Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
File: Xdczb6kVchzjv-4hf06ZFk25Uys.mft (raw, json)
Hash identifier: 6aFsMGGOJG/MBpvfo0Qugv8jRBvSS22iYE6bJjLldIk=
Subject key identifier: 56:A6:D5:C6:E3:2F:89:6C:5E:95:36:F0:88:BE:81:8D:A5:92:A0:B3
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial: 01967F0F89405DD58449CCE29A4E95E68368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 01:00:46 +0000
Manifest this update: Tue 29 Apr 2025 01:00:46 +0000
Manifest next update: Wed 30 Apr 2025 01:00:46 +0000
Files and hashes: 1: TBZUFVuLjgaJ-XADpnEKR7pLEmo.roa (hash: DDp1P+ue/jG2hxWSfwXECX5hRH8hg4KzLSyGRRpINWI=)
2: Xdczb6kVchzjv-4hf06ZFk25Uys.crl (hash: amieCXaLfVZ0nzAbMqVJf8pwR6yu6qnEc1MhFdyIT68=)
3: r2ZORJxSeCIu6eCO87hDb9jfS0s.roa (hash: kW/Le+50yBjcga1Wh8Y1h6UD2loMcqNEMFpy4Zq+anY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:89:40:5d:d5:84:49:cc:e2:9a:4e:95:e6:83:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Validity
Not Before: Apr 29 01:00:46 2025 GMT
Not After : Apr 30 01:00:46 2025 GMT
Subject: CN=56a6d5c6e32f896c5e9536f088be818da592a0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:c2:bb:f1:95:6d:2d:90:a0:e4:b1:e9:84:
fd:3f:40:ff:3f:45:90:73:5b:0b:88:5a:44:0e:40:
3f:69:d2:49:49:09:27:e9:bf:eb:c0:3b:42:4e:af:
fb:a3:35:93:b8:f7:2d:bc:05:da:aa:38:5d:1c:de:
97:fc:14:2f:fb:a8:e1:aa:3c:15:5c:8c:24:7e:b8:
d2:ac:70:b5:94:03:a8:dc:4f:d5:1a:55:23:d5:08:
de:ab:73:be:52:40:94:8c:33:ab:a8:48:9d:06:71:
c8:83:28:10:3d:c6:6d:3d:21:56:0f:28:be:f3:f8:
a8:da:06:b5:f2:8b:e7:7f:c7:ee:82:d6:5c:3b:99:
26:ef:d1:a8:61:3b:13:9d:9a:f8:38:9a:97:d1:53:
26:c4:3e:1b:08:16:df:25:6e:0e:c6:90:73:75:ef:
48:4c:2b:2a:7d:4d:f6:e9:8d:3a:dd:40:0c:39:87:
59:9c:ea:a0:79:20:48:92:b9:58:04:61:4a:e2:e4:
f8:84:73:8b:05:ce:fa:92:72:98:98:97:18:34:f5:
6c:63:bc:42:2d:43:80:5c:48:ca:57:32:3e:36:1b:
84:86:c1:b8:79:56:0c:14:6c:89:16:dd:55:00:4f:
ee:d1:1a:ea:5d:c9:5c:19:bb:0e:03:6e:4b:65:c7:
fd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A6:D5:C6:E3:2F:89:6C:5E:95:36:F0:88:BE:81:8D:A5:92:A0:B3
X509v3 Authority Key Identifier:
keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d1:89:1d:e3:21:42:8f:27:77:20:ac:c9:9e:65:63:19:cc:
0d:73:d8:5c:fe:96:2f:c2:b2:9b:d5:60:db:a9:1e:f0:ca:b1:
e7:0f:eb:c3:99:36:e2:b3:57:0b:9f:2b:70:db:56:9c:78:0c:
d0:70:0e:81:0b:fe:53:a3:6d:9a:b4:0c:05:44:bb:64:87:31:
b5:2a:50:d8:b8:76:c5:32:c6:bf:4d:80:d6:de:df:87:86:18:
08:5b:ba:17:d6:71:da:50:27:fa:a8:a9:23:91:9c:81:95:03:
6d:09:e3:96:3e:12:98:fa:2b:88:d1:76:5f:a4:a9:82:91:c0:
cd:52:02:bb:e5:26:9d:8e:35:f3:e3:dc:e6:dd:fd:37:48:4f:
07:bd:6c:ab:c7:44:27:b6:09:a4:bb:d1:ee:54:77:b0:60:62:
2e:cd:59:3e:91:fa:55:6a:4f:b4:15:79:62:7d:b6:7d:d0:9b:
63:1d:9e:33:e3:83:f8:f7:50:2d:2b:9d:b2:f3:0b:21:d9:41:
e2:4a:0a:61:8b:6f:fb:f9:dd:1d:14:5a:fd:99:13:0d:26:ee:
59:1f:27:e7:fc:39:8d:c4:1d:7c:52:08:6a:98:57:3c:ff:f5:
1a:27:dd:3f:40:a7:c7:28:7d:f3:af:fd:74:d7:3d:d0:a0:d8:
1c:32:f5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:54:14 2025 by rpki-client