Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
File: P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft (raw, json)
Hash identifier: 1fgCF/LgOFKTDPn3225vAkDoDj3AT+JQhIiJcI2LrkQ=
Subject key identifier: 37:5C:34:A8:F6:26:DC:5A:59:43:32:F0:7B:71:95:27:F1:A9:BC:81
Authority key identifier: 3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
Certificate issuer: /CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Certificate serial: 019682101DE51459ABB9AE74EE921E91ABD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 15:00:16 +0000
Manifest this update: Tue 29 Apr 2025 15:00:16 +0000
Manifest next update: Wed 30 Apr 2025 15:00:16 +0000
Files and hashes: 1: P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl (hash: ukIb18bPVqBvylAgg99f+nGTogTQ17hBOxgHE7gTaxs=)
2: T32ivR4pPT16GdJvEk3qcae9a-0.roa (hash: Ar4IuLNK/JbYrWnO/0jZmTGQAGYJO2SXqHxbBEnLR+A=)
3: uXJUN0yqzJ3TaQzP9cjAtVVx7hs.roa (hash: suoYCzad2UWOr/Nnpp8SMjjTemdQYZDDmDi97rBzGqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:1d:e5:14:59:ab:b9:ae:74:ee:92:1e:91:ab:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Validity
Not Before: Apr 29 15:00:16 2025 GMT
Not After : Apr 30 15:00:16 2025 GMT
Subject: CN=375c34a8f626dc5a594332f07b719527f1a9bc81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:96:6f:f1:36:6c:be:4e:9a:3f:25:b8:e1:52:
73:ac:90:0a:c5:c9:3f:a9:68:18:4a:0b:dc:f1:54:
63:ef:8c:3f:a2:7a:25:c6:a9:8c:9a:79:4a:fe:e1:
40:75:87:b8:5c:33:e0:af:30:ba:77:88:f9:7e:d1:
bb:fa:97:b9:9f:38:c6:9d:30:a2:ff:81:81:92:69:
f0:93:de:3b:fa:ac:21:fd:02:b4:d0:6f:9d:8b:44:
d2:2f:4e:7f:c5:63:6b:67:d8:e3:f2:35:f2:ff:c7:
19:ea:ad:62:a1:06:9d:6d:fb:11:7c:34:fc:79:ec:
42:e6:4d:a1:78:0a:89:61:39:3e:1b:48:77:40:05:
cc:89:fc:85:37:62:87:58:f5:7f:56:f3:50:d0:e4:
4d:15:2d:bc:79:7a:1a:9f:a6:f6:1f:6a:a5:d5:21:
18:90:1a:1a:ab:98:a7:05:2e:51:91:17:e2:74:79:
99:58:a1:94:96:17:12:77:8a:3e:68:e4:81:29:99:
ab:6f:20:0b:27:14:15:cd:93:be:5c:c6:cd:fb:0a:
00:27:1d:64:1a:ec:66:20:48:59:7a:cc:57:55:09:
be:57:0a:d6:69:f4:fd:4f:2b:90:d2:c0:4c:b0:89:
6e:39:0c:34:14:9f:e5:b0:96:00:0b:3e:1f:2f:e0:
80:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5C:34:A8:F6:26:DC:5A:59:43:32:F0:7B:71:95:27:F1:A9:BC:81
X509v3 Authority Key Identifier:
keyid:3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f6:8f:b7:2d:06:e5:80:36:80:93:2b:47:a0:2d:4a:0f:0e:
2c:a0:ab:d7:c3:6a:49:d1:69:86:bd:bf:be:c0:2d:63:51:79:
d9:8c:d2:68:b9:f6:38:da:b5:0a:49:ed:57:41:87:2e:db:a5:
06:2e:09:f1:06:b1:99:88:ad:05:b0:89:c3:d6:25:5a:9d:29:
29:e4:ad:c2:93:e9:0e:d9:58:9e:60:de:91:93:4b:a6:2f:d3:
5b:4a:94:a1:a6:8b:10:fd:b2:69:e4:55:5a:3b:52:8e:e0:52:
00:cd:5b:1b:c2:35:96:80:17:b6:ba:fb:5d:19:0c:97:93:ef:
0c:dc:be:f2:25:12:c6:95:5d:99:2f:b2:76:1a:82:13:b3:bd:
80:22:81:d4:cd:40:05:ba:47:6a:fc:2b:2c:ff:31:f7:43:e4:
18:1c:43:68:9e:8e:e9:8d:0d:4a:39:01:40:a1:13:7b:8d:e0:
9a:e6:b6:83:57:f7:47:fb:d0:db:81:72:34:39:f5:d6:bc:a6:
8c:2c:5b:f8:cc:3e:b8:47:7a:ae:5f:7b:16:21:df:55:c0:e5:
d7:cc:77:ed:d3:2f:84:a5:ea:af:83:91:a7:ea:e3:15:7a:20:
0b:2d:ca:1c:10:b2:fa:b6:07:d8:12:7e:81:00:ec:ec:4e:c5:
eb:a9:09:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCEB3lFFmrua507pIekavRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOTQ3YzRmZDIzOTZkOWVkYjhiYzQ1NDQwNWU1NzU1OGQ4
Yjk1MDIwHhcNMjUwNDI5MTUwMDE2WhcNMjUwNDMwMTUwMDE2WjAzMTEwLwYDVQQD
EygzNzVjMzRhOGY2MjZkYzVhNTk0MzMyZjA3YjcxOTUyN2YxYTliYzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZZv8TZsvk6aPyW44VJzrJAKxck/
qWgYSgvc8VRj74w/onolxqmMmnlK/uFAdYe4XDPgrzC6d4j5ftG7+pe5nzjGnTCi
/4GBkmnwk947+qwh/QK00G+di0TSL05/xWNrZ9jj8jXy/8cZ6q1ioQadbfsRfDT8
eexC5k2heAqJYTk+G0h3QAXMifyFN2KHWPV/VvNQ0ORNFS28eXoan6b2H2ql1SEY
kBoaq5inBS5RkRfidHmZWKGUlhcSd4o+aOSBKZmrbyALJxQVzZO+XMbN+woAJx1k
GuxmIEhZesxXVQm+VwrWafT9TyuQ0sBMsIluOQw0FJ/lsJYACz4fL+CAzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdcNKj2JtxaWUMy8HtxlSfxqbyBMB8GA1UdIwQY
MBaAFD+UfE/SOW2e24vEVEBeV1WNi5UCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDVSOFQ5STViWjdiaThSVVFGNVhWWTJMbFFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kOWI0NTAtNzI5ZC00OGRlLWFiOGYt
Y2VjNDBlNDI1MjY0LzEvUDVSOFQ5STViWjdiaThSVVFGNVhWWTJMbFFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9kOWI0NTAtNzI5ZC00OGRlLWFiOGYtY2VjNDBlNDI1MjY0
LzEvUDVSOFQ5STViWjdiaThSVVFGNVhWWTJMbFFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/aPty0G
5YA2gJMrR6AtSg8OLKCr18NqSdFphr2/vsAtY1F52YzSaLn2ONq1CkntV0GHLtul
Bi4J8QaxmYitBbCJw9YlWp0pKeStwpPpDtlYnmDekZNLpi/TW0qUoaaLEP2yaeRV
WjtSjuBSAM1bG8I1loAXtrr7XRkMl5PvDNy+8iUSxpVdmS+ydhqCE7O9gCKB1M1A
BbpHavwrLP8x90PkGBxDaJ6O6Y0NSjkBQKETe43gmua2g1f3R/vQ24FyNDn11rym
jCxb+Mw+uEd6rl97FiHfVcDl18x37dMvhKXqr4ORp+rjFXogCy3KHBCy+rYH2BJ+
gQDs7E7F66kJzw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:02:17 2025 by rpki-client