Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
File: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft (raw, json)
Hash identifier: CzJIQI+38hliPsasOiVt/qEpaZxXsy2CKTom9QyCcJY=
Subject key identifier: 30:38:DD:D2:3A:60:FF:72:92:47:EB:F1:2B:77:10:67:A0:CC:D3:47
Authority key identifier: E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
Certificate issuer: /CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Certificate serial: 01967378DA9E7EA81690B43A529E13CECBF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
Manifest number: 0FD1
Signing time: Sat 26 Apr 2025 19:00:22 +0000
Manifest this update: Sat 26 Apr 2025 19:00:22 +0000
Manifest next update: Sun 27 Apr 2025 19:00:22 +0000
Files and hashes: 1: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl (hash: 3UwN5qTR0WWc2tlTcXL2SPYW8wuShx6pLYjigv0+/dw=)
2: hYFp2PLalLwxzZhV7wbRQcfYlV8.roa (hash: LW/5pSb1sTjsNP1WLARXiewkehoBnSZqbhX0D/WoNvA=)
3: kRaJhPTv6AA3evpLDRDPj-DpMRE.roa (hash: 7JRuwVtlOrNDlLTW+rHW8uN2fSnzcu7/YmU6Ma1CHpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:78:da:9e:7e:a8:16:90:b4:3a:52:9e:13:ce:cb:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Validity
Not Before: Apr 26 19:00:22 2025 GMT
Not After : Apr 27 19:00:22 2025 GMT
Subject: CN=3038ddd23a60ff729247ebf12b771067a0ccd347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:f3:d8:20:c1:c7:e0:77:be:51:47:ca:41:
d2:8a:ac:c3:40:b5:79:54:95:d7:7f:cc:4a:0d:f0:
0f:e7:4c:00:f2:4e:88:e5:d0:d1:e0:62:96:c5:c9:
4f:9b:91:2f:6c:1b:4c:87:95:55:37:95:b4:97:ac:
3c:27:4d:7f:97:87:2a:d8:b2:11:1a:0f:7c:33:e9:
27:d9:3d:fe:a2:cb:8a:85:40:3d:35:05:9c:cc:b3:
bd:e8:8d:76:e0:70:de:c0:19:35:fe:e4:ec:01:5a:
24:9c:c0:e2:49:2c:a2:8e:7c:81:ae:fc:ea:1f:92:
d4:e6:4a:12:34:7f:0d:55:ca:bb:cd:a1:15:3b:f4:
8e:ea:9f:c0:f4:aa:9b:5c:75:34:6f:99:52:51:2e:
5d:c6:ed:3a:0b:2d:38:65:f1:cc:ab:2c:cd:08:b9:
0f:22:f6:19:0a:85:3f:e4:4e:c8:18:2c:30:53:1f:
7d:c3:9f:bc:d3:51:ee:c4:7d:c2:0f:db:d4:5d:60:
9a:63:94:ea:b2:45:03:64:d2:3e:06:30:c9:ed:5d:
ea:d0:c9:f3:95:65:13:d9:91:ad:ba:26:e0:21:94:
cd:5a:9f:7d:c6:59:62:09:df:1f:ac:d9:ff:50:40:
fe:af:fb:7c:bf:44:4c:d5:e5:90:ff:ef:e9:c9:1d:
f0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:38:DD:D2:3A:60:FF:72:92:47:EB:F1:2B:77:10:67:A0:CC:D3:47
X509v3 Authority Key Identifier:
keyid:E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:98:3c:67:12:7a:b7:b2:f3:f2:d1:d1:48:a8:70:62:6c:0e:
73:11:23:6a:6a:0e:bf:a1:b5:2a:bd:ae:20:b7:5c:06:32:73:
e7:a2:c7:aa:e7:76:eb:5a:b8:f9:c6:d6:b8:e2:f2:62:a3:1c:
ca:73:6c:89:6b:28:f9:36:01:89:42:fe:65:79:65:e9:2c:1c:
3b:bf:9e:8f:41:7e:b5:85:8f:7a:a1:41:a3:3c:db:8b:b9:b5:
c6:d5:8a:54:94:bc:1f:8e:19:e8:b0:f9:62:3d:da:02:e9:2a:
59:eb:51:8d:d5:0c:4f:82:a1:07:6a:ec:89:a2:56:f0:3d:f0:
fd:f8:57:03:95:81:02:51:80:58:35:f1:19:5d:92:6e:9d:a1:
c4:ed:37:b5:0a:e8:36:6c:47:19:c9:99:79:1b:08:42:77:5b:
13:4b:6c:8a:0b:99:84:92:66:ee:ae:84:af:41:3f:25:2b:26:
e7:47:d3:0a:d6:48:fe:e7:4d:a5:0a:87:b2:f5:77:32:d0:da:
a2:a0:3f:5b:6d:63:0b:37:87:e6:37:30:b7:da:22:6d:7b:e1:
4b:a4:4b:ab:42:1a:a3:42:bc:47:42:56:72:25:6e:22:be:b5:
60:da:c1:42:36:81:4f:43:86:95:82:dd:04:da:96:74:d2:0e:
ea:65:4c:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzeNqefqgWkLQ6Up4TzsvwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2N2MxMTQ1ZDE4NTU0Njk4ZWRkOTlkN2NkMTk5Y2QzYzAy
YjJhMTUwHhcNMjUwNDI2MTkwMDIyWhcNMjUwNDI3MTkwMDIyWjAzMTEwLwYDVQQD
EygzMDM4ZGRkMjNhNjBmZjcyOTI0N2ViZjEyYjc3MTA2N2EwY2NkMzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYTz2CDBx+B3vlFHykHSiqzDQLV5
VJXXf8xKDfAP50wA8k6I5dDR4GKWxclPm5EvbBtMh5VVN5W0l6w8J01/l4cq2LIR
Gg98M+kn2T3+osuKhUA9NQWczLO96I124HDewBk1/uTsAVoknMDiSSyijnyBrvzq
H5LU5koSNH8NVcq7zaEVO/SO6p/A9KqbXHU0b5lSUS5dxu06Cy04ZfHMqyzNCLkP
IvYZCoU/5E7IGCwwUx99w5+801HuxH3CD9vUXWCaY5TqskUDZNI+BjDJ7V3q0Mnz
lWUT2ZGtuibgIZTNWp99xlliCd8frNn/UED+r/t8v0RM1eWQ/+/pyR3wTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDA43dI6YP9ykkfr8St3EGegzNNHMB8GA1UdIwQY
MBaAFOZ8EUXRhVRpjt2Z180ZnNPAKyoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW53UlJkR0ZWR21PM1puWHpSbWMwOEFyS2hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lNjJlMGMtMjVlYi00Yzk1LTgwMDIt
ODdmMWNmNzNhNDNhLzEvNW53UlJkR0ZWR21PM1puWHpSbWMwOEFyS2hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9lNjJlMGMtMjVlYi00Yzk1LTgwMDItODdmMWNmNzNhNDNh
LzEvNW53UlJkR0ZWR21PM1puWHpSbWMwOEFyS2hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe5g8ZxJ6
t7Lz8tHRSKhwYmwOcxEjamoOv6G1Kr2uILdcBjJz56LHqud261q4+cbWuOLyYqMc
ynNsiWso+TYBiUL+ZXll6SwcO7+ej0F+tYWPeqFBozzbi7m1xtWKVJS8H44Z6LD5
Yj3aAukqWetRjdUMT4KhB2rsiaJW8D3w/fhXA5WBAlGAWDXxGV2Sbp2hxO03tQro
NmxHGcmZeRsIQndbE0tsiguZhJJm7q6Er0E/JSsm50fTCtZI/udNpQqHsvV3MtDa
oqA/W21jCzeH5jcwt9oibXvhS6RLq0Iao0K8R0JWciVuIr61YNrBQjaBT0OGlYLd
BNqWdNIO6mVMBA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 02:57:27 2025 by rpki-client