Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft
File: 5cfDmlkS3cIen2tRmJZyV2ISeDM.mft (raw, json)
Hash identifier: Kjjo6fvezXXuxVrH5733pccfOtQhOvLvhMJuuByUI2c=
Subject key identifier: E8:C1:F8:FA:D9:0B:F0:19:92:63:A9:FE:1F:54:58:35:A8:25:AB:0C
Authority key identifier: E5:C7:C3:9A:59:12:DD:C2:1E:9F:6B:51:98:96:72:57:62:12:78:33
Certificate issuer: /CN=e5c7c39a5912ddc21e9f6b519896725762127833
Certificate serial: 0196816B6DBB88E3A7183535D9945916D8D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cfDmlkS3cIen2tRmJZyV2ISeDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft
Manifest number: 8F
Signing time: Tue 29 Apr 2025 12:00:23 +0000
Manifest this update: Tue 29 Apr 2025 12:00:23 +0000
Manifest next update: Wed 30 Apr 2025 12:00:23 +0000
Files and hashes: 1: 5cfDmlkS3cIen2tRmJZyV2ISeDM.crl (hash: dAciTT8iUregUk/IJvqGnRZ3rPW7OR3faXQtordlUmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cfDmlkS3cIen2tRmJZyV2ISeDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6b:6d:bb:88:e3:a7:18:35:35:d9:94:59:16:d8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c7c39a5912ddc21e9f6b519896725762127833
Validity
Not Before: Apr 29 12:00:23 2025 GMT
Not After : Apr 30 12:00:23 2025 GMT
Subject: CN=e8c1f8fad90bf0199263a9fe1f545835a825ab0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:66:0a:6b:52:2e:b9:5b:84:4e:8c:4c:96:74:
5b:f3:8c:f4:b5:0f:45:7e:dd:d9:d5:ac:2d:ac:58:
68:7a:c3:78:e7:84:7f:ef:58:fd:c4:e8:a7:86:39:
d9:1b:c7:22:c1:d2:cc:54:fc:d3:f0:2a:fd:cf:b9:
b6:c4:ec:0b:5f:95:b0:f1:c9:ab:d4:63:e0:07:c1:
f7:fb:8b:a7:44:29:cd:2c:8e:bf:41:2b:1d:c1:b0:
d0:86:0a:1d:ae:39:24:b0:0e:bc:fc:50:a5:02:70:
f7:a0:d9:a8:b3:49:76:e4:cd:b3:49:85:64:e4:41:
db:03:89:a3:70:ed:82:d1:f8:45:66:68:7b:71:1a:
a8:55:6d:3f:2a:1c:7e:b0:99:5f:41:bb:cc:91:c7:
44:2e:12:2a:e8:ff:9f:90:10:5b:42:15:c9:5c:39:
c3:c3:f0:0d:0e:20:05:4a:57:ee:fb:96:d4:4c:45:
20:e7:1a:9c:5f:cf:a7:0b:48:a7:09:12:7e:4d:f1:
c0:d9:69:65:03:2b:be:0b:37:95:22:de:6b:0d:2c:
f1:2f:bd:8d:99:89:24:2a:d9:dd:41:85:26:85:63:
ae:87:0b:f3:49:aa:7f:2e:15:d6:e9:a5:81:87:64:
ee:26:32:cb:12:b4:46:b1:e7:e1:3e:9a:bd:0e:d7:
43:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C1:F8:FA:D9:0B:F0:19:92:63:A9:FE:1F:54:58:35:A8:25:AB:0C
X509v3 Authority Key Identifier:
keyid:E5:C7:C3:9A:59:12:DD:C2:1E:9F:6B:51:98:96:72:57:62:12:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cfDmlkS3cIen2tRmJZyV2ISeDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:bb:25:61:8a:3d:8c:f1:7b:43:fc:25:36:78:09:d6:8e:36:
44:82:a1:30:dd:af:c5:6d:53:38:2c:30:94:93:a8:17:99:5a:
b6:9e:2a:6b:96:43:20:51:4c:61:44:86:7c:9d:8c:57:25:f5:
49:26:e9:fa:bb:bb:5a:cc:92:e4:9c:a8:5f:33:f5:7d:8e:21:
c0:f2:bc:42:ac:8e:1f:e5:c2:6c:6d:f5:97:df:5c:b7:88:14:
8a:44:a5:59:e9:96:00:8f:aa:db:1b:bf:0a:a2:d7:29:a9:09:
b3:92:7e:09:a4:0b:88:ad:19:fb:ce:62:a4:6b:3b:fe:9f:10:
09:8d:af:83:5b:10:be:f9:0a:16:c7:4b:10:98:6a:76:e9:1a:
67:7c:90:f1:68:c5:cd:31:2f:a2:cc:9b:14:8a:dc:f3:b7:85:
08:6f:ee:4e:3e:48:33:1b:e5:fd:14:77:39:bc:45:be:45:af:
1c:be:87:30:4c:81:ab:b4:f3:c1:43:89:47:a5:67:3a:5b:48:
94:a9:3d:f5:01:7e:0c:95:7d:19:c3:3d:7a:c5:8b:19:c1:25:
0c:91:f9:69:56:39:77:ec:b5:91:35:1b:b2:56:12:dd:c3:fd:
09:fa:2d:f4:b9:98:07:c9:1d:37:36:a8:a4:f1:a7:64:a9:ea:
74:85:3c:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaBa227iOOnGDU12ZRZFtjYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YzdjMzlhNTkxMmRkYzIxZTlmNmI1MTk4OTY3MjU3NjIx
Mjc4MzMwHhcNMjUwNDI5MTIwMDIzWhcNMjUwNDMwMTIwMDIzWjAzMTEwLwYDVQQD
EyhlOGMxZjhmYWQ5MGJmMDE5OTI2M2E5ZmUxZjU0NTgzNWE4MjVhYjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WYKa1IuuVuEToxMlnRb84z0tQ9F
ft3Z1awtrFhoesN454R/71j9xOinhjnZG8ciwdLMVPzT8Cr9z7m2xOwLX5Ww8cmr
1GPgB8H3+4unRCnNLI6/QSsdwbDQhgodrjkksA68/FClAnD3oNmos0l25M2zSYVk
5EHbA4mjcO2C0fhFZmh7cRqoVW0/Khx+sJlfQbvMkcdELhIq6P+fkBBbQhXJXDnD
w/ANDiAFSlfu+5bUTEUg5xqcX8+nC0inCRJ+TfHA2WllAyu+CzeVIt5rDSzxL72N
mYkkKtndQYUmhWOuhwvzSap/LhXW6aWBh2TuJjLLErRGsefhPpq9DtdDzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjB+PrZC/AZkmOp/h9UWDWoJasMMB8GA1UdIwQY
MBaAFOXHw5pZEt3CHp9rUZiWcldiEngzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWNmRG1sa1MzY0llbjJ0Um1KWnlWMklTZURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xMGFmODMtMDhmNS00OTE5LWJhMWQt
MzhmODY0YTM0Yjc4LzEvNWNmRG1sa1MzY0llbjJ0Um1KWnlWMklTZURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8xMGFmODMtMDhmNS00OTE5LWJhMWQtMzhmODY0YTM0Yjc4
LzEvNWNmRG1sa1MzY0llbjJ0Um1KWnlWMklTZURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbslYYo9
jPF7Q/wlNngJ1o42RIKhMN2vxW1TOCwwlJOoF5latp4qa5ZDIFFMYUSGfJ2MVyX1
SSbp+ru7WsyS5JyoXzP1fY4hwPK8QqyOH+XCbG31l99ct4gUikSlWemWAI+q2xu/
CqLXKakJs5J+CaQLiK0Z+85ipGs7/p8QCY2vg1sQvvkKFsdLEJhqdukaZ3yQ8WjF
zTEvosybFIrc87eFCG/uTj5IMxvl/RR3ObxFvkWvHL6HMEyBq7TzwUOJR6VnOltI
lKk99QF+DJV9GcM9esWLGcElDJH5aVY5d+y1kTUbslYS3cP9Cfot9LmYB8kdNzao
pPGnZKnqdIU8ug==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:39:22 2025 by rpki-client