Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
File: 5qowZQKj7IBJPXU0jChYsa9-z4A.mft (raw, json)
Hash identifier: 5yU8sz2xyP6a2367zgvgIVIkBCprdaxbxLr1LeG8VEI=
Subject key identifier: 2D:F6:89:4B:A9:23:28:03:86:43:90:9E:FD:DB:A1:12:DF:E5:05:D2
Authority key identifier: E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
Certificate issuer: /CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Certificate serial: 0196839133C328439D0F4949816B35483F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
Manifest number: 039B
Signing time: Tue 29 Apr 2025 22:00:53 +0000
Manifest this update: Tue 29 Apr 2025 22:00:53 +0000
Manifest next update: Wed 30 Apr 2025 22:00:53 +0000
Files and hashes: 1: 5qowZQKj7IBJPXU0jChYsa9-z4A.crl (hash: +gfT8LOtGEvqClBv9VcVPncz5LxxvowWqSRtmncNv08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:33:c3:28:43:9d:0f:49:49:81:6b:35:48:3f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Validity
Not Before: Apr 29 22:00:53 2025 GMT
Not After : Apr 30 22:00:53 2025 GMT
Subject: CN=2df6894ba92328038643909efddba112dfe505d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b5:be:fb:e4:a5:e4:90:f0:9d:51:bf:fd:04:
82:ff:cf:e1:3c:c8:39:f6:d6:7a:33:2b:a9:4b:ca:
45:88:a2:a1:19:37:d4:a5:74:24:06:d8:5d:b3:9b:
34:56:03:0f:55:3e:cd:73:5a:8b:02:ec:3b:71:d1:
1c:e6:06:8a:3e:50:7c:20:1d:f8:64:9a:81:a1:94:
26:aa:02:ba:02:be:13:d4:54:0b:01:19:4a:3e:17:
7a:3e:49:10:3d:2b:1e:d7:7c:92:cf:b4:98:8b:b6:
42:5f:84:ab:c8:1c:6c:9d:40:ba:b5:9a:c5:3c:aa:
2a:58:10:af:43:6b:18:15:e7:3f:d4:c3:72:05:f9:
81:82:53:a4:05:9f:10:fb:46:75:87:d1:dc:b6:9c:
57:d3:00:58:e3:2a:36:f8:51:bb:3f:c6:24:7a:ff:
89:bb:2a:53:99:04:44:8e:20:e3:47:a9:c8:ee:9a:
41:58:b9:87:d0:97:48:80:84:0b:08:a9:85:ff:f8:
8f:bc:9d:fd:28:0e:55:86:13:a7:69:9b:cc:6d:42:
10:df:a8:46:72:30:5e:b2:5f:9b:f2:c2:04:0d:50:
3c:8e:18:ef:f7:5c:77:5c:d7:8a:9b:f4:5b:c5:f3:
c6:16:6f:d5:ad:0e:62:7b:44:27:2f:90:d7:3a:7e:
8e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F6:89:4B:A9:23:28:03:86:43:90:9E:FD:DB:A1:12:DF:E5:05:D2
X509v3 Authority Key Identifier:
keyid:E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:54:59:31:9d:23:59:4a:84:42:03:a6:99:84:eb:ed:ce:fb:
8f:f5:2c:a2:00:23:26:75:bc:ec:a8:64:df:43:d6:3d:0a:06:
58:23:b0:ad:a0:3c:a0:4d:7a:8b:c1:b5:ea:a2:ae:1f:c2:ce:
fd:ac:54:da:9a:3e:6f:66:64:08:64:47:8e:72:fd:96:57:6d:
6f:d6:c8:b4:1a:ba:cf:4c:6b:ce:e8:99:ec:cc:55:eb:01:99:
26:cc:d4:78:84:d2:1a:1e:c6:5f:ed:a2:d4:9f:b6:3f:f8:88:
f0:cd:f5:ee:87:10:f2:53:21:0c:30:ba:35:96:ed:bb:63:bc:
a8:8f:89:2e:b9:95:1f:cc:99:ba:e6:9e:b2:58:1b:b1:4f:87:
c3:44:31:18:7b:4c:67:2b:11:cb:62:33:5a:de:f4:f3:0f:83:
f2:4a:8a:4d:33:38:2a:8c:0d:26:ca:7d:db:c4:f8:0b:85:64:
71:88:00:53:0e:c0:a8:77:28:21:52:8b:eb:a6:aa:48:49:2e:
ec:f0:db:ee:e3:88:5d:0c:46:63:2a:0a:61:ce:41:8d:61:2b:
d7:f5:f4:73:69:75:e5:f9:49:30:73:40:ae:c9:a2:9a:80:a9:
7c:9d:68:4d:b3:34:79:fd:c7:4d:b0:5f:52:1c:e4:06:05:45:
80:1a:57:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkTPDKEOdD0lJgWs1SD98MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YWEzMDY1MDJhM2VjODA0OTNkNzUzNDhjMjg1OGIxYWY3
ZWNmODAwHhcNMjUwNDI5MjIwMDUzWhcNMjUwNDMwMjIwMDUzWjAzMTEwLwYDVQQD
EygyZGY2ODk0YmE5MjMyODAzODY0MzkwOWVmZGRiYTExMmRmZTUwNWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bW+++Sl5JDwnVG//QSC/8/hPMg5
9tZ6MyupS8pFiKKhGTfUpXQkBthds5s0VgMPVT7Nc1qLAuw7cdEc5gaKPlB8IB34
ZJqBoZQmqgK6Ar4T1FQLARlKPhd6PkkQPSse13ySz7SYi7ZCX4SryBxsnUC6tZrF
PKoqWBCvQ2sYFec/1MNyBfmBglOkBZ8Q+0Z1h9HctpxX0wBY4yo2+FG7P8Ykev+J
uypTmQREjiDjR6nI7ppBWLmH0JdIgIQLCKmF//iPvJ39KA5VhhOnaZvMbUIQ36hG
cjBesl+b8sIEDVA8jhjv91x3XNeKm/RbxfPGFm/VrQ5ie0QnL5DXOn6O7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC32iUupIygDhkOQnv3boRLf5QXSMB8GA1UdIwQY
MBaAFOaqMGUCo+yAST11NIwoWLGvfs+AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXFvd1pRS2o3SUJKUFhVMGpDaFlzYTktejRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xZGM3MzItODg4ZS00MmViLThkOGMt
ZmYwMGYyYWM4Yzc4LzEvNXFvd1pRS2o3SUJKUFhVMGpDaFlzYTktejRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8xZGM3MzItODg4ZS00MmViLThkOGMtZmYwMGYyYWM4Yzc4
LzEvNXFvd1pRS2o3SUJKUFhVMGpDaFlzYTktejRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFRZMZ0j
WUqEQgOmmYTr7c77j/UsogAjJnW87Khk30PWPQoGWCOwraA8oE16i8G16qKuH8LO
/axU2po+b2ZkCGRHjnL9lldtb9bItBq6z0xrzuiZ7MxV6wGZJszUeITSGh7GX+2i
1J+2P/iI8M317ocQ8lMhDDC6NZbtu2O8qI+JLrmVH8yZuuaeslgbsU+Hw0QxGHtM
ZysRy2IzWt708w+D8kqKTTM4KowNJsp928T4C4VkcYgAUw7AqHcoIVKL66aqSEku
7PDb7uOIXQxGYyoKYc5BjWEr1/X0c2l15flJMHNArsmimoCpfJ1oTbM0ef3HTbBf
UhzkBgVFgBpXRw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:34:36 2025 by rpki-client