Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
File: X5ZnbPOY05lMTdSilllGFN_1hsc.mft (raw, json)
Hash identifier: VS4bq7yUSaCf17gLYojaoO+pZTuwBvWCz2iGaDCAu6E=
Subject key identifier: 25:0C:C8:D0:0E:63:EA:85:F0:5E:17:17:80:F6:6A:AC:26:73:4D:80
Authority key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
Certificate issuer: /CN=5f96676cf398d3994c4dd4a296594614dff586c7
Certificate serial: 01987ED3FB747C7D69797A653BA8718C97FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
Manifest number: 1634
Signing time: Wed 06 Aug 2025 10:01:18 +0000
Manifest this update: Wed 06 Aug 2025 10:01:18 +0000
Manifest next update: Thu 07 Aug 2025 10:01:18 +0000
Files and hashes: 1: 2zkARhYQi5MZVSVViedBzAUUfQU.roa (hash: DjES1xG44afB1DWsZff60m/UWnCi+Z0rElpzn4HCOqg=)
2: X5ZnbPOY05lMTdSilllGFN_1hsc.crl (hash: vWU2XOfKikV2qinKvwDtaUCG6thaIzF0K2apa17dXCY=)
3: XyWUYm4k4aoyZu4exVkzUEY6NsM.roa (hash: nfbYF1NSykMyHcBytLNKjU++mQtuxfs2vY7BM12cSnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:fb:74:7c:7d:69:79:7a:65:3b:a8:71:8c:97:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f96676cf398d3994c4dd4a296594614dff586c7
Validity
Not Before: Aug 6 10:01:18 2025 GMT
Not After : Aug 7 10:01:18 2025 GMT
Subject: CN=250cc8d00e63ea85f05e171780f66aac26734d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:15:2e:49:95:bd:ad:e2:f7:eb:d9:ae:19:
26:9d:d8:c3:84:d7:86:d4:81:53:52:8b:3e:df:eb:
03:44:12:c8:f1:fc:cf:d1:7d:e3:59:0f:ec:4b:4d:
dc:1e:09:db:fe:07:94:9b:be:4e:71:c3:7d:af:63:
ff:b5:72:d5:0c:84:c5:c1:11:f4:e2:7b:4a:d9:11:
60:83:04:6c:22:23:e1:f0:13:8a:72:b9:f4:a5:6f:
4e:8d:11:f6:e8:9f:a7:85:17:10:e6:1e:6a:83:19:
29:fe:40:94:ea:87:1b:eb:72:c4:85:92:bb:6d:72:
c6:ec:de:13:5f:bf:35:df:d6:59:7d:d7:b4:85:f4:
20:78:eb:00:14:a7:be:cd:98:09:b3:4d:00:13:74:
2a:c5:7f:00:dc:d4:11:56:de:bf:cc:4e:49:c4:24:
d4:7f:78:ac:37:b1:49:a1:db:e7:e3:bf:9b:ea:6a:
a0:4b:0c:10:67:cd:f0:82:7a:9f:bd:f6:32:ef:12:
ad:5d:f7:9c:66:0e:1a:e7:81:68:50:42:47:5c:e9:
74:21:08:9d:f5:d7:6a:1e:d9:0a:80:21:cc:79:dd:
84:16:f5:50:fb:d9:f1:bb:8f:1e:cb:73:6f:d8:53:
1e:0d:be:20:8a:72:1b:97:b0:cd:9f:fe:33:4e:35:
4a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0C:C8:D0:0E:63:EA:85:F0:5E:17:17:80:F6:6A:AC:26:73:4D:80
X509v3 Authority Key Identifier:
keyid:5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fc:92:dc:8f:ea:8c:a4:23:2c:da:60:dc:8c:e1:92:53:ad:
77:d1:1f:e6:84:68:4f:d9:c2:b7:c6:72:f3:34:d7:c5:a5:2a:
e4:7d:0a:a9:0a:85:fd:54:84:e8:9a:19:b9:31:76:d3:d1:8e:
00:99:8e:9f:a9:34:23:ef:2d:05:62:8f:be:f2:7d:b0:fd:23:
4d:bb:34:d0:02:6c:cb:72:51:6a:6c:5f:6f:c2:19:6d:26:40:
ff:7f:a7:cd:ba:66:cf:25:c3:d6:e3:02:27:ad:e2:b4:2e:37:
f2:51:ee:5c:09:e0:57:eb:8b:6f:04:90:a4:2d:67:ee:16:d2:
4b:32:cd:3d:aa:36:c0:ab:b5:e6:c5:bd:c1:fd:22:f8:aa:e2:
b2:4d:c8:5b:bf:d5:e1:1f:d8:cb:a7:40:fc:fa:8a:79:97:42:
91:9e:a8:02:22:be:c9:c2:5f:da:e4:b4:c2:e0:2e:20:2a:06:
d8:43:ff:21:7c:e7:08:a3:48:dd:aa:1f:0e:46:06:9f:6a:bc:
eb:56:32:7e:72:c8:77:54:54:c2:90:82:3b:cc:ea:77:04:e2:
a9:bd:33:cd:e4:4b:65:6f:d9:f1:ba:b4:32:8c:93:29:9e:c1:
60:82:a8:a0:cc:c6:05:17:11:92:97:1e:45:e7:d7:a2:eb:1d:
01:f9:16:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:42:01 2025 by rpki-client