Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
File: 53bFGYDHUepeMd3ayO9h-1bJcA8.mft (raw, json)
Hash identifier: sW35GcqE/Do1U0ZU39thmAnbEa7oSJgNY8exY4RlKvg=
Subject key identifier: 98:F8:07:B7:2F:28:C8:2C:E2:32:37:74:D3:39:60:00:73:A2:A5:7A
Authority key identifier: E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F
Certificate issuer: /CN=e776c51980c751ea5e31dddac8ef61fb56c9700f
Certificate serial: 01967DFCB1F9D2CD9349064033C76D259C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
Manifest number: 0126
Signing time: Mon 28 Apr 2025 20:00:34 +0000
Manifest this update: Mon 28 Apr 2025 20:00:34 +0000
Manifest next update: Tue 29 Apr 2025 20:00:34 +0000
Files and hashes: 1: 53bFGYDHUepeMd3ayO9h-1bJcA8.crl (hash: kqcApNrcmRCajbilZiLmIxl6IjWBBCdqN0EUqz8ZWY0=)
2: MSnHBIOL0Bltj-Q0mkBqryaUsS4.roa (hash: R8xRgK2CEN6mE5gSyGtBAs14gnmUzJFq4i62UURLtRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:fc:b1:f9:d2:cd:93:49:06:40:33:c7:6d:25:9c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e776c51980c751ea5e31dddac8ef61fb56c9700f
Validity
Not Before: Apr 28 20:00:34 2025 GMT
Not After : Apr 29 20:00:34 2025 GMT
Subject: CN=98f807b72f28c82ce2323774d339600073a2a57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:e0:77:3c:ba:2f:ab:b6:d4:9e:18:a1:2a:
c5:fe:11:a7:c3:7d:44:53:22:cd:f6:7e:3b:78:22:
59:9e:32:0a:7a:85:09:83:3c:c5:5d:ed:61:b7:39:
75:17:18:77:84:b4:52:d8:c5:3a:ac:97:3d:d8:1b:
96:45:a4:6e:d8:24:cd:65:c5:4f:9d:c4:c0:05:40:
cd:89:d3:24:28:3d:e2:22:31:89:54:30:a7:d6:64:
89:ad:e6:06:e0:8a:90:ea:8c:23:e8:73:bb:a6:31:
a5:00:a9:3b:a4:e3:7d:12:b9:93:0c:12:8c:15:88:
99:bb:90:e5:19:1b:2f:16:25:b0:d6:bf:eb:9e:04:
8b:8e:b6:06:81:4e:0c:21:bd:41:f1:fd:f8:d3:b4:
b6:4a:2f:c8:06:3e:73:26:d0:16:bd:bb:3f:81:56:
1a:91:c5:93:8e:c2:77:b4:91:bc:3a:63:fa:86:67:
fa:27:dd:dc:b3:37:5f:aa:45:fb:0b:73:e6:c2:65:
78:70:ff:d0:61:1f:8a:84:38:1b:bb:78:55:03:ae:
8f:58:d1:73:2d:44:ae:7a:d3:78:b1:a8:fd:3d:ad:
b6:4f:34:ba:bc:83:7d:7d:a5:51:09:b8:77:a3:6d:
6c:d3:a3:a1:92:56:e4:12:7d:14:cd:ff:ba:07:51:
4d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F8:07:B7:2F:28:C8:2C:E2:32:37:74:D3:39:60:00:73:A2:A5:7A
X509v3 Authority Key Identifier:
keyid:E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:00:56:18:f7:20:5f:8c:ac:2c:3d:88:e0:20:4d:56:2a:f5:
ef:b0:b4:4c:77:48:1c:bc:48:e4:ee:38:70:24:c3:92:7d:59:
93:60:01:1a:f7:54:7b:41:f2:50:d4:e2:f4:2d:ff:80:ba:e8:
f6:b6:3f:85:70:bb:44:dc:36:46:fd:2a:1f:84:3a:1b:ed:ff:
a9:3d:60:06:c0:b0:97:f3:5d:31:73:5f:4d:6d:e9:50:8f:df:
0b:ed:65:ee:ff:d5:03:0d:50:77:bf:8e:2d:a2:52:ad:81:dc:
e3:b0:7a:8c:3e:99:4d:4b:b9:1e:c2:c2:5b:d4:51:5f:31:96:
0a:3e:ca:fd:98:2b:f0:25:a2:7d:d8:c2:8d:67:7f:10:a2:51:
c6:07:b9:c3:40:37:23:cf:78:77:79:17:d9:89:f1:b5:63:96:
6d:28:14:83:22:e8:37:74:9b:b7:f0:ff:69:08:89:fa:67:65:
40:a5:4b:f0:bf:82:bb:68:95:b5:72:e4:11:fd:fb:e2:a7:1e:
36:03:b8:e6:c8:93:4b:f9:0a:ca:4b:f3:50:47:f8:ab:d3:cc:
97:be:66:07:da:a1:41:1d:29:f3:34:4c:8b:2f:ba:a6:f5:90:
13:4c:5f:44:43:53:9d:e4:21:87:d1:a7:f2:98:6c:3a:5e:80:
b1:b3:9c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:48:29 2025 by rpki-client