Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
File: CFr4G5nr9ILzxrU1Hiniii4gs5g.mft (raw, json)
Hash identifier: YhbgpVAXGsw3t28Nn776yWdnbBSuOeof13ZalMHL+Bo=
Subject key identifier: 26:22:8A:FD:42:2C:97:54:DC:F9:27:CF:47:DF:F6:70:35:9E:D4:50
Authority key identifier: 08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
Certificate issuer: /CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Certificate serial: 0196846CE2B1046CE7F704AAA669FE7800DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
Manifest number: 02C5
Signing time: Wed 30 Apr 2025 02:00:50 +0000
Manifest this update: Wed 30 Apr 2025 02:00:50 +0000
Manifest next update: Thu 01 May 2025 02:00:50 +0000
Files and hashes: 1: CFr4G5nr9ILzxrU1Hiniii4gs5g.crl (hash: GKu+eDOUIOBFlo5SYiaRdjNr9xr5UnoiPSgAgvE2J6Y=)
2: UmoMMcgLYQ1NME06W-RaoSwOLvs.roa (hash: DXndsPFPDd7x23rCZc6g3GNT4ZixvQ1GmrG9rBzETuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:e2:b1:04:6c:e7:f7:04:aa:a6:69:fe:78:00:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Validity
Not Before: Apr 30 02:00:50 2025 GMT
Not After : May 1 02:00:50 2025 GMT
Subject: CN=26228afd422c9754dcf927cf47dff670359ed450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:d5:ea:85:44:b9:1e:17:e0:fd:7e:a6:bc:
2b:bd:ce:3c:63:4f:1f:7b:45:0e:5c:69:99:d7:70:
95:84:5a:f3:04:81:e3:88:90:06:99:60:b5:b1:cb:
cd:ca:5f:51:0d:25:4b:1f:68:e2:d4:e3:ba:05:20:
69:2f:5b:09:80:85:97:00:86:52:29:77:34:40:13:
4b:e0:00:f6:d4:c2:d6:a6:4c:fa:eb:0c:2e:8c:32:
3a:cb:60:51:64:fb:82:ff:cd:03:63:64:cf:c8:97:
1b:2b:4e:f2:41:67:b6:96:43:31:61:94:c8:ac:9d:
02:c2:58:fb:f1:a5:41:66:39:5f:0c:36:29:cf:81:
54:f1:71:d6:9f:8c:f1:d2:4d:64:10:23:e2:68:b5:
5b:00:d8:82:f1:8e:db:09:f4:dc:4f:e0:d6:55:2f:
e9:f7:1a:21:3e:d3:cf:6e:d1:1c:b0:73:8f:f7:3c:
4b:2b:32:36:3f:9f:78:ca:1b:00:86:44:17:11:e9:
5b:ce:2f:05:0e:83:4e:0f:26:f4:0a:4e:be:e7:5d:
1b:60:fc:1c:84:ba:dc:3a:f0:b1:d9:89:dd:37:ad:
7e:b5:93:f3:89:1e:61:bb:62:bc:81:a4:53:97:71:
68:d7:62:63:95:54:1d:e1:a2:92:6e:a0:24:d6:8b:
63:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:22:8A:FD:42:2C:97:54:DC:F9:27:CF:47:DF:F6:70:35:9E:D4:50
X509v3 Authority Key Identifier:
keyid:08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:61:f3:57:fd:69:42:c3:ce:c1:94:bb:01:70:75:cb:f2:f2:
bb:84:51:bf:06:fa:3b:59:06:d7:80:92:54:ba:27:79:23:ac:
4b:74:f7:93:fe:6a:57:7a:8c:f4:18:9f:35:d5:7b:1b:41:49:
da:7b:8b:29:e8:1f:2e:c6:3e:e8:5c:1f:44:62:f8:ec:8d:af:
e2:c8:a1:2b:d4:90:ea:0b:6b:36:79:a6:39:65:11:ba:10:fc:
dc:e5:5a:e1:11:e3:d7:62:12:c9:86:96:b2:e1:a0:1e:27:ad:
04:f3:8e:ef:55:be:07:e1:6c:a6:0d:00:96:28:22:c3:3d:dc:
7e:63:8d:2d:5b:a4:1a:a4:02:88:5d:01:6a:f1:53:76:56:4c:
51:3c:ba:89:83:dd:f7:2c:3b:d7:cb:8f:43:df:c4:09:9d:52:
77:0d:2a:d7:40:ea:a0:a2:8f:97:0e:d4:16:14:6c:32:a8:21:
59:4b:72:09:38:74:c0:04:fb:36:7b:4f:22:e4:3f:57:6e:aa:
5d:34:d2:d1:73:8f:95:c3:6e:cb:b6:26:da:f7:4e:90:ee:1b:
84:f5:f8:0c:a9:1a:b8:32:88:d6:aa:5a:3d:2a:d1:67:f3:69:
a7:4c:fe:16:07:34:24:6c:ca:b3:e0:3d:47:de:84:98:32:c8:
62:8d:59:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaEbOKxBGzn9wSqpmn+eADbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NWFmODFiOTllYmY0ODJmM2M2YjUzNTFlMjllMjhhMmUy
MGIzOTgwHhcNMjUwNDMwMDIwMDUwWhcNMjUwNTAxMDIwMDUwWjAzMTEwLwYDVQQD
EygyNjIyOGFmZDQyMmM5NzU0ZGNmOTI3Y2Y0N2RmZjY3MDM1OWVkNDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk3V6oVEuR4X4P1+prwrvc48Y08f
e0UOXGmZ13CVhFrzBIHjiJAGmWC1scvNyl9RDSVLH2ji1OO6BSBpL1sJgIWXAIZS
KXc0QBNL4AD21MLWpkz66wwujDI6y2BRZPuC/80DY2TPyJcbK07yQWe2lkMxYZTI
rJ0Cwlj78aVBZjlfDDYpz4FU8XHWn4zx0k1kECPiaLVbANiC8Y7bCfTcT+DWVS/p
9xohPtPPbtEcsHOP9zxLKzI2P594yhsAhkQXEelbzi8FDoNODyb0Ck6+510bYPwc
hLrcOvCx2YndN61+tZPziR5hu2K8gaRTl3Fo12JjlVQd4aKSbqAk1otjYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYiiv1CLJdU3Pknz0ff9nA1ntRQMB8GA1UdIwQY
MBaAFAha+BuZ6/SC88a1NR4p4oouILOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wODQwZTktNzE5OS00ZTAzLTg0ZmQt
YzI4ZDE0YzdiNzMxLzEvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8wODQwZTktNzE5OS00ZTAzLTg0ZmQtYzI4ZDE0YzdiNzMx
LzEvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmHzV/1p
QsPOwZS7AXB1y/Lyu4RRvwb6O1kG14CSVLoneSOsS3T3k/5qV3qM9BifNdV7G0FJ
2nuLKegfLsY+6FwfRGL47I2v4sihK9SQ6gtrNnmmOWURuhD83OVa4RHj12ISyYaW
suGgHietBPOO71W+B+Fspg0Aligiwz3cfmONLVukGqQCiF0BavFTdlZMUTy6iYPd
9yw718uPQ9/ECZ1Sdw0q10DqoKKPlw7UFhRsMqghWUtyCTh0wAT7NntPIuQ/V26q
XTTS0XOPlcNuy7Ym2vdOkO4bhPX4DKkauDKI1qpaPSrRZ/Npp0z+Fgc0JGzKs+A9
R96EmDLIYo1Z2g==
-----END CERTIFICATE-----
Generated at Wed Apr 30 07:35:46 2025 by rpki-client