Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
File: 5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft (raw, json)
Hash identifier: ExDv6GCxzPmxAP0GLhTJvd0XurmIOHkgsVghNHEuRvk=
Subject key identifier: 96:71:1F:49:CE:DA:D1:9D:16:38:71:64:9B:FA:4D:FE:DC:E0:BE:EF
Authority key identifier: E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
Certificate issuer: /CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Certificate serial: 019677FB65792547E728BE9E7D4EDC762437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 16:01:26 +0000
Manifest this update: Sun 27 Apr 2025 16:01:26 +0000
Manifest next update: Mon 28 Apr 2025 16:01:26 +0000
Files and hashes: 1: 1xvntgtwN598Xt12Wp30p-iFY40.roa (hash: Mu8yYMtQaTf8Y5ca71Jrhca8f7JY0TOmjgZFuk/22tE=)
2: 5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl (hash: jPhFawS8L0anyUnY+FGGWDJyzkNY+w+3BvpUaIEtF+k=)
3: V_bFPJiZiN3dn69rtGf2PU2V_7s.roa (hash: yf/Df7sBD+Bl6bPwS7+5B7VNWvnFlcA8NvL0Ry+NDTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:65:79:25:47:e7:28:be:9e:7d:4e:dc:76:24:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Validity
Not Before: Apr 27 16:01:26 2025 GMT
Not After : Apr 28 16:01:26 2025 GMT
Subject: CN=96711f49cedad19d163871649bfa4dfedce0beef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:2b:57:35:12:33:60:78:be:87:9e:97:f9:
47:5d:db:60:bf:dd:7d:e4:eb:71:ad:05:e0:b0:49:
57:db:9b:81:20:f4:5b:95:50:cb:fe:2b:09:1f:c9:
d8:20:75:f8:1d:d5:31:90:ba:66:12:16:73:58:dd:
f9:36:0e:cf:8a:71:ea:9e:28:50:9f:7a:40:00:f6:
ec:c1:ab:91:7d:59:4f:4d:d8:bf:18:e2:c0:64:23:
5d:9f:81:42:bd:b8:e2:52:f2:b1:36:63:41:51:25:
4b:1a:b1:57:69:87:2a:be:3d:04:88:52:32:8e:e9:
63:21:c3:9d:e7:6a:e4:28:47:9c:c3:cb:c3:e6:ad:
d0:25:de:37:8b:c2:c1:7b:6a:76:bb:cc:5c:ed:57:
38:9e:b4:d2:23:3d:82:56:41:6e:63:62:b2:66:c9:
9e:55:7b:9c:99:8d:6f:7c:e5:10:c8:cb:3e:8a:27:
57:17:ea:d9:88:9e:2e:77:87:e2:e3:cc:db:25:13:
13:88:60:5d:75:57:5c:aa:e2:65:cb:5b:5f:aa:b8:
8f:28:e8:59:b8:a9:f4:fc:f1:ab:a7:bf:f8:f5:fe:
65:86:26:39:7f:f3:02:7a:e6:a2:64:f6:8b:84:c8:
cd:01:bd:35:0f:66:71:22:00:78:b6:b5:a0:30:32:
47:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:71:1F:49:CE:DA:D1:9D:16:38:71:64:9B:FA:4D:FE:DC:E0:BE:EF
X509v3 Authority Key Identifier:
keyid:E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ce:65:bf:1b:73:37:c7:a0:7a:7d:c2:ce:b9:6c:be:33:dc:
0b:22:d8:ad:bc:aa:3b:3e:73:fa:ba:28:ef:d0:80:c9:c4:8d:
49:ce:82:51:50:cb:07:39:b0:0d:1f:03:c1:66:28:44:eb:78:
4c:5d:95:15:56:51:65:a2:14:89:6a:43:c3:2e:c1:97:93:1b:
52:22:f1:a5:26:ef:d7:6d:e8:d8:e9:b7:fd:f6:ea:62:20:04:
b9:58:2e:ad:09:75:f3:d6:8b:fe:97:da:69:1a:55:33:de:f6:
06:51:4c:cc:61:1b:50:52:ea:72:ce:8a:8e:4f:5f:eb:fd:82:
51:93:a9:24:67:96:0f:f2:07:97:a8:a3:d8:a4:5f:66:4f:fd:
98:f5:9c:28:d3:85:d7:90:30:c3:f2:d2:ab:3e:e1:5f:8e:5d:
24:ca:52:4a:92:23:9e:18:e4:91:d6:00:cf:3e:ef:8a:c4:00:
66:fb:86:7f:c5:83:d9:4f:6e:89:7d:de:c2:6b:52:96:15:9d:
c1:a7:25:fe:49:d6:25:e7:31:4a:ad:4c:e2:0e:b7:f5:86:f6:
d2:89:0d:7a:70:c6:dd:cc:52:1e:e5:67:ff:94:12:30:a0:a6:
72:1e:c3:91:27:a9:86:be:44:66:6a:0f:be:3a:ae:ed:59:09:
37:40:a9:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+2V5JUfnKL6efU7cdiQ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NWI2NjRjOTJiM2U3MjEwYzJiMGVkNDUzYzY0ZWE3ZjVl
ODc2ZjcwHhcNMjUwNDI3MTYwMTI2WhcNMjUwNDI4MTYwMTI2WjAzMTEwLwYDVQQD
Eyg5NjcxMWY0OWNlZGFkMTlkMTYzODcxNjQ5YmZhNGRmZWRjZTBiZWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J0rVzUSM2B4voeel/lHXdtgv919
5OtxrQXgsElX25uBIPRblVDL/isJH8nYIHX4HdUxkLpmEhZzWN35Ng7PinHqnihQ
n3pAAPbswauRfVlPTdi/GOLAZCNdn4FCvbjiUvKxNmNBUSVLGrFXaYcqvj0EiFIy
juljIcOd52rkKEecw8vD5q3QJd43i8LBe2p2u8xc7Vc4nrTSIz2CVkFuY2KyZsme
VXucmY1vfOUQyMs+iidXF+rZiJ4ud4fi48zbJRMTiGBddVdcquJly1tfqriPKOhZ
uKn0/PGrp7/49f5lhiY5f/MCeuaiZPaLhMjNAb01D2ZxIgB4trWgMDJHtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZxH0nO2tGdFjhxZJv6Tf7c4L7vMB8GA1UdIwQY
MBaAFOVbZkySs+chDCsO1FPGTqf16Hb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVZ0bVRKS3o1eUVNS3c3VVU4Wk9wX1hvZHZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85ZDQxNGUtMDAwOS00Yzc2LWFhYTgt
MGNmNGNiMTM2ZTE2LzEvNVZ0bVRKS3o1eUVNS3c3VVU4Wk9wX1hvZHZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy85ZDQxNGUtMDAwOS00Yzc2LWFhYTgtMGNmNGNiMTM2ZTE2
LzEvNVZ0bVRKS3o1eUVNS3c3VVU4Wk9wX1hvZHZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARM5lvxtz
N8egen3CzrlsvjPcCyLYrbyqOz5z+roo79CAycSNSc6CUVDLBzmwDR8DwWYoROt4
TF2VFVZRZaIUiWpDwy7Bl5MbUiLxpSbv123o2Om3/fbqYiAEuVgurQl189aL/pfa
aRpVM972BlFMzGEbUFLqcs6Kjk9f6/2CUZOpJGeWD/IHl6ij2KRfZk/9mPWcKNOF
15Aww/LSqz7hX45dJMpSSpIjnhjkkdYAzz7visQAZvuGf8WD2U9uiX3ewmtSlhWd
wacl/knWJecxSq1M4g639Yb20okNenDG3cxSHuVn/5QSMKCmch7DkSephr5EZmoP
vjqu7VkJN0Cp2A==
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:59:34 2025 by rpki-client