Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
File: 5qTLdM9STBgSHVO1MsA8BvSta-Y.mft (raw, json)
Hash identifier: L93/3zXoCtEKpZqIDOeNhvlIwRpxsx4n/T6RYBzKWBI=
Subject key identifier: C7:0E:CF:B5:90:7D:12:EB:94:3F:AA:09:C8:87:15:A2:FE:4D:5B:00
Authority key identifier: E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
Certificate issuer: /CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Certificate serial: 01967E33AE07E5805727AB254BF1F7C2D3C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
Manifest number: 0F0D
Signing time: Mon 28 Apr 2025 21:00:38 +0000
Manifest this update: Mon 28 Apr 2025 21:00:38 +0000
Manifest next update: Tue 29 Apr 2025 21:00:38 +0000
Files and hashes: 1: 5qTLdM9STBgSHVO1MsA8BvSta-Y.crl (hash: TJRyGad6L7PnhOE0Mflz4QUyOXhrD+vjiBF6ay/XMrg=)
2: FXr_S2B4fxLM9qAbLsO0vh-M550.roa (hash: XI0iDABL8ODtA8iq4rY+TAYyWpnlmsL+6qt8rzYOd/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:ae:07:e5:80:57:27:ab:25:4b:f1:f7:c2:d3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Validity
Not Before: Apr 28 21:00:38 2025 GMT
Not After : Apr 29 21:00:38 2025 GMT
Subject: CN=c70ecfb5907d12eb943faa09c88715a2fe4d5b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:df:f4:51:85:69:d0:3c:6f:1b:17:de:c1:5f:
0c:35:43:b5:9e:f2:23:20:1e:4f:cd:04:6b:78:49:
bd:aa:5d:33:76:6e:e7:ef:e8:d4:e7:f4:bd:11:b0:
7f:71:a9:18:24:ef:2c:b8:ce:65:a4:76:e0:94:06:
5d:1a:9c:08:09:11:bb:b6:e3:cb:5f:7c:ba:e3:bb:
70:b8:7e:42:92:83:fb:74:9c:ed:d3:34:61:b9:ab:
29:15:01:89:5e:66:41:26:b8:ad:d2:68:c4:21:5a:
b9:f8:9a:c0:78:87:00:b2:67:d2:13:33:0d:ef:20:
2d:b2:e1:83:67:21:63:33:8f:38:f0:3f:c7:16:a9:
7e:c4:b6:10:5d:53:af:e9:ac:b4:0a:af:b6:48:f1:
65:ad:ed:85:77:b7:9d:28:bf:93:44:44:4d:5d:73:
6e:aa:e6:80:d2:8f:0e:79:42:fe:d4:28:c7:8b:85:
f2:1d:e0:f4:29:ce:7e:f7:17:39:b5:44:42:49:62:
a6:51:72:e2:c0:46:49:a8:13:9f:4c:4a:82:13:60:
14:b5:31:2e:09:13:78:8d:49:7c:46:de:8e:3a:7e:
5a:1e:7a:1f:d8:f1:8e:ce:66:ad:04:4f:9f:cf:1d:
32:6a:b6:85:85:7e:0a:bb:8b:26:e8:35:b5:a9:b4:
d1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0E:CF:B5:90:7D:12:EB:94:3F:AA:09:C8:87:15:A2:FE:4D:5B:00
X509v3 Authority Key Identifier:
keyid:E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:23:66:83:e3:55:1f:1a:ae:58:20:51:48:49:dd:5e:a1:69:
d5:95:66:9a:0e:4f:67:fa:a7:a8:5e:20:9c:52:ea:4b:ec:17:
3a:d7:b2:40:ef:a7:76:d7:67:dd:b2:aa:37:e6:21:a4:7f:53:
ee:eb:b2:f8:a8:3d:af:d0:21:ea:10:b5:b0:cb:37:48:57:c8:
ca:94:19:24:a2:78:b0:5c:6c:b6:cd:e7:a4:4b:6e:ab:ed:87:
93:4f:5f:db:43:9b:0a:b2:bb:28:9c:7d:2b:49:4f:7d:00:11:
14:9f:7e:c5:23:47:7d:0b:1a:e4:70:6b:6f:1b:a6:e2:e1:70:
dd:5c:04:82:47:31:f0:06:45:5a:b1:80:be:12:5e:4c:06:2d:
cd:3f:e5:db:a6:21:bc:15:53:b9:8c:f5:f4:df:1e:d9:71:4b:
1b:dc:02:80:50:82:a8:80:ed:86:95:bc:31:4c:12:67:1f:d3:
2b:08:bc:31:37:b2:95:0d:a1:49:6e:27:3d:a6:b3:9f:70:98:
4a:dd:99:53:b6:c7:5d:32:4a:bb:28:cd:36:3b:4c:d2:20:ce:
7f:a7:7d:80:26:ee:95:5f:fd:ab:f4:e1:bd:56:2a:63:87:31:
dc:12:3e:88:3c:80:b6:d7:c1:19:c6:de:c4:68:d3:a1:b6:9f:
ce:55:f4:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+M64H5YBXJ6slS/H3wtPFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YTRjYjc0Y2Y1MjRjMTgxMjFkNTNiNTMyYzAzYzA2ZjRh
ZDZiZTYwHhcNMjUwNDI4MjEwMDM4WhcNMjUwNDI5MjEwMDM4WjAzMTEwLwYDVQQD
EyhjNzBlY2ZiNTkwN2QxMmViOTQzZmFhMDljODg3MTVhMmZlNGQ1YjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt/0UYVp0DxvGxfewV8MNUO1nvIj
IB5PzQRreEm9ql0zdm7n7+jU5/S9EbB/cakYJO8suM5lpHbglAZdGpwICRG7tuPL
X3y647twuH5CkoP7dJzt0zRhuaspFQGJXmZBJrit0mjEIVq5+JrAeIcAsmfSEzMN
7yAtsuGDZyFjM4848D/HFql+xLYQXVOv6ay0Cq+2SPFlre2Fd7edKL+TRERNXXNu
quaA0o8OeUL+1CjHi4XyHeD0Kc5+9xc5tURCSWKmUXLiwEZJqBOfTEqCE2AUtTEu
CRN4jUl8Rt6OOn5aHnof2PGOzmatBE+fzx0yaraFhX4Ku4sm6DW1qbTR6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcOz7WQfRLrlD+qCciHFaL+TVsAMB8GA1UdIwQY
MBaAFOaky3TPUkwYEh1TtTLAPAb0rWvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXFUTGRNOVNUQmdTSFZPMU1zQThCdlN0YS1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mOWY3NzMtMTIxZS00NTBkLWI2MDYt
OThiZjQyODlkZjNiLzEvNXFUTGRNOVNUQmdTSFZPMU1zQThCdlN0YS1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mOWY3NzMtMTIxZS00NTBkLWI2MDYtOThiZjQyODlkZjNi
LzEvNXFUTGRNOVNUQmdTSFZPMU1zQThCdlN0YS1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqiNmg+NV
HxquWCBRSEndXqFp1ZVmmg5PZ/qnqF4gnFLqS+wXOteyQO+ndtdn3bKqN+YhpH9T
7uuy+Kg9r9Ah6hC1sMs3SFfIypQZJKJ4sFxsts3npEtuq+2Hk09f20ObCrK7KJx9
K0lPfQARFJ9+xSNHfQsa5HBrbxum4uFw3VwEgkcx8AZFWrGAvhJeTAYtzT/l26Yh
vBVTuYz19N8e2XFLG9wCgFCCqIDthpW8MUwSZx/TKwi8MTeylQ2hSW4nPaazn3CY
St2ZU7bHXTJKuyjNNjtM0iDOf6d9gCbulV/9q/ThvVYqY4cx3BI+iDyAttfBGcbe
xGjTobafzlX07Q==
-----END CERTIFICATE-----
Generated at Tue Apr 29 02:51:38 2025 by rpki-client