Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
File: X5ZnbPOY05lMTdSilllGFN_1hsc.mft (raw, json)
Hash identifier: m9OVeCpn81vh0wV4pFyTCYHPEtJA3ewJ3KZzFHp+JCc=
Subject key identifier: FE:7F:94:EE:88:DB:F3:28:3E:93:05:A8:80:B8:4C:40:1A:EE:7A:ED
Authority key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
Certificate issuer: /CN=5f96676cf398d3994c4dd4a296594614dff586c7
Certificate serial: 0196775594CDDF50F0FB56626C71E9955653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
Manifest number: 1527
Signing time: Sun 27 Apr 2025 13:00:19 +0000
Manifest this update: Sun 27 Apr 2025 13:00:19 +0000
Manifest next update: Mon 28 Apr 2025 13:00:19 +0000
Files and hashes: 1: 2zkARhYQi5MZVSVViedBzAUUfQU.roa (hash: DjES1xG44afB1DWsZff60m/UWnCi+Z0rElpzn4HCOqg=)
2: X5ZnbPOY05lMTdSilllGFN_1hsc.crl (hash: yUJ9ojuSNVvFtljukMFIKTlM2yyoGL2M192S9lfAeLQ=)
3: XyWUYm4k4aoyZu4exVkzUEY6NsM.roa (hash: nfbYF1NSykMyHcBytLNKjU++mQtuxfs2vY7BM12cSnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:94:cd:df:50:f0:fb:56:62:6c:71:e9:95:56:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f96676cf398d3994c4dd4a296594614dff586c7
Validity
Not Before: Apr 27 13:00:19 2025 GMT
Not After : Apr 28 13:00:19 2025 GMT
Subject: CN=fe7f94ee88dbf3283e9305a880b84c401aee7aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:41:64:ac:c2:f4:12:02:9f:49:2f:79:51:a6:
cb:4e:69:0f:a0:46:0c:2b:28:a7:59:94:17:05:e9:
79:e1:71:9d:b0:1e:31:ca:7e:e4:bf:3d:cf:73:94:
ce:39:ed:63:f5:b5:8c:20:30:85:84:e9:62:ab:69:
64:d5:b0:df:94:e7:7c:e8:f7:59:21:f4:e5:1f:ad:
d4:24:06:16:6c:1c:28:ab:dd:77:78:c7:8f:4b:d0:
ad:1a:07:8a:cc:11:2d:24:0b:21:3d:f2:f2:ef:13:
aa:b7:7f:0d:c6:86:1a:a6:81:e2:03:89:6f:60:8f:
8e:62:27:ba:5a:8a:c3:16:8c:6b:54:d7:04:58:ba:
f1:a7:0c:79:4c:59:55:40:40:c8:e5:26:ec:01:7e:
d4:ce:e5:c1:d1:54:c0:77:5f:a6:d5:b5:ba:6c:31:
2d:92:3a:85:e6:65:97:ed:dc:d6:e4:6b:ab:ef:d5:
fa:36:17:ed:7d:0a:a4:7b:f5:05:70:75:e0:9d:07:
1e:3a:e2:c0:0a:86:06:e5:66:bb:0c:62:fc:31:74:
1f:b5:31:90:aa:a3:1b:ad:9f:0b:61:12:7f:c9:29:
f2:71:f8:23:65:bd:1f:e4:a2:31:e8:bb:4e:53:a0:
20:13:b7:df:67:60:74:c5:6c:fc:c4:68:24:f1:61:
c0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7F:94:EE:88:DB:F3:28:3E:93:05:A8:80:B8:4C:40:1A:EE:7A:ED
X509v3 Authority Key Identifier:
keyid:5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:19:0c:0f:4d:ee:90:b3:30:37:03:fa:79:fa:b9:2a:43:76:
36:f7:34:e7:62:d3:6c:b5:1e:c7:54:2b:fa:76:3f:4e:99:93:
4c:92:d9:2a:50:d5:55:cb:f1:ca:de:a9:93:d0:86:c5:2e:38:
b3:98:3d:06:28:39:fd:a3:78:65:4d:48:c5:ff:a2:0d:9b:c9:
7d:05:2d:90:b9:21:40:26:e9:3b:a8:b6:96:09:f8:3a:4b:1c:
fe:18:75:ec:4a:04:45:69:8f:10:84:8f:4f:b8:40:b1:ee:61:
79:4b:26:a2:26:3f:bb:0a:f5:b4:55:4c:64:6a:74:7a:dc:29:
7b:41:67:d7:ae:c5:53:b5:18:93:68:38:38:f7:14:3f:9c:43:
8e:3e:e2:d0:2d:d0:f5:52:96:b1:95:39:08:60:ad:83:df:23:
c8:21:a0:e0:c4:a4:78:53:55:39:4b:71:38:f5:3d:ea:69:96:
64:ee:5e:96:aa:74:e2:91:61:0a:0b:0d:c5:7f:61:7b:3f:f6:
38:05:60:71:99:71:07:a5:28:1e:6d:17:32:df:f1:4a:61:70:
b7:29:32:bd:ce:d6:c7:1a:aa:f4:61:1b:9d:46:da:83:ff:7f:
13:c0:d9:71:46:d9:2e:10:72:e1:de:92:2c:14:33:e9:a7:c1:
2a:76:26:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:41:18 2025 by rpki-client