Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
File: R5govcbQWedVFZLePuKetBv3vaU.mft (raw, json)
Hash identifier: AuKHgOJrwaDyByBXBBoHkGtfK9oajsuMeg2hP/eokPk=
Subject key identifier: F7:88:9B:EE:D3:97:3F:5A:E8:D6:E8:BE:78:D8:C8:2C:5C:E2:9E:29
Authority key identifier: 47:98:28:BD:C6:D0:59:E7:55:15:92:DE:3E:E2:9E:B4:1B:F7:BD:A5
Certificate issuer: /CN=479828bdc6d059e7551592de3ee29eb41bf7bda5
Certificate serial: 01967643454ABD33620033A178F6D797229A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
Manifest number: 1247
Signing time: Sun 27 Apr 2025 08:00:42 +0000
Manifest this update: Sun 27 Apr 2025 08:00:42 +0000
Manifest next update: Mon 28 Apr 2025 08:00:42 +0000
Files and hashes: 1: 6tr1rrCgjeuxrkgAXDLatxAPpWk.roa (hash: A5u3qVfZdPKR2rtZPYyIhEzH3krbvs2KLzMm8FE26Yo=)
2: R5govcbQWedVFZLePuKetBv3vaU.crl (hash: YkHAQnH5J64SnKuUn2AKSSWLzDQuA0HgqmJpAZsieiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:45:4a:bd:33:62:00:33:a1:78:f6:d7:97:22:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=479828bdc6d059e7551592de3ee29eb41bf7bda5
Validity
Not Before: Apr 27 08:00:42 2025 GMT
Not After : Apr 28 08:00:42 2025 GMT
Subject: CN=f7889beed3973f5ae8d6e8be78d8c82c5ce29e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:02:ff:6a:6d:90:52:5a:73:6b:59:e3:cc:6e:
2e:82:c6:52:38:c7:40:5d:79:0a:f0:fa:ec:18:cf:
0d:48:ae:81:24:65:11:dd:e4:f3:b8:45:95:5a:da:
9f:c0:9b:a3:97:13:41:6c:68:29:5d:42:be:7b:1f:
7f:11:94:7c:a6:3d:ef:af:3d:4c:32:5b:39:e0:d5:
ed:1b:ab:3c:d6:aa:ac:12:08:86:fc:c3:8a:14:e7:
5d:49:80:7b:74:5d:5b:7f:eb:01:0d:71:c6:78:ca:
e5:38:f5:9d:7a:61:ab:6d:38:41:40:47:4f:7d:2c:
3e:9d:f2:6e:48:93:4e:66:65:5a:fe:5d:e7:9b:e7:
9e:17:5a:fd:6d:bf:33:69:59:1e:f1:9f:ac:6f:20:
56:5c:e9:51:2f:6e:b9:b5:7f:53:35:ac:0b:d5:3d:
a0:9f:66:b8:a7:f1:c7:58:10:3b:bf:56:0c:3d:57:
c4:54:b4:7b:f4:36:b9:d1:ad:84:86:02:b7:8b:d1:
d1:da:94:ce:07:a6:0d:9a:2d:cc:cb:46:91:21:e1:
07:2e:5d:30:a0:89:87:68:58:96:bb:b8:2e:05:9e:
a8:7e:2b:02:22:33:d0:14:95:25:8e:16:01:25:5e:
ae:77:a8:95:b2:3b:7d:fc:2d:41:f4:92:3d:b6:8f:
f8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:88:9B:EE:D3:97:3F:5A:E8:D6:E8:BE:78:D8:C8:2C:5C:E2:9E:29
X509v3 Authority Key Identifier:
keyid:47:98:28:BD:C6:D0:59:E7:55:15:92:DE:3E:E2:9E:B4:1B:F7:BD:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:aa:48:10:ac:ba:26:23:31:8d:c0:fe:6f:4b:82:d7:bc:5b:
37:21:09:5c:b0:53:61:a1:72:d7:d5:ed:6c:c9:57:8c:fc:a0:
b3:32:fc:c3:bc:e6:44:c9:bd:38:0c:32:84:e8:f2:4e:ee:ed:
a2:f0:75:82:5c:b1:e1:a2:cd:71:2b:09:06:8b:93:0b:50:ea:
3a:0f:1e:d3:72:4e:4d:fe:41:bf:c9:e7:6b:65:e5:39:71:c4:
0a:2f:4f:e9:44:d0:5e:6a:d9:66:b5:20:73:bb:c0:45:25:ec:
d7:36:ce:a1:45:68:8a:bd:84:76:a0:9d:99:dc:10:9f:79:83:
6e:12:db:f3:a3:29:64:41:b2:44:3e:f8:fd:5f:63:76:10:15:
87:b6:ab:14:9a:46:4d:69:6b:8e:3f:71:5f:00:a2:99:a3:9c:
36:53:91:09:c2:9e:5b:1b:fe:bb:03:b4:db:aa:72:20:bd:c9:
bb:e0:54:41:9a:5c:d9:74:c3:02:58:36:1a:9c:94:87:17:1e:
0a:97:43:2c:fe:57:8d:5c:3b:8b:53:a8:53:e4:88:a7:85:ed:
7f:cb:a2:68:fa:78:d9:4a:71:d6:80:61:d9:c8:34:f6:d2:b7:
e7:be:c9:8e:1d:04:87:5c:7e:f4:e5:cb:09:5e:ba:41:f7:45:
00:e6:3a:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2Q0VKvTNiADOhePbXlyKaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3OTgyOGJkYzZkMDU5ZTc1NTE1OTJkZTNlZTI5ZWI0MWJm
N2JkYTUwHhcNMjUwNDI3MDgwMDQyWhcNMjUwNDI4MDgwMDQyWjAzMTEwLwYDVQQD
EyhmNzg4OWJlZWQzOTczZjVhZThkNmU4YmU3OGQ4YzgyYzVjZTI5ZTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgL/am2QUlpza1njzG4ugsZSOMdA
XXkK8PrsGM8NSK6BJGUR3eTzuEWVWtqfwJujlxNBbGgpXUK+ex9/EZR8pj3vrz1M
Mls54NXtG6s81qqsEgiG/MOKFOddSYB7dF1bf+sBDXHGeMrlOPWdemGrbThBQEdP
fSw+nfJuSJNOZmVa/l3nm+eeF1r9bb8zaVke8Z+sbyBWXOlRL265tX9TNawL1T2g
n2a4p/HHWBA7v1YMPVfEVLR79Da50a2EhgK3i9HR2pTOB6YNmi3My0aRIeEHLl0w
oImHaFiWu7guBZ6ofisCIjPQFJUljhYBJV6ud6iVsjt9/C1B9JI9to/4pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeIm+7Tlz9a6NbovnjYyCxc4p4pMB8GA1UdIwQY
MBaAFEeYKL3G0FnnVRWS3j7inrQb972lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjVnb3ZjYlFXZWRWRlpMZVB1S2V0QnYzdmFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni81NDRiZGEtYTRlZi00MjU0LWJhMTkt
M2MxNGFkMmI4M2Q3LzEvUjVnb3ZjYlFXZWRWRlpMZVB1S2V0QnYzdmFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni81NDRiZGEtYTRlZi00MjU0LWJhMTktM2MxNGFkMmI4M2Q3
LzEvUjVnb3ZjYlFXZWRWRlpMZVB1S2V0QnYzdmFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKapIEKy6
JiMxjcD+b0uC17xbNyEJXLBTYaFy19XtbMlXjPygszL8w7zmRMm9OAwyhOjyTu7t
ovB1glyx4aLNcSsJBouTC1DqOg8e03JOTf5Bv8nna2XlOXHECi9P6UTQXmrZZrUg
c7vARSXs1zbOoUVoir2EdqCdmdwQn3mDbhLb86MpZEGyRD74/V9jdhAVh7arFJpG
TWlrjj9xXwCimaOcNlORCcKeWxv+uwO026pyIL3Ju+BUQZpc2XTDAlg2GpyUhxce
CpdDLP5XjVw7i1OoU+SIp4Xtf8uiaPp42Upx1oBh2cg09tK3577Jjh0Eh1x+9OXL
CV66QfdFAOY6jw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:30:37 2025 by rpki-client