Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft
File: 5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft (raw, json)
Hash identifier: uQbwlal0tEe8wey4hv/nomyXdO/E5QFKWx3BE5irHp8=
Subject key identifier: 7C:FA:B4:0D:57:9D:99:4A:D6:89:24:A9:50:60:9A:11:73:73:07:24
Authority key identifier: E5:C0:4C:01:9B:C6:93:65:04:28:55:85:51:FA:CD:22:20:80:12:6D
Certificate issuer: /CN=e5c04c019bc693650428558551facd222080126d
Certificate serial: 019674C2A680B659A83B3A5AC653D399F496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cBMAZvGk2UEKFWFUfrNIiCAEm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft
Manifest number: 01B8
Signing time: Sun 27 Apr 2025 01:00:35 +0000
Manifest this update: Sun 27 Apr 2025 01:00:35 +0000
Manifest next update: Mon 28 Apr 2025 01:00:35 +0000
Files and hashes: 1: 5cBMAZvGk2UEKFWFUfrNIiCAEm0.crl (hash: Ji5aDjudcqm6BOOcHS5bCw0d2Lw8NzDYHuNB/GS8pEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cBMAZvGk2UEKFWFUfrNIiCAEm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:a6:80:b6:59:a8:3b:3a:5a:c6:53:d3:99:f4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c04c019bc693650428558551facd222080126d
Validity
Not Before: Apr 27 01:00:35 2025 GMT
Not After : Apr 28 01:00:35 2025 GMT
Subject: CN=7cfab40d579d994ad68924a950609a1173730724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:15:9c:5e:a6:9a:52:32:82:a5:54:95:59:
57:8e:6f:cb:b0:71:d6:7b:0f:c8:5f:1d:45:4f:d2:
c6:7b:93:91:de:97:8f:2f:e3:e6:f2:61:9a:1b:b5:
d6:93:43:a6:9d:15:47:49:19:f6:59:23:0c:dc:d5:
c3:3f:8b:a3:77:89:62:1f:10:11:1f:6a:de:f4:0b:
17:8c:21:33:bc:a3:06:91:f6:9f:8e:5e:7d:7e:30:
3b:9d:af:97:55:f9:4a:48:cd:eb:64:c1:ce:4d:30:
b7:86:00:96:3d:b0:81:d4:2f:db:80:1c:95:5b:95:
0e:e8:3b:94:8f:9a:c0:19:f5:a1:6b:bb:2a:e0:52:
2b:27:19:54:92:85:ba:37:ba:e5:42:f1:7d:e3:e0:
29:93:76:e0:8e:38:5a:77:d4:4a:ac:36:3f:07:63:
9c:ef:54:1c:db:6b:6c:1c:3c:69:96:61:8f:58:62:
3f:61:75:0e:1b:dd:f2:f7:c1:42:c7:6b:a8:f3:c0:
4e:ac:03:2e:78:2a:32:1a:a7:5f:dd:55:59:9d:4c:
73:79:e9:f4:64:8f:1e:3b:87:48:68:4b:1a:7c:a8:
db:a3:bb:fc:3d:33:0d:c2:2c:2f:d1:8e:79:0e:6d:
e7:3d:d8:27:b7:65:08:18:55:01:0d:0d:86:9f:38:
1d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FA:B4:0D:57:9D:99:4A:D6:89:24:A9:50:60:9A:11:73:73:07:24
X509v3 Authority Key Identifier:
keyid:E5:C0:4C:01:9B:C6:93:65:04:28:55:85:51:FA:CD:22:20:80:12:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cBMAZvGk2UEKFWFUfrNIiCAEm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b2:34:a2:a4:60:ab:76:35:62:10:eb:0b:2a:55:a4:fb:ab:
ca:61:9f:37:03:07:56:37:67:fa:28:2c:6f:e7:92:55:58:fd:
5d:ce:dc:d0:3b:02:ee:45:37:27:be:9f:4b:77:4e:cd:2d:97:
29:04:8e:3f:35:53:dd:c3:6a:39:4e:ca:c0:79:53:6d:5f:ef:
ba:12:ae:3e:a4:45:1a:12:7e:c3:27:71:cf:a2:ed:73:7a:12:
78:3f:49:fa:ed:cd:f7:29:be:3d:bc:b7:2b:01:02:de:0a:bc:
9a:a9:05:91:9d:68:a1:b0:8d:c4:f7:db:2a:df:00:b6:0f:68:
33:85:fa:c3:23:23:92:42:5a:be:db:80:67:fa:20:1a:e8:4c:
5d:03:60:48:cc:5c:44:7e:ea:8a:87:72:0f:57:ae:c7:08:7f:
6e:c5:89:44:78:05:73:9b:27:7e:78:c7:58:d9:85:d2:ff:72:
72:e5:75:34:74:8b:cd:a3:60:f5:d4:8b:ac:cb:4c:b1:c5:02:
ab:2e:5f:3f:51:10:5c:5d:ed:01:d1:d5:ed:7f:4d:8b:da:fc:
12:4d:84:83:43:ad:e6:1d:a1:07:fc:db:10:3f:0e:54:ab:ac:
7c:17:13:c7:8f:52:e3:b9:45:5d:64:0b:69:76:61:75:dd:b5:
1f:57:2f:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0wqaAtlmoOzpaxlPTmfSWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YzA0YzAxOWJjNjkzNjUwNDI4NTU4NTUxZmFjZDIyMjA4
MDEyNmQwHhcNMjUwNDI3MDEwMDM1WhcNMjUwNDI4MDEwMDM1WjAzMTEwLwYDVQQD
Eyg3Y2ZhYjQwZDU3OWQ5OTRhZDY4OTI0YTk1MDYwOWExMTczNzMwNzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZAVnF6mmlIygqVUlVlXjm/LsHHW
ew/IXx1FT9LGe5OR3pePL+Pm8mGaG7XWk0OmnRVHSRn2WSMM3NXDP4ujd4liHxAR
H2re9AsXjCEzvKMGkfafjl59fjA7na+XVflKSM3rZMHOTTC3hgCWPbCB1C/bgByV
W5UO6DuUj5rAGfWha7sq4FIrJxlUkoW6N7rlQvF94+Apk3bgjjhad9RKrDY/B2Oc
71Qc22tsHDxplmGPWGI/YXUOG93y98FCx2uo88BOrAMueCoyGqdf3VVZnUxzeen0
ZI8eO4dIaEsafKjbo7v8PTMNwiwv0Y55Dm3nPdgnt2UIGFUBDQ2Gnzgd/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHz6tA1XnZlK1okkqVBgmhFzcwckMB8GA1UdIwQY
MBaAFOXATAGbxpNlBChVhVH6zSIggBJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWNCTUFadkdrMlVFS0ZXRlVmck5JaUNBRW0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS81Y2ZiMGYtZWM4ZC00MTQ2LTk5MWUt
NzYwOTM3NTBlZWMxLzEvNWNCTUFadkdrMlVFS0ZXRlVmck5JaUNBRW0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS81Y2ZiMGYtZWM4ZC00MTQ2LTk5MWUtNzYwOTM3NTBlZWMx
LzEvNWNCTUFadkdrMlVFS0ZXRlVmck5JaUNBRW0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibI0oqRg
q3Y1YhDrCypVpPurymGfNwMHVjdn+igsb+eSVVj9Xc7c0DsC7kU3J76fS3dOzS2X
KQSOPzVT3cNqOU7KwHlTbV/vuhKuPqRFGhJ+wydxz6Ltc3oSeD9J+u3N9ym+Pby3
KwEC3gq8mqkFkZ1oobCNxPfbKt8Atg9oM4X6wyMjkkJavtuAZ/ogGuhMXQNgSMxc
RH7qiodyD1euxwh/bsWJRHgFc5snfnjHWNmF0v9ycuV1NHSLzaNg9dSLrMtMscUC
qy5fP1EQXF3tAdHV7X9Ni9r8Ek2Eg0Ot5h2hB/zbED8OVKusfBcTx49S47lFXWQL
aXZhdd21H1cvGg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:29:07 2025 by rpki-client