Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
File: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft (raw, json)
Hash identifier: DT0PXpxtUgMryVCYryIAPwptO08eweqLvTxqW3+VDmw=
Subject key identifier: 17:8A:94:15:D9:76:8B:3B:0C:89:04:7B:07:EC:BB:2B:9A:7A:87:8E
Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Certificate issuer: /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Certificate serial: 01967755BABB2DDC6B102ADFB21412551F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 13:00:29 +0000
Manifest this update: Sun 27 Apr 2025 13:00:29 +0000
Manifest next update: Mon 28 Apr 2025 13:00:29 +0000
Files and hashes: 1: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl (hash: UoE+CKLgUPgBtcEKqUXI6LSC/EJ8ed6wvufjXefmTPo=)
2: H9LigG1-eoyksArBLiDVRw0BhjU.roa (hash: oha3QLmkXpQFYs1KCF6A8sqvDCo/E/9M5bF7ey6N14M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:ba:bb:2d:dc:6b:10:2a:df:b2:14:12:55:1f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Validity
Not Before: Apr 27 13:00:29 2025 GMT
Not After : Apr 28 13:00:29 2025 GMT
Subject: CN=178a9415d9768b3b0c89047b07ecbb2b9a7a878e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:96:b5:2e:31:d9:d0:62:f5:cd:81:5b:a6:
57:33:fe:b8:02:3e:26:0e:b6:08:3f:6f:e0:75:77:
cf:61:b3:46:24:40:8f:98:5b:39:4c:51:7b:1f:4d:
32:01:4f:0a:fb:42:4a:29:ce:f6:86:55:1d:fd:67:
d4:61:36:f9:e9:21:82:f5:e7:c3:fe:ea:fa:9d:2b:
98:8d:31:98:5a:49:aa:f1:bd:5d:d5:0d:5a:f0:1e:
a9:1b:c7:79:db:1b:9f:32:a1:e2:cb:8a:31:07:0f:
28:76:06:ff:0f:b7:56:bf:6a:59:6e:56:44:4e:11:
b2:e0:6c:03:7e:06:84:10:27:9d:62:7a:ad:ed:c7:
cd:c9:13:b0:33:fa:58:cc:a7:8a:61:8f:ae:85:d1:
6c:6c:8d:c5:ba:46:2a:4a:01:83:86:98:fa:18:64:
2f:cd:98:b8:55:1c:65:d2:38:d0:f4:a6:b4:9c:b0:
b2:6a:f9:a7:16:b0:fb:3b:19:32:4d:e1:45:a1:62:
d5:12:37:be:a7:00:37:4d:af:d1:4c:60:bb:fe:52:
82:0d:5b:85:e5:ac:9b:a1:4f:37:f0:11:9c:ab:3e:
4a:ca:d5:a3:45:79:7a:af:ca:38:07:95:31:d0:01:
5b:eb:1f:03:75:1a:8e:ba:a3:f4:9c:f0:d5:84:fc:
de:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8A:94:15:D9:76:8B:3B:0C:89:04:7B:07:EC:BB:2B:9A:7A:87:8E
X509v3 Authority Key Identifier:
keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:09:a2:02:8c:d4:87:fe:66:e1:0c:89:66:48:b2:d5:c2:db:
f8:dd:e8:f3:40:11:5a:4c:30:d2:d8:2f:99:73:77:ef:3c:83:
10:64:dc:51:fd:d0:55:63:12:63:45:c9:ce:1a:90:3f:7f:7d:
25:95:c5:26:54:a0:17:c6:cc:45:d8:e0:0f:8b:3c:f6:8c:01:
10:58:22:e5:68:2a:fc:0c:e1:d3:eb:cd:e0:fe:de:b5:ce:71:
68:a3:4f:e4:cb:41:d6:a3:c3:5e:12:86:c7:d1:26:d4:12:1f:
ec:bf:12:9d:de:50:ac:10:93:ca:a6:f5:44:3c:9f:89:b1:ca:
ef:ae:35:42:6f:48:00:6d:91:de:a6:7f:89:87:e0:91:c7:f9:
31:49:a6:b2:82:ca:0b:4c:55:f3:20:c3:43:4f:cf:32:fd:35:
85:e2:56:38:af:a4:89:fe:cc:2c:e7:c0:e1:f6:4b:d6:9a:02:
1a:6a:a3:bd:f9:04:a3:34:85:ab:d9:2c:88:db:02:cb:68:01:
a9:82:88:0e:6a:9b:55:33:e5:20:b5:67:1b:eb:66:13:56:01:
d9:c0:db:48:18:77:74:90:5b:e6:d0:79:6b:34:14:49:71:6f:
fe:cc:21:a1:4b:13:47:09:ca:d8:de:46:b4:a0:61:7f:77:c4:
43:d9:c9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:25:02 2025 by rpki-client