Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
File: 5PFY7_xrOIKiWQweaQasoQjhjsI.mft (raw, json)
Hash identifier: t/aY6e2ZofksILLpg1448nvR1dc3cKn8vMAbsZk3rdU=
Subject key identifier: FB:D4:F4:7C:D9:85:B0:13:11:B1:ED:C4:79:31:D6:40:70:CA:7D:D3
Authority key identifier: E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
Certificate issuer: /CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Certificate serial: 019688498DCA764A2C5F0F9B72630AC87BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
Manifest number: 0B1F
Signing time: Wed 30 Apr 2025 20:00:43 +0000
Manifest this update: Wed 30 Apr 2025 20:00:43 +0000
Manifest next update: Thu 01 May 2025 20:00:43 +0000
Files and hashes: 1: 5JIFCgXWGmsw1HA5JtADF-b1eJ4.roa (hash: kqtxwSPKoLsi1ph5t4VnO3iKewevISmebmIE1RpFWLg=)
2: 5PFY7_xrOIKiWQweaQasoQjhjsI.crl (hash: i+/CnF5XQULSAaRrgG76FdKN01hSvvkAhtlN+yghqTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:8d:ca:76:4a:2c:5f:0f:9b:72:63:0a:c8:7b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Validity
Not Before: Apr 30 20:00:43 2025 GMT
Not After : May 1 20:00:43 2025 GMT
Subject: CN=fbd4f47cd985b01311b1edc47931d64070ca7dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:13:15:9f:45:c3:91:9f:95:64:f2:31:d9:4d:
f6:3a:ee:42:61:e8:38:69:f3:ac:7d:0b:f1:e7:f8:
87:64:e3:81:10:ab:9a:f0:74:fe:69:6a:df:d6:f7:
f3:3c:3e:01:32:d4:20:ad:34:b1:87:80:0a:82:c8:
0e:ca:25:33:6b:e4:4e:41:9e:8f:45:8e:b6:e3:56:
1f:70:f4:3c:38:40:7f:4a:bc:e2:f6:f4:6a:eb:40:
fd:14:8f:02:96:b5:b7:93:7c:4b:9d:fb:e2:4d:fb:
f3:8a:d8:d3:de:18:dc:89:b9:24:d9:7e:0e:01:c8:
e5:bb:8b:a7:23:29:c2:3c:cd:90:04:b6:db:03:34:
a5:f4:a6:77:f1:ea:48:0c:34:92:99:4e:76:56:da:
77:87:de:c7:9d:16:eb:7b:9a:dd:ea:b4:d6:2e:19:
19:37:6a:4a:d0:4c:a5:86:14:7a:dd:1f:38:1a:9a:
88:a0:e8:a5:b3:da:90:ba:80:70:0a:6a:9b:d9:71:
70:0b:8f:ba:fa:51:89:6d:6b:a8:5f:36:be:3f:ae:
0b:05:df:e5:8c:29:8c:01:fa:12:4d:0a:68:b5:e1:
d9:c8:1d:86:a9:e3:b6:43:b1:55:6b:c1:ed:eb:78:
e8:ce:77:a9:f8:56:20:92:10:fa:20:81:c9:7c:30:
09:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D4:F4:7C:D9:85:B0:13:11:B1:ED:C4:79:31:D6:40:70:CA:7D:D3
X509v3 Authority Key Identifier:
keyid:E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:76:30:41:24:58:9d:d2:70:57:f6:7c:ea:2c:9c:d2:31:1f:
e1:df:1b:69:69:fc:b1:72:d2:ab:d6:2a:95:5d:1a:3c:79:c8:
b3:15:be:67:a5:a5:b1:b3:4d:f4:e1:fc:03:31:a6:72:7d:4f:
ac:c2:b4:cb:fd:cc:bf:db:9e:fc:9e:04:8e:94:99:06:7b:ef:
4d:6e:92:80:e7:a3:c3:f7:ae:97:2d:4e:c2:25:76:30:a9:d3:
eb:7f:32:bf:74:f2:34:28:19:93:e4:0a:a0:c9:3e:5a:21:db:
01:e3:79:b7:0f:6d:77:21:18:ae:c7:ae:b6:b1:6f:87:ec:5f:
8b:e8:10:3c:5b:5e:79:ea:fc:ad:9b:7b:87:e9:46:ea:62:b8:
f9:29:0b:a7:f7:cd:7b:7e:3a:68:2f:c5:bd:f7:4b:cd:a6:32:
5b:fa:53:5b:7b:91:5c:91:b8:56:cf:26:d1:fd:dc:30:21:fe:
e4:17:19:ff:38:d0:4b:3c:be:e9:e6:e5:91:75:29:78:90:64:
76:70:de:c8:87:06:02:c7:0c:20:1a:49:48:f0:ec:63:a4:cc:
b8:8d:fe:4d:01:1b:a9:5e:ad:97:0e:d3:20:08:8f:cf:8f:1b:
79:99:7f:f5:98:14:3e:ca:1c:93:ec:d2:46:b2:02:67:4a:27:
8a:33:5b:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaISY3KdkosXw+bcmMKyHu4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZjE1OGVmZmM2YjM4ODJhMjU5MGMxZTY5MDZhY2ExMDhl
MThlYzIwHhcNMjUwNDMwMjAwMDQzWhcNMjUwNTAxMjAwMDQzWjAzMTEwLwYDVQQD
EyhmYmQ0ZjQ3Y2Q5ODViMDEzMTFiMWVkYzQ3OTMxZDY0MDcwY2E3ZGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBMVn0XDkZ+VZPIx2U32Ou5CYeg4
afOsfQvx5/iHZOOBEKua8HT+aWrf1vfzPD4BMtQgrTSxh4AKgsgOyiUza+ROQZ6P
RY6241YfcPQ8OEB/Srzi9vRq60D9FI8ClrW3k3xLnfviTfvzitjT3hjcibkk2X4O
Acjlu4unIynCPM2QBLbbAzSl9KZ38epIDDSSmU52Vtp3h97HnRbre5rd6rTWLhkZ
N2pK0EylhhR63R84GpqIoOils9qQuoBwCmqb2XFwC4+6+lGJbWuoXza+P64LBd/l
jCmMAfoSTQpoteHZyB2GqeO2Q7FVa8Ht63joznep+FYgkhD6IIHJfDAJpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvU9HzZhbATEbHtxHkx1kBwyn3TMB8GA1UdIwQY
MBaAFOTxWO/8aziColkMHmkGrKEI4Y7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVBGWTdfeHJPSUtpV1F3ZWFRYXNvUWpoanNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84M2MwMGUtZjQxNC00ODlkLTk0NzAt
YzY5MzI0OTY1MWQ1LzEvNVBGWTdfeHJPSUtpV1F3ZWFRYXNvUWpoanNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi84M2MwMGUtZjQxNC00ODlkLTk0NzAtYzY5MzI0OTY1MWQ1
LzEvNVBGWTdfeHJPSUtpV1F3ZWFRYXNvUWpoanNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHYwQSRY
ndJwV/Z86iyc0jEf4d8baWn8sXLSq9YqlV0aPHnIsxW+Z6WlsbNN9OH8AzGmcn1P
rMK0y/3Mv9ue/J4EjpSZBnvvTW6SgOejw/euly1OwiV2MKnT638yv3TyNCgZk+QK
oMk+WiHbAeN5tw9tdyEYrseutrFvh+xfi+gQPFteeer8rZt7h+lG6mK4+SkLp/fN
e346aC/FvfdLzaYyW/pTW3uRXJG4Vs8m0f3cMCH+5BcZ/zjQSzy+6eblkXUpeJBk
dnDeyIcGAscMIBpJSPDsY6TMuI3+TQEbqV6tlw7TIAiPz48beZl/9ZgUPsock+zS
RrICZ0onijNbcA==
-----END CERTIFICATE-----
Generated at Thu May 1 01:37:27 2025 by rpki-client