Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
File: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft (raw, json)
Hash identifier: mA2vmDHHc/BnETfk4CsrH07qlEt2MdVONw3UXAaHrE8=
Subject key identifier: 55:27:A4:94:25:58:01:37:40:12:54:42:A2:D5:26:15:3C:50:DB:56
Authority key identifier: E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
Certificate issuer: /CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Certificate serial: 0196857F962E20C577B63B709A9AA371D98E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
Manifest number: 012A
Signing time: Wed 30 Apr 2025 07:00:53 +0000
Manifest this update: Wed 30 Apr 2025 07:00:53 +0000
Manifest next update: Thu 01 May 2025 07:00:53 +0000
Files and hashes: 1: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl (hash: G6mAfK5DooODz9IrssNjQmZwzC8NorDI4QindALZ6yk=)
2: GqkvkcQA2bbgQwHJ2b6jWAleiGg.roa (hash: EGM2nICbqAUwB5CP81F3mXlaWH5q4kAR9J7Mx82LHRQ=)
3: U_pf5mr7mVogKbgEVCSPIKt6P1Q.roa (hash: A+REPWck5DlDgbp9k+f3tR4pBhovVcICYPMhumJUrjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:96:2e:20:c5:77:b6:3b:70:9a:9a:a3:71:d9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Validity
Not Before: Apr 30 07:00:53 2025 GMT
Not After : May 1 07:00:53 2025 GMT
Subject: CN=5527a4942558013740125442a2d526153c50db56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:3d:be:54:55:64:31:d8:dc:f2:98:84:3a:
1c:7b:63:88:1e:c1:65:69:98:e9:87:05:c9:69:80:
64:91:8e:91:af:b7:fc:cb:e2:e0:ba:22:ff:20:e3:
13:0a:e9:a6:42:e4:5d:55:59:43:96:d9:f8:78:94:
d4:77:58:b7:73:cf:e6:f7:9d:2f:e8:02:58:a1:fb:
b6:88:fc:d3:1b:7d:96:82:46:f2:71:ec:29:d8:4f:
a9:59:ce:bb:c9:2d:31:e1:ba:e9:47:9c:aa:d3:d2:
88:6d:e9:cf:e6:6b:5e:63:ac:c0:9b:b5:6f:1e:38:
bd:fb:82:82:20:34:69:3c:79:f8:f2:08:21:15:6c:
05:6b:11:40:e1:1d:f5:96:5d:0b:c6:de:4a:89:b8:
c3:1d:0a:c1:1f:c6:da:d2:4e:de:a3:09:d4:f8:12:
86:6c:6f:36:a3:b7:c7:87:2f:70:cb:9e:6f:bd:d5:
77:35:22:50:34:54:16:16:09:f8:d9:56:59:1c:54:
fa:48:0c:84:96:f1:3c:28:9e:75:75:48:dc:79:41:
ed:61:e0:af:1d:d0:fa:75:75:55:dc:cc:02:d0:74:
d2:34:41:5b:92:5f:51:e6:98:23:65:f5:7d:b8:8a:
13:ca:a8:a9:6a:be:49:7f:af:37:cb:ef:52:ea:8b:
3c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:27:A4:94:25:58:01:37:40:12:54:42:A2:D5:26:15:3C:50:DB:56
X509v3 Authority Key Identifier:
keyid:E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f7:6c:81:bb:ad:ea:b4:3f:53:db:b3:10:76:b1:9a:3a:74:
df:2e:23:d7:ac:97:7d:31:9b:8f:20:e9:b5:9c:cc:dc:5b:ac:
a0:59:22:72:7e:33:8c:13:37:f2:f6:77:c3:a0:62:59:76:1d:
fe:29:a9:1e:f3:2e:d5:c2:e4:ce:d6:b9:c7:92:82:4a:fe:93:
8f:eb:5a:62:37:13:8f:3d:96:d7:d6:a9:87:3c:bb:15:8d:ca:
86:e4:a3:ff:71:17:4d:5b:a4:85:77:f6:e1:8b:64:99:22:e7:
cc:da:1b:92:04:48:d5:ef:3d:76:d9:46:14:7d:c8:bf:59:ca:
fa:5e:70:27:48:a4:89:c6:de:ba:00:71:8a:3f:47:76:f8:5c:
9e:be:7e:e4:84:b2:01:ee:98:97:bc:d6:6c:1d:22:76:70:e0:
98:3b:f8:75:27:15:07:36:8e:2a:41:a2:ca:5d:7a:a6:d2:ce:
c4:62:31:99:d2:77:0e:1a:9d:a6:98:4a:e2:58:ba:28:2a:41:
1b:a1:f7:76:87:47:81:6a:67:47:d2:ba:56:08:1b:40:73:1e:
ea:a2:83:ba:a0:39:46:77:df:1e:89:56:a1:3a:50:8c:81:43:
e1:94:0f:0a:eb:d1:b1:dc:76:36:1f:31:0c:e9:67:9a:1d:34:
78:e4:e4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:45:55 2025 by rpki-client