Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
File: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft (raw, json)
Hash identifier: CdhCBBm5XhBX9lttUFCMxZDXCX870tnlpfrLBcDLVYM=
Subject key identifier: 72:8D:B0:F8:5E:32:B3:58:26:82:09:C5:77:AA:AD:08:CE:C6:12:AD
Authority key identifier: E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
Certificate issuer: /CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Certificate serial: 0196741EBBC29AF527BB239705EB994E4AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
Manifest number: 150E
Signing time: Sat 26 Apr 2025 22:01:33 +0000
Manifest this update: Sat 26 Apr 2025 22:01:33 +0000
Manifest next update: Sun 27 Apr 2025 22:01:33 +0000
Files and hashes: 1: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl (hash: SQSs+BI3cdtwSCxWzkAA0jATBJUeRf/hfDydLGLBwC4=)
2: JN_wI5WUBHJd5ainOqfE_dFkzKI.roa (hash: Qg99ezuBzQl9b8N0K6IHfY7xyiyA9XJB6h6HAFx4kIY=)
3: ZFu4lqiYHSirnX-2qpigJJIGgUY.roa (hash: CjUjCiBLDugMPp8rVEARJ3kaatRRwCnXYdU38UIlE5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:bb:c2:9a:f5:27:bb:23:97:05:eb:99:4e:4a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Validity
Not Before: Apr 26 22:01:33 2025 GMT
Not After : Apr 27 22:01:33 2025 GMT
Subject: CN=728db0f85e32b358268209c577aaad08cec612ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:32:e3:46:0d:ee:6a:10:81:73:94:5e:ef:
72:c9:b5:cd:03:0a:ca:df:b2:25:95:72:6d:37:9e:
01:1a:ff:4e:6c:72:aa:b3:bc:1f:04:e6:74:83:3d:
2c:d7:05:43:14:bd:83:5d:79:74:7f:91:b2:90:af:
2e:c5:e7:e6:ef:43:1e:88:71:e1:c8:a5:b2:e4:cb:
0f:15:e2:ec:dd:07:5a:d1:a2:b5:08:93:85:cf:6d:
5f:65:0a:c2:24:e7:b5:cc:5c:98:68:3c:cf:7e:78:
88:e4:24:02:a2:19:df:80:74:e9:0e:0e:e0:da:22:
bd:23:7c:d5:40:9e:88:be:63:b1:c7:77:6e:64:80:
ba:23:f0:20:7b:0c:28:fd:cc:08:e8:d1:98:60:a0:
3b:7d:79:10:28:5c:71:63:73:4e:38:73:31:7a:10:
68:e6:d3:d4:13:d1:25:2f:5a:13:98:28:18:f9:d0:
dd:2e:75:11:76:2c:49:2e:78:08:a2:f6:ad:bc:b4:
89:63:bf:54:5c:b5:4f:27:cf:53:31:6e:5c:12:31:
65:31:25:21:60:3a:13:c8:31:1e:1d:94:c3:e8:1d:
c6:d2:69:a9:c9:d5:35:65:e9:99:f2:b7:17:42:f6:
93:d0:03:09:b4:75:b3:a2:c7:ee:d5:d2:fe:11:38:
f5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8D:B0:F8:5E:32:B3:58:26:82:09:C5:77:AA:AD:08:CE:C6:12:AD
X509v3 Authority Key Identifier:
keyid:E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b9:8d:5b:8d:71:84:00:8e:c2:60:9b:75:1c:6b:2d:bc:83:
21:69:0b:9a:db:b6:1a:48:73:9c:90:ef:38:3b:2d:56:2c:86:
ef:71:2b:11:90:3d:4b:4e:7e:f4:8a:25:ec:98:b9:d1:c4:aa:
56:a0:5b:bb:a4:84:17:6e:93:d8:23:7f:5b:5e:dd:4a:11:f4:
c9:c8:a2:f2:d1:75:a1:14:d0:13:3d:f6:af:1e:38:d5:83:4d:
bf:54:5a:28:10:18:f2:af:bb:d7:4d:e1:41:bf:74:47:7c:9e:
31:1e:81:ae:95:56:fc:fc:f4:4a:c3:60:59:29:cf:2b:c5:e1:
b8:54:ac:99:fb:cf:e0:04:64:be:b3:df:fb:4e:d8:20:1e:21:
08:dc:05:be:06:cf:c8:4c:ea:00:10:70:19:da:25:a6:50:65:
e1:d5:1c:1b:73:ee:3e:50:a5:f4:1e:cf:ee:d6:6b:c7:31:33:
90:8d:ab:7b:e8:21:9a:a7:4b:93:03:91:cc:71:00:bd:91:0c:
63:b9:37:d8:a7:54:67:c3:4d:b3:66:a2:85:70:49:e5:68:d5:
b7:a8:19:6b:d1:9b:d5:3b:74:f8:d7:7e:74:ec:df:88:41:91:
62:94:d7:d8:9f:bf:b4:ab:b1:3a:2e:ad:71:3f:f6:6b:23:95:
1e:69:c4:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0HrvCmvUnuyOXBeuZTkrSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3M2NmOTQzM2ViODBmZTkwMjcwODQ1MjlhMjU0MTJkZGZl
NWJkMDEwHhcNMjUwNDI2MjIwMTMzWhcNMjUwNDI3MjIwMTMzWjAzMTEwLwYDVQQD
Eyg3MjhkYjBmODVlMzJiMzU4MjY4MjA5YzU3N2FhYWQwOGNlYzYxMmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDcy40YN7moQgXOUXu9yybXNAwrK
37IllXJtN54BGv9ObHKqs7wfBOZ0gz0s1wVDFL2DXXl0f5GykK8uxefm70MeiHHh
yKWy5MsPFeLs3Qda0aK1CJOFz21fZQrCJOe1zFyYaDzPfniI5CQCohnfgHTpDg7g
2iK9I3zVQJ6IvmOxx3duZIC6I/Agewwo/cwI6NGYYKA7fXkQKFxxY3NOOHMxehBo
5tPUE9ElL1oTmCgY+dDdLnURdixJLngIovatvLSJY79UXLVPJ89TMW5cEjFlMSUh
YDoTyDEeHZTD6B3G0mmpydU1ZemZ8rcXQvaT0AMJtHWzosfu1dL+ETj1CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKNsPheMrNYJoIJxXeqrQjOxhKtMB8GA1UdIwQY
MBaAFOc8+UM+uA/pAnCEUpolQS3f5b0BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXp6NVF6NjRELWtDY0lSU21pVkJMZF9sdlFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni84MTdjMTQtYjgwMC00YzE1LWE4OWUt
NzA0ZjI2MzM4OWUyLzEvNXp6NVF6NjRELWtDY0lSU21pVkJMZF9sdlFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni84MTdjMTQtYjgwMC00YzE1LWE4OWUtNzA0ZjI2MzM4OWUy
LzEvNXp6NVF6NjRELWtDY0lSU21pVkJMZF9sdlFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbmNW41x
hACOwmCbdRxrLbyDIWkLmtu2GkhznJDvODstViyG73ErEZA9S05+9Iol7Ji50cSq
VqBbu6SEF26T2CN/W17dShH0ycii8tF1oRTQEz32rx441YNNv1RaKBAY8q+7103h
Qb90R3yeMR6BrpVW/Pz0SsNgWSnPK8XhuFSsmfvP4ARkvrPf+07YIB4hCNwFvgbP
yEzqABBwGdolplBl4dUcG3PuPlCl9B7P7tZrxzEzkI2re+ghmqdLkwORzHEAvZEM
Y7k32KdUZ8NNs2aihXBJ5WjVt6gZa9Gb1Tt0+Nd+dOzfiEGRYpTX2J+/tKuxOi6t
cT/2ayOVHmnEbw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:50:36 2025 by rpki-client