Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
File: X5ZnbPOY05lMTdSilllGFN_1hsc.mft (raw, json)
Hash identifier: G86RjcMtP0uhJu191xc8qrHXMIhgVRjne59u8YpnBLU=
Subject key identifier: 54:6A:5D:2A:6B:96:0F:82:8C:5C:67:BB:76:85:95:18:34:FE:A5:AA
Authority key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
Certificate issuer: /CN=5f96676cf398d3994c4dd4a296594614dff586c7
Certificate serial: 0196A1D29D4E8816547F7B3BDB68AC45B9E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
Manifest number: 153D
Signing time: Mon 05 May 2025 19:00:56 +0000
Manifest this update: Mon 05 May 2025 19:00:56 +0000
Manifest next update: Tue 06 May 2025 19:00:56 +0000
Files and hashes: 1: 2zkARhYQi5MZVSVViedBzAUUfQU.roa (hash: DjES1xG44afB1DWsZff60m/UWnCi+Z0rElpzn4HCOqg=)
2: X5ZnbPOY05lMTdSilllGFN_1hsc.crl (hash: FQzopvoacQ3gSTMaX8D3bSNBF69bG+Tr4o7DpP3wyOo=)
3: XyWUYm4k4aoyZu4exVkzUEY6NsM.roa (hash: nfbYF1NSykMyHcBytLNKjU++mQtuxfs2vY7BM12cSnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:9d:4e:88:16:54:7f:7b:3b:db:68:ac:45:b9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f96676cf398d3994c4dd4a296594614dff586c7
Validity
Not Before: May 5 19:00:56 2025 GMT
Not After : May 6 19:00:56 2025 GMT
Subject: CN=546a5d2a6b960f828c5c67bb7685951834fea5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:4f:1a:4d:0d:63:1d:0f:18:36:c5:29:57:
b1:a2:63:01:f2:49:14:98:c2:da:82:4d:da:84:70:
5d:3a:68:04:4f:3b:6c:8e:20:f0:b7:6e:9a:e7:a8:
02:e7:6a:10:4c:91:3e:52:b8:47:9e:28:b6:b1:7e:
ff:85:5e:18:ce:a1:c2:a4:36:c5:c9:4c:dc:8e:dd:
59:5d:95:b7:14:af:d8:4b:49:2d:de:65:a4:a0:e5:
7b:c2:46:3b:b4:89:0a:92:2a:a3:a4:6c:06:1f:8f:
83:1a:0e:5e:dd:d7:84:d4:ae:03:48:08:26:b4:23:
3e:23:44:88:c6:d4:4a:f7:64:a4:24:50:8c:e9:89:
c3:e1:35:1f:82:62:0e:0f:4f:54:8a:66:1e:ee:3f:
07:cd:8d:7b:cf:69:ac:56:5b:08:f7:f5:84:c9:b9:
f9:cb:4e:8a:5b:84:11:ec:8b:24:9d:ea:99:6c:bf:
c4:55:34:de:2a:3b:7b:76:88:fc:ca:42:3b:8e:d6:
cf:f7:76:0f:e9:0e:6a:84:83:75:d6:6e:90:2d:cb:
0e:40:bf:f7:37:68:e6:15:26:ac:e4:1b:29:51:35:
b4:2e:05:31:54:f2:c8:19:b9:3b:55:80:39:5b:ab:
bb:d5:8f:5d:50:ce:40:67:25:08:6a:4a:ca:84:1f:
a3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6A:5D:2A:6B:96:0F:82:8C:5C:67:BB:76:85:95:18:34:FE:A5:AA
X509v3 Authority Key Identifier:
keyid:5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ff:23:7a:8b:75:bc:d3:33:66:d4:e2:c0:98:d8:44:d4:20:
aa:ed:1f:17:a4:a7:da:b3:a9:72:95:58:27:39:a1:a8:8c:ff:
13:b1:2f:97:62:c1:3f:1d:74:73:2e:b7:8c:26:88:1e:12:f1:
0f:0c:57:3e:14:bc:b9:fb:30:57:17:2a:d0:1b:76:1b:1f:ca:
fd:05:3a:84:89:7c:3f:48:05:7b:19:f5:7d:c9:13:03:18:9b:
5d:b0:8b:06:b8:10:87:61:34:95:3e:50:55:e2:b1:67:52:5a:
89:5a:cc:a8:bb:db:db:ef:9b:c6:98:71:1c:50:f5:d9:46:7c:
e5:2d:1c:c4:b2:90:c0:b5:b2:8b:6d:55:f8:4f:65:ee:ae:53:
16:45:c8:26:fd:db:bf:d4:de:22:0b:27:a2:8e:8b:bf:8f:2b:
94:65:7a:d8:01:cf:7a:fa:3f:38:5a:91:2e:c1:b8:06:27:42:
1c:30:81:7d:7f:c9:53:da:fb:4a:c0:cf:ea:8b:d8:23:67:41:
ce:b9:a2:3c:f3:ff:7e:f8:d8:03:24:c4:73:7e:78:83:43:40:
1d:77:dc:e5:c6:7a:1d:6f:26:32:cc:b5:7c:e1:45:4c:06:40:
b9:6d:d2:66:0c:30:9b:72:17:40:66:56:07:4e:fd:ce:f4:d9:
07:74:c5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:42:18 2025 by rpki-client