Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
File: 5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json)
Hash identifier: jql0zUlOH92gMvF3EyZbHPI/u90v5TEyyYBms81KTOo=
Subject key identifier: D0:9B:F7:A4:30:E0:94:BF:D4:8D:67:8B:CA:0A:BF:77:44:67:09:BD
Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
Certificate issuer: /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Certificate serial: 0196A878F7989F88A1F06DD4E8DCE6FF9B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
Manifest number: 152A
Signing time: Wed 07 May 2025 02:00:22 +0000
Manifest this update: Wed 07 May 2025 02:00:22 +0000
Manifest next update: Thu 08 May 2025 02:00:22 +0000
Files and hashes: 1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: n6Mog5uj9biXXwihHRMA99lsTa3cKFTDmyXfGPzm0zM=)
2: QdF1_Zq92wXCrTWLXFHsTX1fLOE.roa (hash: 3ntgOindNlTLmT1RU6YRq18wFcBPHz2TO/Rc5iQY6kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:78:f7:98:9f:88:a1:f0:6d:d4:e8:dc:e6:ff:9b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Validity
Not Before: May 7 02:00:22 2025 GMT
Not After : May 8 02:00:22 2025 GMT
Subject: CN=d09bf7a430e094bfd48d678bca0abf77446709bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0e:ea:94:f3:a4:31:b1:bf:4c:9a:b6:83:2e:
90:83:1c:87:bd:33:f0:f5:6f:ad:e9:38:ad:20:85:
c6:f3:4c:e6:ce:57:ce:8a:85:30:87:5b:f1:7d:83:
db:9a:63:52:9b:77:53:d9:83:f6:6b:93:ab:b9:fd:
6b:3b:41:9d:3d:a4:83:11:f3:97:3c:35:1a:4c:1a:
b1:fa:cc:d2:94:8a:47:fc:1f:03:46:f5:b8:f9:3e:
46:cd:18:a8:cd:6d:a8:92:bc:48:76:e8:03:bf:06:
f5:4c:b8:93:58:0e:21:8b:9b:46:0a:a8:ba:19:bc:
12:f7:17:da:b0:70:a0:92:fe:26:4b:66:b1:17:73:
27:bd:a4:9b:6e:78:79:9f:d0:de:d2:57:92:55:60:
98:c9:cf:cb:26:1b:d0:62:37:cd:32:2d:99:73:36:
a2:d8:53:8b:41:19:62:b8:ac:12:7f:bb:5c:9f:1b:
34:c6:53:1c:13:04:ae:69:91:6c:92:99:24:25:ae:
93:3b:70:d9:78:6c:b2:e6:e6:80:ec:58:8c:d9:60:
d8:b2:26:6b:b7:ee:21:2a:d1:a8:e1:43:d3:d2:8a:
6b:4a:c6:f9:1d:f7:9c:cc:cf:8b:00:0b:b6:55:9f:
c6:57:45:f9:24:86:e2:34:53:b1:93:94:12:28:21:
db:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9B:F7:A4:30:E0:94:BF:D4:8D:67:8B:CA:0A:BF:77:44:67:09:BD
X509v3 Authority Key Identifier:
keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e3:08:60:e1:ed:50:a9:a9:17:9a:39:55:9f:6c:af:60:1c:
b7:64:50:bf:d1:be:ea:36:fe:04:67:7f:71:24:38:a8:03:35:
8d:9c:cc:10:3b:fb:ea:9f:8b:65:59:45:77:bb:25:9f:e2:70:
f3:59:d4:d2:27:d7:d0:22:34:b2:14:5b:ac:b8:72:74:73:b9:
50:dc:18:cc:16:bd:de:b9:38:8c:cb:5a:36:b7:60:47:9e:f9:
39:90:a4:37:dd:92:2e:f1:93:38:84:fa:a0:b1:04:48:da:fc:
43:b2:29:9f:d5:0c:bd:b2:81:46:15:44:39:d0:76:1c:0d:d6:
84:dd:19:45:a3:9f:11:39:e6:e4:bf:42:a9:dd:bb:87:1d:3d:
f9:6e:0c:e6:86:28:82:91:ee:87:ac:d6:31:f3:ba:c6:5f:0e:
ae:1a:12:19:24:bd:4a:fa:53:e5:3c:4d:5c:02:41:6e:88:a7:
d8:a8:cb:74:d3:de:a4:58:b5:bf:d8:27:98:bc:53:35:68:4d:
5e:a4:21:ca:ad:7e:a1:b6:7d:49:13:1a:0a:d2:c4:6a:49:80:
62:19:f7:16:62:ae:84:ee:47:e9:1c:f8:30:a4:be:06:a7:fe:
59:3e:b0:f4:e1:ac:cf:62:65:f3:ec:72:d0:68:9c:34:e6:c7:
9c:e5:2d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:59:00 2025 by rpki-client