Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
File: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft (raw, json)
Hash identifier: sS/WsIs3mfVzVaJ+Q6zIuWfO/2/aZFZA7lRR0vGFL+Y=
Subject key identifier: D8:C7:6C:D5:2B:64:5A:B9:A5:FA:EA:00:52:34:ED:F0:27:40:D2:E9
Authority key identifier: D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
Certificate issuer: /CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Certificate serial: 019653EE0582BA1229CD29D1D101E739B1C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
Manifest number: 0151
Signing time: Sun 20 Apr 2025 16:00:29 +0000
Manifest this update: Sun 20 Apr 2025 16:00:29 +0000
Manifest next update: Mon 21 Apr 2025 16:00:29 +0000
Files and hashes: 1: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl (hash: CU4g9tPWtopv3dAbAKt5sxs7zw57wjEATpiqR6KeE9g=)
2: 7MLQXQoB7nGQ9BAPNdo9KSMuY8Q.roa (hash: qybqPEfeMgg3CNavO5wY4/V9s/QfeIPfINjmuYmoUy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:05:82:ba:12:29:cd:29:d1:d1:01:e7:39:b1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Validity
Not Before: Apr 20 16:00:29 2025 GMT
Not After : Apr 21 16:00:29 2025 GMT
Subject: CN=d8c76cd52b645ab9a5faea005234edf02740d2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:df:55:ac:e0:4e:8f:38:64:79:85:8e:76:
c2:7f:d1:5a:f0:87:4e:51:21:72:f3:b7:6e:3c:2d:
cd:c0:92:d3:fa:56:d0:f4:80:ab:29:eb:ef:a2:30:
a7:d0:04:8e:de:28:b2:0b:be:7d:72:72:d0:3f:4a:
7b:60:9b:9b:ad:02:c4:f4:b0:92:78:0d:ef:26:3e:
6a:41:e1:0a:f5:28:91:96:cc:f1:82:3a:ac:f6:70:
af:a8:e5:1e:75:97:2c:7d:09:22:99:4e:08:6b:8e:
af:95:c1:44:44:77:39:86:53:9e:99:65:1f:0b:b5:
44:06:cb:6b:bc:54:86:f1:d3:9b:04:c0:69:67:3e:
83:75:7b:0b:30:bf:03:84:1d:29:36:5a:0b:d0:7f:
d8:66:d4:2b:93:ec:bf:96:f3:b7:7b:91:ea:e2:27:
8b:ff:ce:da:92:9a:8c:83:45:da:cb:86:a4:b0:be:
1e:7f:3f:2f:41:62:ad:59:1a:13:b8:fb:dd:59:6e:
af:41:02:bf:73:13:f1:f3:8b:9c:56:9b:e6:0f:7a:
4f:8d:ff:46:64:eb:c3:b1:3a:0d:70:e6:63:cd:2a:
0c:90:70:d6:3e:13:8d:7c:5f:ae:2b:6f:1d:0b:e8:
8e:de:0c:20:4d:6e:76:ed:fe:79:02:a8:b1:4c:b5:
b1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C7:6C:D5:2B:64:5A:B9:A5:FA:EA:00:52:34:ED:F0:27:40:D2:E9
X509v3 Authority Key Identifier:
keyid:D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:5d:70:e1:a6:53:8c:29:a3:82:9d:13:36:ea:6f:3e:b5:b2:
fc:e3:47:7a:44:b1:17:94:cc:22:3d:ce:55:f3:2b:29:8e:4c:
8d:e2:7a:b6:4d:09:ad:99:76:38:ca:95:a3:f7:1f:05:59:8e:
a0:94:48:ba:06:f4:be:f8:64:67:28:46:67:45:8c:af:eb:a4:
b2:d3:69:7a:51:82:ad:41:c3:1b:f5:63:17:1e:88:f2:2b:11:
90:36:80:09:67:a9:14:f2:46:53:72:d8:ce:48:13:82:3e:53:
94:cb:62:2e:e1:54:7d:00:b6:75:8c:1f:fe:7f:8c:ff:ab:f0:
62:4e:9b:f2:00:0a:a9:f9:8c:d4:a8:8c:b3:7c:87:dd:78:65:
a6:9c:3e:5e:2e:b0:55:f4:ec:83:5c:c5:1a:81:66:90:46:ba:
94:b8:fa:d1:e1:9f:6b:81:58:c7:24:5e:60:86:97:90:d8:d3:
36:23:3d:df:cc:eb:96:66:c5:2f:81:98:8a:d3:ca:bf:b6:72:
8d:e7:bb:f2:ee:98:42:8e:c9:65:5d:fe:7b:db:6a:62:84:27:
08:ff:6d:d9:bf:6d:a7:0e:53:de:46:d9:0e:7f:ff:d7:fa:b7:
ee:9f:2b:06:51:d3:fe:c5:72:1b:15:00:fd:10:bc:76:5e:64:
9d:14:16:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:11:47 2025 by rpki-client