Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
File: 5PFY7_xrOIKiWQweaQasoQjhjsI.mft (raw, json)
Hash identifier: ou7kDf4uHC2Wdv7dY88S+rHrIc6s8/AmuwxrvbOzHwU=
Subject key identifier: 00:06:07:32:C6:AB:EC:D8:2E:BE:9F:91:27:6E:9F:7E:F2:88:40:3B
Authority key identifier: E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
Certificate issuer: /CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Certificate serial: 01965613D4592574BFB519F173B64206B311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
Manifest number: 0B05
Signing time: Mon 21 Apr 2025 02:01:02 +0000
Manifest this update: Mon 21 Apr 2025 02:01:02 +0000
Manifest next update: Tue 22 Apr 2025 02:01:02 +0000
Files and hashes: 1: 5JIFCgXWGmsw1HA5JtADF-b1eJ4.roa (hash: kqtxwSPKoLsi1ph5t4VnO3iKewevISmebmIE1RpFWLg=)
2: 5PFY7_xrOIKiWQweaQasoQjhjsI.crl (hash: vstjHQp7SH4jGoXRVRySijD5zAASso3tsS9YGvB8p/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:d4:59:25:74:bf:b5:19:f1:73:b6:42:06:b3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Validity
Not Before: Apr 21 02:01:02 2025 GMT
Not After : Apr 22 02:01:02 2025 GMT
Subject: CN=00060732c6abecd82ebe9f91276e9f7ef288403b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:8f:4d:90:0f:3b:03:2a:86:67:56:f5:11:
96:88:94:b8:fe:a0:5d:c6:1f:25:61:9a:a2:f0:67:
eb:f2:0b:ef:36:7d:5b:99:93:eb:b0:24:62:5b:05:
fb:60:8a:66:6b:79:18:cd:d6:82:3c:6b:7a:b3:6d:
05:77:e9:f0:96:2d:39:4a:f1:97:ec:66:9f:a9:47:
26:61:bf:c6:4d:90:e9:f7:1f:55:5b:2e:49:7b:25:
13:d0:53:5f:e4:d8:70:c8:e4:c3:bf:9a:24:18:bf:
3c:71:3a:e6:30:17:c8:05:82:65:68:1a:33:7d:7c:
10:a9:59:65:df:00:09:fd:71:12:72:14:68:75:e8:
8a:ec:e0:1a:3d:1e:9a:82:33:54:02:21:95:a5:69:
0a:24:e5:c9:64:d3:f2:d7:10:94:52:c5:07:cf:a7:
b9:e9:3c:64:4d:b4:10:47:5c:64:5d:4f:44:00:b5:
c0:96:74:8d:a0:ae:89:79:50:3c:37:09:9e:5a:de:
39:78:bd:08:9e:ee:4b:90:9b:4d:4e:45:21:db:94:
6b:22:2f:27:08:36:d5:4c:4b:14:86:1a:e1:50:cc:
1f:55:db:3e:14:61:c6:04:71:bf:54:18:cc:59:d8:
12:d9:71:9a:35:68:51:16:33:1a:26:28:82:73:d3:
1d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:06:07:32:C6:AB:EC:D8:2E:BE:9F:91:27:6E:9F:7E:F2:88:40:3B
X509v3 Authority Key Identifier:
keyid:E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:31:f9:3d:0b:f1:0d:d1:89:c1:cb:b3:0e:bc:46:cb:3d:e9:
c5:93:0a:af:46:59:11:dd:25:11:94:4b:d9:07:f2:48:d1:ca:
fd:ff:01:95:7b:27:e4:e5:99:a9:6b:95:5e:51:69:a6:81:d3:
ab:2f:3b:a3:28:17:94:df:ed:ce:34:0f:c8:f2:a1:a7:47:fa:
11:fe:78:46:b2:25:54:a1:e7:57:22:19:71:0d:38:9f:71:66:
87:f7:64:78:ab:9f:a2:59:ff:eb:80:75:9e:46:45:c6:0b:4c:
b8:12:1a:2a:0b:30:67:8a:30:49:67:0d:91:c5:69:59:45:d6:
a6:cb:a0:08:05:99:64:59:06:f8:72:fe:af:d4:25:f4:55:70:
8a:85:5f:f3:43:2e:4c:39:34:d4:3a:98:47:e7:e6:3a:83:76:
d6:37:5b:13:e9:ae:89:04:4b:32:ff:6f:c7:cd:8f:70:2a:69:
b6:e4:c9:07:9c:6c:d8:b2:b9:cb:e7:ce:5e:80:da:5c:30:42:
a4:8b:3c:5f:59:42:d4:b7:54:5e:2c:98:16:ce:51:e6:c0:01:
e1:bf:5b:d8:14:bb:27:bb:b7:d8:c1:fd:72:2a:c8:05:88:58:
49:a2:ad:24:88:c0:2c:0d:93:79:8e:c8:c2:a6:b6:b6:c7:d6:
29:2f:fb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:53:38 2025 by rpki-client