Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
File: 5TmMlveEeBsu3CA8dRxOh5h4X6E.mft (raw, json)
Hash identifier: 8hwjey8fjVkCn8yGMrQ2cf3PK3TYzsWIwi2m4B81GUM=
Subject key identifier: 3E:4F:3D:C4:4A:5C:49:4C:4F:DA:23:4F:CA:B3:63:4C:94:33:9B:DD
Authority key identifier: E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1
Certificate issuer: /CN=e5398c96f784781b2edc203c751c4e8798785fa1
Certificate serial: 01968022071E21841BFA58E5A8D07D783B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
Manifest number: 0135
Signing time: Tue 29 Apr 2025 06:00:35 +0000
Manifest this update: Tue 29 Apr 2025 06:00:35 +0000
Manifest next update: Wed 30 Apr 2025 06:00:35 +0000
Files and hashes: 1: 4lG6f_Qt9ke663aj3CqWxLBjD4Y.roa (hash: Ce0xfqYvAYGmg5KwQIRuXB3GqTBWuYg+7c4t6KVIetg=)
2: 5TmMlveEeBsu3CA8dRxOh5h4X6E.crl (hash: MY4JPq4V7yHvx10xKy0EMqm7ibfhii6Bnv4Sd3Hpm48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:07:1e:21:84:1b:fa:58:e5:a8:d0:7d:78:3b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5398c96f784781b2edc203c751c4e8798785fa1
Validity
Not Before: Apr 29 06:00:35 2025 GMT
Not After : Apr 30 06:00:35 2025 GMT
Subject: CN=3e4f3dc44a5c494c4fda234fcab3634c94339bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b8:ca:78:47:55:1e:7b:41:4a:2d:e7:69:07:
5f:3a:52:de:e5:d5:98:9a:70:87:41:d7:c6:2d:72:
e5:a8:e5:dd:09:ec:82:18:83:d9:f3:85:c5:27:43:
f2:9e:5b:b1:01:0a:e0:58:91:85:39:29:1f:22:07:
f6:2c:1c:df:61:8d:d6:25:98:d0:17:cf:8f:e2:dc:
9b:4e:6b:22:02:53:40:d3:d6:67:4e:d5:85:d2:e2:
77:30:9b:4e:4a:63:20:51:4b:ef:bc:7b:79:bf:3c:
62:b5:19:02:70:14:fd:52:a7:e2:a9:05:1b:5b:70:
51:7a:b9:df:00:d1:db:3c:d6:12:fb:51:13:56:8f:
40:97:8f:ac:53:4e:87:a2:f0:1a:b8:f3:32:2d:72:
ac:74:89:c1:01:f1:e9:f1:35:f0:ce:52:db:a5:8e:
4e:88:8a:13:83:c5:1e:e1:7c:35:9a:15:61:68:b6:
29:aa:5b:d2:3e:ba:fe:3b:04:96:5a:df:2c:da:96:
60:d2:6c:c9:12:b9:7e:be:3f:08:37:85:7e:4a:ea:
b3:2a:d7:d0:45:32:3c:91:89:48:87:f7:14:45:90:
5c:bf:5d:fb:d4:57:7c:04:cf:22:8c:0e:4a:d4:b7:
d2:23:81:c3:ed:81:8d:30:d4:7c:c0:97:d2:8e:02:
c6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4F:3D:C4:4A:5C:49:4C:4F:DA:23:4F:CA:B3:63:4C:94:33:9B:DD
X509v3 Authority Key Identifier:
keyid:E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:af:b0:c0:4f:c5:99:9c:86:7d:a4:f0:06:29:66:f3:73:ff:
ee:07:2f:93:fc:55:e1:79:1d:2d:5e:bf:d4:c9:5a:3e:6c:34:
b5:8d:16:d5:47:7e:77:12:0e:d4:94:91:82:6a:49:9a:57:56:
69:24:53:85:d6:1c:cf:ba:ff:99:fa:00:39:ef:b8:90:0c:8a:
90:99:6c:33:df:6f:21:9d:0e:de:c7:b9:ca:2b:98:c3:b6:6f:
1b:fb:18:a5:60:b4:d8:de:a2:66:6d:0a:c8:f1:4f:e8:21:23:
f6:46:2d:79:77:74:43:1e:0e:3e:e0:25:29:b8:c4:3e:f7:28:
87:3d:47:74:ae:ee:af:25:1e:c7:ba:fb:f4:de:d5:cd:f4:81:
76:94:68:00:13:85:14:b2:22:1c:a3:f7:85:6d:f0:d9:4a:b5:
fe:f9:da:b0:cd:09:18:d8:fd:d2:a6:c1:df:1c:1a:5e:bd:2b:
3c:c0:5a:95:e1:9e:61:a3:5f:6d:0a:57:76:a6:4c:ef:2c:70:
a4:3a:c9:87:a6:67:fa:0f:59:04:dc:99:8b:92:9f:7f:44:87:
f5:38:94:b2:87:71:33:82:c4:b6:dc:90:e4:d9:ac:de:87:36:
e7:c8:11:1d:2c:d2:11:33:d4:31:77:ac:d8:bb:07:9f:fc:ca:
e9:c9:ce:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAIgceIYQb+ljlqNB9eDsGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1Mzk4Yzk2Zjc4NDc4MWIyZWRjMjAzYzc1MWM0ZTg3OTg3
ODVmYTEwHhcNMjUwNDI5MDYwMDM1WhcNMjUwNDMwMDYwMDM1WjAzMTEwLwYDVQQD
EygzZTRmM2RjNDRhNWM0OTRjNGZkYTIzNGZjYWIzNjM0Yzk0MzM5YmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77jKeEdVHntBSi3naQdfOlLe5dWY
mnCHQdfGLXLlqOXdCeyCGIPZ84XFJ0PynluxAQrgWJGFOSkfIgf2LBzfYY3WJZjQ
F8+P4tybTmsiAlNA09ZnTtWF0uJ3MJtOSmMgUUvvvHt5vzxitRkCcBT9UqfiqQUb
W3BRernfANHbPNYS+1ETVo9Al4+sU06HovAauPMyLXKsdInBAfHp8TXwzlLbpY5O
iIoTg8Ue4Xw1mhVhaLYpqlvSPrr+OwSWWt8s2pZg0mzJErl+vj8IN4V+SuqzKtfQ
RTI8kYlIh/cURZBcv1371Fd8BM8ijA5K1LfSI4HD7YGNMNR8wJfSjgLG/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5PPcRKXElMT9ojT8qzY0yUM5vdMB8GA1UdIwQY
MBaAFOU5jJb3hHgbLtwgPHUcToeYeF+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVRtTWx2ZUVlQnN1M0NBOGRSeE9oNWg0WDZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS85ZjU0YjUtYTM5YS00ZTYwLThiMWMt
ZDFlNDYwNTE4NDgzLzEvNVRtTWx2ZUVlQnN1M0NBOGRSeE9oNWg0WDZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS85ZjU0YjUtYTM5YS00ZTYwLThiMWMtZDFlNDYwNTE4NDgz
LzEvNVRtTWx2ZUVlQnN1M0NBOGRSeE9oNWg0WDZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAK+wwE/F
mZyGfaTwBilm83P/7gcvk/xV4XkdLV6/1MlaPmw0tY0W1Ud+dxIO1JSRgmpJmldW
aSRThdYcz7r/mfoAOe+4kAyKkJlsM99vIZ0O3se5yiuYw7ZvG/sYpWC02N6iZm0K
yPFP6CEj9kYteXd0Qx4OPuAlKbjEPvcohz1HdK7uryUex7r79N7VzfSBdpRoABOF
FLIiHKP3hW3w2Uq1/vnasM0JGNj90qbB3xwaXr0rPMBaleGeYaNfbQpXdqZM7yxw
pDrJh6Zn+g9ZBNyZi5Kff0SH9TiUsodxM4LEttyQ5Nms3oc258gRHSzSETPUMXes
2LsHn/zK6cnOFQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:40:51 2025 by rpki-client