Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
File: 5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft (raw, json)
Hash identifier: 9S688e6SIJU0WfUdsPCm1yb+bbIY2R0Jg6nKPfOGfvU=
Subject key identifier: F5:03:61:C8:32:51:0F:34:E2:86:F4:FD:76:EE:BF:4B:30:33:F3:51
Authority key identifier: E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
Certificate issuer: /CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Certificate serial: 01965538E0128F8DAAF9102E8980BB22E727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 22:01:52 +0000
Manifest this update: Sun 20 Apr 2025 22:01:52 +0000
Manifest next update: Mon 21 Apr 2025 22:01:52 +0000
Files and hashes: 1: 1xvntgtwN598Xt12Wp30p-iFY40.roa (hash: Mu8yYMtQaTf8Y5ca71Jrhca8f7JY0TOmjgZFuk/22tE=)
2: 5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl (hash: kYkkvYflyjV4fNgkXSkYPtBkw4SNMV0A353oMhsD4J0=)
3: V_bFPJiZiN3dn69rtGf2PU2V_7s.roa (hash: yf/Df7sBD+Bl6bPwS7+5B7VNWvnFlcA8NvL0Ry+NDTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:e0:12:8f:8d:aa:f9:10:2e:89:80:bb:22:e7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Validity
Not Before: Apr 20 22:01:52 2025 GMT
Not After : Apr 21 22:01:52 2025 GMT
Subject: CN=f50361c832510f34e286f4fd76eebf4b3033f351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:62:0d:29:05:38:44:47:68:14:c0:b6:5e:
23:18:55:b6:09:d4:0f:66:ef:fa:ae:3c:6f:85:e2:
de:d6:b4:ca:1c:5d:a8:0d:e3:6f:91:e5:a2:4d:aa:
ea:06:f0:77:d8:27:93:9f:29:8e:46:6f:23:c5:a1:
dc:a1:de:4d:ec:98:c9:82:a1:79:87:d0:cb:77:1c:
71:0c:dc:ab:34:7c:62:63:26:42:d2:82:ea:6c:fa:
df:3b:0b:3d:0f:59:ec:ab:b1:91:32:de:9a:0a:5a:
8b:d5:93:3e:84:71:12:11:3f:ad:b6:58:1b:31:fd:
aa:e0:74:c1:83:e0:2d:5c:6f:84:8e:ee:23:5f:ee:
77:38:46:ab:8f:71:0c:90:da:ac:24:f5:08:7a:bd:
c2:dc:17:cf:a0:54:d6:d2:ba:ad:59:dd:54:83:cf:
14:06:f5:1d:68:94:8a:43:8e:c2:d4:1d:54:f4:b4:
fb:40:78:2e:87:e0:0b:24:01:1d:2b:9f:69:2e:de:
48:9e:0e:fc:1e:9c:d0:d2:63:cf:8f:6a:7a:2c:74:
10:c8:94:19:16:1f:9c:5a:0a:a0:44:3e:4e:55:b8:
4d:b1:4c:c0:67:e0:9f:e1:75:ee:11:9f:49:0a:70:
95:4e:78:ad:59:b0:79:f6:28:56:0d:a1:8d:57:3a:
a0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:03:61:C8:32:51:0F:34:E2:86:F4:FD:76:EE:BF:4B:30:33:F3:51
X509v3 Authority Key Identifier:
keyid:E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8b:93:ee:e9:13:b5:0b:da:ba:3d:2d:41:09:d8:76:27:60:
08:8d:56:ae:c3:ce:23:6a:7d:c5:39:c6:28:28:61:52:46:f0:
06:2c:1e:f1:a4:b2:d5:7a:1f:f5:8d:7b:3a:da:e4:49:d8:72:
65:9f:78:cd:1b:6c:12:3b:43:6f:05:eb:1a:6b:16:42:3e:e0:
d2:47:55:e6:8a:cf:46:64:40:c2:23:6c:d5:6b:52:94:9b:8b:
89:06:45:fd:b7:46:62:68:0c:16:13:bf:e0:87:6f:86:23:4a:
22:f1:ec:af:79:08:12:19:b4:c3:40:2a:91:1a:05:8d:fc:39:
62:48:1e:19:09:78:ed:3c:6c:8a:f2:e3:9c:c7:6e:1f:fd:8b:
57:03:28:70:ae:ec:6f:4e:9d:d4:74:ba:1d:f1:5c:f7:cc:86:
00:eb:7f:54:0a:21:58:b1:6e:74:f0:a2:51:14:4a:6d:f1:5f:
fa:ef:56:8b:48:54:9f:8f:1d:2f:73:a6:9d:b2:85:11:52:16:
61:9c:4f:6f:2b:38:9d:51:41:1d:0b:95:fe:81:d9:66:ce:d2:
01:0e:93:94:d8:7e:d3:5d:7b:97:8a:d3:02:da:9d:84:5b:38:
8e:de:f6:66:50:7c:c2:56:80:75:1b:b0:f1:1a:cc:61:56:1c:
13:e3:d6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:49:06 2025 by rpki-client