Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
File: 5UTiZtTrnMfe0pLBKwaxynvOp3g.mft (raw, json)
Hash identifier: uigqZ52Flec8HW4q538e0WIO1qWC3tSj0PRWNas9zko=
Subject key identifier: 2A:40:F6:52:23:BD:F1:6A:C2:66:2A:FC:3D:60:51:6B:FA:B2:E7:F4
Authority key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
Certificate issuer: /CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Certificate serial: 01969E9A33B2AD4AF2DDAA773F708237CB42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 04:00:27 +0000
Manifest this update: Mon 05 May 2025 04:00:27 +0000
Manifest next update: Tue 06 May 2025 04:00:27 +0000
Files and hashes: 1: 5UTiZtTrnMfe0pLBKwaxynvOp3g.crl (hash: PIntjqsX1HWJvuGUbmfYyAG9B4/SbH+dfHGBavutHBk=)
2: LeXJLi-TLu5NLRkSo2hJnEK9QDQ.roa (hash: 1KfkyTUePDTOuHMENqew1KmyeJrolI/GoAGN74JhXHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:33:b2:ad:4a:f2:dd:aa:77:3f:70:82:37:cb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Validity
Not Before: May 5 04:00:27 2025 GMT
Not After : May 6 04:00:27 2025 GMT
Subject: CN=2a40f65223bdf16ac2662afc3d60516bfab2e7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:e7:7f:ae:3a:01:a5:ef:18:12:dc:9d:fa:
c1:21:5c:7c:4b:46:e8:b4:21:7e:f8:cf:3a:28:29:
ea:b1:7f:65:43:ba:a8:3f:be:3f:8f:1a:f6:4d:28:
89:4b:84:c0:2e:ac:04:ba:ed:5b:56:f1:34:48:7b:
e1:70:13:a4:7b:38:fd:7a:cb:ac:e5:20:7f:09:17:
16:2a:88:e3:96:9f:0f:30:e4:d2:87:04:9b:22:c2:
3f:2a:ab:a9:b8:bc:85:be:47:29:b5:d9:51:53:21:
a9:66:1b:42:0a:37:5c:cb:30:96:5b:0f:cf:c0:d1:
77:ef:8e:a6:45:21:c9:52:c8:1c:a0:83:f2:35:9b:
72:b2:07:47:e9:84:46:0f:53:2a:77:5e:35:2f:75:
ff:70:c1:9c:10:1f:20:1b:d3:7b:f9:02:4c:7b:e7:
14:98:4c:48:69:c5:95:c4:84:bb:62:19:36:42:de:
dd:53:9b:79:1b:e0:b7:bb:e2:88:cc:ce:33:83:cb:
4c:ba:81:6f:e1:4a:1b:50:3b:99:3f:22:da:d4:84:
cb:2c:c0:b1:a9:7a:7e:5d:ca:a2:11:0e:92:84:ac:
d0:bb:15:d0:b0:48:12:4a:c5:78:32:bd:15:d0:e0:
d0:08:9a:79:93:5b:67:59:a7:ee:47:98:e1:9c:99:
a2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:40:F6:52:23:BD:F1:6A:C2:66:2A:FC:3D:60:51:6B:FA:B2:E7:F4
X509v3 Authority Key Identifier:
keyid:E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2e:2a:ba:b9:ce:5d:ce:c5:96:13:f5:34:2e:ee:8a:ef:21:
02:fb:7a:82:a0:9a:ee:91:f1:5c:ce:c0:e6:33:28:20:78:ea:
a4:41:69:31:cd:c7:5e:8c:0e:fc:9f:d8:e4:0e:16:f8:38:2c:
c1:99:12:40:6d:88:16:3c:c7:17:43:37:64:af:6f:b4:e7:2b:
cd:cb:d9:b7:15:ef:21:35:20:62:a6:3c:97:ae:88:fd:e0:03:
ca:c7:b6:ff:ed:ce:8b:25:39:bb:80:10:bb:28:c9:89:54:d3:
07:dc:9c:a4:22:dc:11:3c:0c:65:87:94:f4:dd:81:8a:31:9f:
1d:83:4a:d7:43:3d:99:6e:e3:b1:17:dd:fb:13:58:5f:ec:89:
34:2c:ad:0e:fd:c7:29:f4:3e:3e:00:34:f4:45:bf:f2:1b:55:
74:36:5c:e7:16:e4:68:12:51:86:e2:1e:23:37:c2:26:b4:cb:
56:7d:4b:91:9d:2a:c5:c9:54:93:4d:9b:2b:9f:6d:f4:54:ea:
16:c5:fc:a2:cf:33:f2:c6:e5:cd:26:8e:1a:04:80:a0:9b:56:
4d:e7:52:85:89:6b:98:d2:ac:a4:f5:49:c9:f4:02:91:dc:a9:
bd:fb:ef:cf:8e:33:83:bd:80:6b:8c:45:f8:c5:a9:4a:6b:41:
c5:ae:df:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaemjOyrUry3ap3P3CCN8tCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NDRlMjY2ZDRlYjljYzdkZWQyOTJjMTJiMDZiMWNhN2Jj
ZWE3NzgwHhcNMjUwNTA1MDQwMDI3WhcNMjUwNTA2MDQwMDI3WjAzMTEwLwYDVQQD
EygyYTQwZjY1MjIzYmRmMTZhYzI2NjJhZmMzZDYwNTE2YmZhYjJlN2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1vnf646AaXvGBLcnfrBIVx8S0bo
tCF++M86KCnqsX9lQ7qoP74/jxr2TSiJS4TALqwEuu1bVvE0SHvhcBOkezj9esus
5SB/CRcWKojjlp8PMOTShwSbIsI/KqupuLyFvkcptdlRUyGpZhtCCjdcyzCWWw/P
wNF3746mRSHJUsgcoIPyNZtysgdH6YRGD1Mqd141L3X/cMGcEB8gG9N7+QJMe+cU
mExIacWVxIS7Yhk2Qt7dU5t5G+C3u+KIzM4zg8tMuoFv4UobUDuZPyLa1ITLLMCx
qXp+XcqiEQ6ShKzQuxXQsEgSSsV4Mr0V0ODQCJp5k1tnWafuR5jhnJmiaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpA9lIjvfFqwmYq/D1gUWv6suf0MB8GA1UdIwQY
MBaAFOVE4mbU65zH3tKSwSsGscp7zqd4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVVUaVp0VHJuTWZlMHBMQkt3YXh5bnZPcDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iZmY3OTktOWUzMi00M2JlLTg1Y2Qt
ODI0NzYwNzE0ZGZiLzEvNVVUaVp0VHJuTWZlMHBMQkt3YXh5bnZPcDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9iZmY3OTktOWUzMi00M2JlLTg1Y2QtODI0NzYwNzE0ZGZi
LzEvNVVUaVp0VHJuTWZlMHBMQkt3YXh5bnZPcDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGS4qurnO
Xc7FlhP1NC7uiu8hAvt6gqCa7pHxXM7A5jMoIHjqpEFpMc3HXowO/J/Y5A4W+Dgs
wZkSQG2IFjzHF0M3ZK9vtOcrzcvZtxXvITUgYqY8l66I/eADyse2/+3OiyU5u4AQ
uyjJiVTTB9ycpCLcETwMZYeU9N2BijGfHYNK10M9mW7jsRfd+xNYX+yJNCytDv3H
KfQ+PgA09EW/8htVdDZc5xbkaBJRhuIeIzfCJrTLVn1LkZ0qxclUk02bK59t9FTq
FsX8os8z8sblzSaOGgSAoJtWTedShYlrmNKspPVJyfQCkdypvfvvz44zg72Aa4xF
+MWpSmtBxa7fSA==
-----END CERTIFICATE-----
Generated at Mon May 5 10:02:20 2025 by rpki-client