:7a:8c:b1:8e:
9c:a4:4c:bb:d1:ab:fd:51:99:a0:60:01:70:b3:74:87:85:ae:
af:18:e1:b8:11:26:e4:3d:bb:3f:26:cb:33:91:bc:1e:98:a1:
aa:0d:11:28:ec:59:e2:a7:26:67:e5:05:42:6f:bd:5d:5f:26:
ca:84:6c:d2:8d:44:ea:82:48:30:65:f7:bf:d1:6a:f3:1f:71:
7f:fa:8b:8f:98:fc:86:5d:cd:42:2b:5c:05:9a:a9:60:f8:45:
22:db:7c:8d:32:60:7f:70:a9:1c:5e:0c:77:62:ee:f8:42:f5:
f8:cf:ce:fd:8d:18:9e:75:cf:29:8f:48:79:38:b1:d6:74:3c:
c6:e5:f1:63:86:bf:54:58:12:26:8b:f7:57:0c:23:dc:75:74:
e9:7b:e8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:45:41 2025 by rpki-client