Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e5c7e6-a57b-4c57-b5a5-58ac05f4d954/1/5xhnDMKBDk0YFTtuTnhBPBz0748.mft
File: 5xhnDMKBDk0YFTtuTnhBPBz0748.mft (raw, json)
Hash identifier: Yt/Ub2VjOSgbwTmTOk9J5A+iBwXZy62vmcUHGOAThKE=
Subject key identifier: 7A:A1:AD:3D:D2:A2:D5:D6:D4:43:B7:48:F4:AF:3C:CC:D2:4D:C2:2D
Authority key identifier: E7:18:67:0C:C2:81:0E:4D:18:15:3B:6E:4E:78:41:3C:1C:F4:EF:8F
Certificate issuer: /CN=e718670cc2810e4d18153b6e4e78413c1cf4ef8f
Certificate serial: 01958BBBC73F5E7DB46A35E8164E776D37CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xhnDMKBDk0YFTtuTnhBPBz0748.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e5c7e6-a57b-4c57-b5a5-58ac05f4d954/1/5xhnDMKBDk0YFTtuTnhBPBz0748.mft
Manifest number: 1498
Signing time: Wed 12 Mar 2025 19:01:34 +0000
Manifest this update: Wed 12 Mar 2025 19:01:34 +0000
Manifest next update: Thu 13 Mar 2025 19:01:34 +0000
Files and hashes: 1: 5xhnDMKBDk0YFTtuTnhBPBz0748.crl (hash: 8KCKMSUuii1PG2OFwR1oynjDncncfcLWv8YXFA2aRwg=)
2: McOsQMvjBBddr62PC0udNAkTiZE.roa (hash: XNiDpIia1i2lCsXP0+KatnkvQgNyXMN/LXGQLjKFa4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e5c7e6-a57b-4c57-b5a5-58ac05f4d954/1/5xhnDMKBDk0YFTtuTnhBPBz0748.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e5c7e6-a57b-4c57-b5a5-58ac05f4d954/1/5xhnDMKBDk0YFTtuTnhBPBz0748.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xhnDMKBDk0YFTtuTnhBPBz0748.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:c7:3f:5e:7d:b4:6a:35:e8:16:4e:77:6d:37:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e718670cc2810e4d18153b6e4e78413c1cf4ef8f
Validity
Not Before: Mar 12 19:01:34 2025 GMT
Not After : Mar 13 19:01:34 2025 GMT
Subject: CN=7aa1ad3dd2a2d5d6d443b748f4af3cccd24dc22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ea:83:8a:4b:92:79:33:89:44:a0:eb:3a:29:
11:7f:ed:33:d2:10:a4:34:6d:88:d8:d1:73:df:cb:
6a:e3:12:f6:7c:24:64:19:fe:4e:29:9f:5d:3a:cd:
8d:aa:17:22:eb:6c:be:24:43:7a:39:b3:e4:84:3c:
b8:85:2e:1d:d1:32:96:3d:08:e6:87:67:6f:50:5a:
2b:22:47:49:73:b5:80:ab:7b:c8:ce:f6:40:27:b7:
44:d0:4e:03:14:19:9b:8a:34:3f:0f:62:c6:3f:ae:
83:cd:cb:7c:f8:9a:ce:20:80:f4:27:ea:66:85:05:
19:dd:56:84:0a:82:ef:97:52:e0:6c:3d:5a:44:15:
10:59:1b:85:9c:84:ba:3e:30:59:98:60:5c:e8:72:
ff:70:20:06:77:df:71:5b:61:6f:e7:c5:97:33:f0:
79:16:a7:0f:b8:1b:e0:ba:17:0e:f1:22:d7:8c:4a:
05:ee:ad:0d:9f:aa:eb:0e:1d:0d:15:37:ab:dc:8a:
78:a9:76:aa:1a:4a:30:ed:6d:aa:71:15:82:ce:e8:
97:68:57:19:e5:8e:02:ff:50:a7:f3:64:49:78:c3:
3d:b2:b9:ef:b7:41:8d:3d:d5:ec:aa:51:bc:7f:b9:
a8:22:36:b3:c4:f4:84:07:53:70:a7:bb:dc:46:7a:
ed:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A1:AD:3D:D2:A2:D5:D6:D4:43:B7:48:F4:AF:3C:CC:D2:4D:C2:2D
X509v3 Authority Key Identifier:
keyid:E7:18:67:0C:C2:81:0E:4D:18:15:3B:6E:4E:78:41:3C:1C:F4:EF:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhnDMKBDk0YFTtuTnhBPBz0748.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e5c7e6-a57b-4c57-b5a5-58ac05f4d954/1/5xhnDMKBDk0YFTtuTnhBPBz0748.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e5c7e6-a57b-4c57-b5a5-58ac05f4d954/1/5xhnDMKBDk0YFTtuTnhBPBz0748.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:53:0d:e3:4a:d0:e7:b6:78:d3:4f:a9:2b:e3:42:55:fd:48:
d6:8a:37:da:c9:e2:44:03:53:5b:93:5b:cc:5c:0d:60:8a:2d:
44:17:57:2b:a0:49:13:77:5f:f2:6f:76:cf:f6:21:cc:b8:00:
41:05:3e:ec:d6:9c:3c:8b:73:d2:89:20:0b:0f:18:96:e4:48:
0c:7f:d6:87:2a:ba:aa:da:2b:76:b9:33:73:d0:b1:fc:ce:73:
fd:d7:bb:0e:53:04:a5:d2:1c:da:e7:cd:3d:34:a7:17:59:09:
4e:b8:76:9e:09:a2:08:a0:d9:88:8c:f4:e2:77:e8:e3:ee:91:
0c:e3:c3:53:30:cf:27:de:e6:18:8b:0a:c1:5b:08:38:3b:4a:
29:28:f1:2a:e1:40:89:b8:24:b6:7e:c9:12:3b:c9:92:89:57:
b3:7a:d7:9d:25:b5:ed:b5:aa:90:18:bc:e2:8f:20:d8:60:fc:
9f:76:65:58:a9:b8:28:27:41:28:50:da:97:2b:09:44:df:34:
f4:7f:8a:ad:39:f2:27:cd:2f:5a:d8:a8:56:7b:9c:47:29:b5:
6e:3c:46:13:d6:34:c6:01:de:27:a8:22:e0:5d:1e:9f:89:ba:
f7:ae:f7:36:28:74:d1:25:f5:eb:1c:2a:d1:33:af:6e:79:5c:
ec:b1:1d:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLu8c/Xn20ajXoFk53bTfLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MTg2NzBjYzI4MTBlNGQxODE1M2I2ZTRlNzg0MTNjMWNm
NGVmOGYwHhcNMjUwMzEyMTkwMTM0WhcNMjUwMzEzMTkwMTM0WjAzMTEwLwYDVQQD
Eyg3YWExYWQzZGQyYTJkNWQ2ZDQ0M2I3NDhmNGFmM2NjY2QyNGRjMjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOqDikuSeTOJRKDrOikRf+0z0hCk
NG2I2NFz38tq4xL2fCRkGf5OKZ9dOs2Nqhci62y+JEN6ObPkhDy4hS4d0TKWPQjm
h2dvUForIkdJc7WAq3vIzvZAJ7dE0E4DFBmbijQ/D2LGP66Dzct8+JrOIID0J+pm
hQUZ3VaECoLvl1LgbD1aRBUQWRuFnIS6PjBZmGBc6HL/cCAGd99xW2Fv58WXM/B5
FqcPuBvguhcO8SLXjEoF7q0Nn6rrDh0NFTer3Ip4qXaqGkow7W2qcRWCzuiXaFcZ
5Y4C/1Cn82RJeMM9srnvt0GNPdXsqlG8f7moIjazxPSEB1Nwp7vcRnrtgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqhrT3SotXW1EO3SPSvPMzSTcItMB8GA1UdIwQY
MBaAFOcYZwzCgQ5NGBU7bk54QTwc9O+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXhobkRNS0JEazBZRlR0dVRuaEJQQnowNzQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lNWM3ZTYtYTU3Yi00YzU3LWI1YTUt
NThhYzA1ZjRkOTU0LzEvNXhobkRNS0JEazBZRlR0dVRuaEJQQnowNzQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lNWM3ZTYtYTU3Yi00YzU3LWI1YTUtNThhYzA1ZjRkOTU0
LzEvNXhobkRNS0JEazBZRlR0dVRuaEJQQnowNzQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVMN40rQ
57Z400+pK+NCVf1I1oo32sniRANTW5NbzFwNYIotRBdXK6BJE3df8m92z/YhzLgA
QQU+7NacPItz0okgCw8YluRIDH/Whyq6qtordrkzc9Cx/M5z/de7DlMEpdIc2ufN
PTSnF1kJTrh2ngmiCKDZiIz04nfo4+6RDOPDUzDPJ97mGIsKwVsIODtKKSjxKuFA
ibgktn7JEjvJkolXs3rXnSW17bWqkBi84o8g2GD8n3ZlWKm4KCdBKFDalysJRN80
9H+KrTnyJ80vWtioVnucRym1bjxGE9Y0xgHeJ6gi4F0en4m69673Nih00SX16xwq
0TOvbnlc7LEdzQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:38 2025 by rpki-client