Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
File: K5X2grxtV338PBDs7icYOB_uOyM.mft (raw, json)
Hash identifier: 8IS2VvDU61zpgoqIdcCeYvjYEr9zZvs2i17IFOmKC+E=
Subject key identifier: 06:FF:6F:BA:A2:E0:59:7D:98:B7:D2:1E:CA:88:81:F5:62:2D:F9:AA
Authority key identifier: 2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
Certificate issuer: /CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Certificate serial: 0196741E182CAD30C0505F2BB8BF87E5CBBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
Manifest number: 150D
Signing time: Sat 26 Apr 2025 22:00:51 +0000
Manifest this update: Sat 26 Apr 2025 22:00:51 +0000
Manifest next update: Sun 27 Apr 2025 22:00:51 +0000
Files and hashes: 1: IRjrM71OJM5QObnZgNNrFRUyuDg.roa (hash: KDXjEC5+jgnVgR7YLpm66IF8Y8cfv8DKQxOxQp+OnTk=)
2: K5X2grxtV338PBDs7icYOB_uOyM.crl (hash: BHiPaP7ck81ARD40tzF9t+Y08gnn/dVyL0U/76Lh4HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:18:2c:ad:30:c0:50:5f:2b:b8:bf:87:e5:cb:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Validity
Not Before: Apr 26 22:00:51 2025 GMT
Not After : Apr 27 22:00:51 2025 GMT
Subject: CN=06ff6fbaa2e0597d98b7d21eca8881f5622df9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:47:55:2b:bc:0a:76:20:d6:09:13:4f:51:31:
ca:51:e9:45:f6:b1:d4:fc:b1:47:b8:e8:59:46:56:
98:76:0b:e4:ac:27:f7:06:f0:b1:ea:58:8e:99:94:
74:0b:4a:33:fe:ed:ba:44:43:82:f7:e1:fd:e7:ed:
89:44:b7:2b:a0:9d:d9:d7:c6:71:8b:58:31:02:dd:
88:81:e4:be:50:4c:d0:2c:4a:dc:77:1c:3a:30:3a:
5e:2e:e0:e9:16:a8:df:83:92:7e:1c:fc:72:18:70:
a4:08:b9:2a:21:1b:21:ee:40:cc:9a:a6:95:16:84:
f9:10:73:10:de:44:da:dd:40:7f:b4:70:da:8e:f3:
56:c0:3b:a2:9d:ea:fd:b2:52:bb:a7:2c:81:12:06:
5b:39:18:26:c9:49:7f:28:13:87:bd:7a:12:43:7a:
5c:46:5b:13:0a:94:26:f5:2f:7d:02:89:19:db:19:
df:70:6c:82:4e:70:ad:44:68:70:2d:95:b6:26:ed:
ee:44:f9:20:54:b1:96:d1:1b:43:af:51:f5:2f:c5:
fc:e3:06:54:7a:46:0d:45:b1:95:37:b9:47:28:53:
ee:ea:b7:c8:91:90:33:78:c5:9e:e1:28:af:bb:fd:
8e:1a:d2:17:d2:2a:41:0c:67:a7:54:d2:7b:a1:44:
f1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FF:6F:BA:A2:E0:59:7D:98:B7:D2:1E:CA:88:81:F5:62:2D:F9:AA
X509v3 Authority Key Identifier:
keyid:2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:19:70:f5:8f:6f:91:fc:be:8c:6c:0c:27:4b:04:2d:39:89:
c6:7b:2d:e4:a1:af:c2:b4:86:48:9e:8c:a9:d7:da:b8:4c:00:
28:8f:76:7e:ba:a3:3a:ca:af:1e:e5:ec:15:1a:74:19:0f:4e:
67:ba:b5:fb:45:44:ed:5b:eb:cb:52:58:f6:89:fb:48:e7:54:
5a:b1:cc:a0:60:08:37:86:7a:36:16:9a:01:05:8a:ee:b8:88:
fd:09:f5:ed:46:07:54:a3:ca:d0:73:2a:8a:8d:74:4f:a8:ad:
81:37:e5:da:af:16:a2:8e:58:50:89:b7:cd:db:50:a1:0a:1a:
c9:60:76:09:0e:74:a3:84:48:39:f6:24:2a:89:eb:3a:24:ae:
04:4b:3b:7e:b4:78:a8:9c:aa:e3:64:4e:fd:fc:3b:b9:cf:2c:
45:eb:ae:ba:32:a0:33:dd:f6:2d:99:17:03:42:3d:a6:f8:f2:
b0:3f:eb:f2:57:76:f7:a5:c4:fd:ad:b3:b0:20:7c:cf:01:b0:
fb:59:af:7b:00:87:98:a0:1b:e2:78:83:bc:49:05:42:7b:f4:
5d:86:5f:94:79:4d:2c:cd:30:ee:80:1c:f0:44:5d:c7:0c:e1:
73:a9:1b:66:57:b1:8d:79:fb:5a:dd:84:32:2d:12:81:4b:05:
34:40:9c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:05 2025 by rpki-client