Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
File: v5joFwlZteYBj2ArOnSHstgCgQY.mft (raw, json)
Hash identifier: 5qxRU7IyMRkfG1BavMKDRxrVX0tCIcda4O3ZRGCbMkc=
Subject key identifier: 8B:37:1C:45:87:A2:BE:1F:B8:7F:47:3C:7A:AB:08:61:41:C0:3B:2A
Authority key identifier: BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
Certificate issuer: /CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Certificate serial: 01967A1FCF5C358D469100DDCEAADFEE2BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 02:00:27 +0000
Manifest this update: Mon 28 Apr 2025 02:00:27 +0000
Manifest next update: Tue 29 Apr 2025 02:00:27 +0000
Files and hashes: 1: WxyFMVLPaoedm2KunMSjCPtRmII.roa (hash: Ungr4kPsfNHZcdD5CyaeCkdVZRH3x9Cj4Xb6OMIiqY0=)
2: ekd0T-pWjR2fdJhmt79rFrJVVFk.roa (hash: SlYmHx07GpRwdPchZU3v+4uB8eJO2LbmRdoWgdkR9QQ=)
3: v5joFwlZteYBj2ArOnSHstgCgQY.crl (hash: w0IJxGQUUajH9jCFj+e/FkKcT8RfO+YZcKEhZAqXvxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:cf:5c:35:8d:46:91:00:dd:ce:aa:df:ee:2b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Validity
Not Before: Apr 28 02:00:27 2025 GMT
Not After : Apr 29 02:00:27 2025 GMT
Subject: CN=8b371c4587a2be1fb87f473c7aab086141c03b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:89:91:2f:e8:d5:af:c4:c6:d8:0b:13:85:76:
7a:9c:97:bc:5b:a5:01:19:96:d1:50:33:1e:50:53:
50:4e:76:5f:95:1a:6e:23:75:6f:8c:52:6b:bf:88:
ba:ff:50:88:93:c6:fa:e0:31:82:a8:69:d7:d6:1b:
92:d7:63:54:8c:6b:49:fc:6c:2c:45:34:7b:a9:b2:
0f:16:1d:dc:87:d4:3e:21:dd:2a:f6:f7:30:30:ea:
b9:b0:15:93:7b:fe:e4:8b:93:8b:99:6d:a9:cc:7c:
e6:f6:76:ee:b1:e1:54:10:48:a0:54:c2:0b:d9:71:
f8:85:fa:1d:80:9a:9a:67:ac:6b:08:71:52:a5:ae:
1f:9f:07:d7:f4:24:c8:ea:7a:5d:c3:a5:2a:2f:8a:
49:9b:de:d5:21:82:b1:0e:d6:d6:de:37:d1:ad:cd:
48:be:d5:aa:18:84:94:7d:17:a7:1e:62:1d:a4:8e:
c2:50:bf:b9:dc:b4:c8:72:61:f9:1b:37:6c:ab:b9:
41:41:e5:50:55:c4:4f:29:cc:72:1d:c3:0a:7a:a7:
79:8f:c1:e9:1f:b9:a1:f5:29:df:51:16:3b:82:ee:
b4:fa:6a:4b:e4:26:b8:0d:10:4a:d3:ac:b5:7c:07:
d6:e3:13:15:05:ad:dd:ba:83:11:92:f5:2d:25:51:
0b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:37:1C:45:87:A2:BE:1F:B8:7F:47:3C:7A:AB:08:61:41:C0:3B:2A
X509v3 Authority Key Identifier:
keyid:BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:27:75:e5:65:a6:e4:1c:02:73:c4:ad:e6:3b:e2:a1:c8:eb:
3d:cd:59:a7:b0:51:0e:36:ab:92:b7:15:27:70:0d:05:63:c1:
96:d7:16:f5:14:54:1a:12:15:33:86:e2:2d:fa:5d:13:fa:6d:
2d:37:09:49:3b:19:aa:b3:26:36:2d:7a:f6:9b:3b:15:f0:4c:
f0:7c:c0:bd:1d:ce:3e:85:5a:3a:1d:87:c7:5a:42:9e:73:16:
a1:21:d1:d0:ca:0b:34:46:1f:1a:e4:91:74:2c:70:e4:be:85:
7c:3c:69:78:f0:a7:64:95:6d:9d:76:4f:95:e7:d1:ba:d2:c4:
a8:41:3b:72:d6:c3:26:82:a1:f5:f7:04:43:74:65:78:41:01:
1b:57:d9:9a:06:6d:b9:c1:5a:70:55:72:dd:57:dd:08:9b:68:
c3:aa:01:47:10:3c:0c:da:17:1e:af:9f:b1:ea:02:54:91:e3:
d1:92:93:7d:c4:ff:5f:69:26:72:5d:b5:8d:e8:2b:4f:88:0e:
66:94:87:1f:92:65:96:f6:f9:25:6f:92:d2:79:34:79:11:f9:
6d:e4:68:ba:4e:fd:5a:a5:a9:54:59:00:f4:1d:15:19:3b:83:
f4:8f:65:80:85:11:52:34:25:c6:dc:49:2a:08:b9:4c:bc:b2:
91:b6:8a:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6H89cNY1GkQDdzqrf7ivRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmOThlODE3MDk1OWI1ZTYwMThmNjAyYjNhNzQ4N2IyZDgw
MjgxMDYwHhcNMjUwNDI4MDIwMDI3WhcNMjUwNDI5MDIwMDI3WjAzMTEwLwYDVQQD
Eyg4YjM3MWM0NTg3YTJiZTFmYjg3ZjQ3M2M3YWFiMDg2MTQxYzAzYjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtomRL+jVr8TG2AsThXZ6nJe8W6UB
GZbRUDMeUFNQTnZflRpuI3VvjFJrv4i6/1CIk8b64DGCqGnX1huS12NUjGtJ/Gws
RTR7qbIPFh3ch9Q+Id0q9vcwMOq5sBWTe/7ki5OLmW2pzHzm9nbuseFUEEigVMIL
2XH4hfodgJqaZ6xrCHFSpa4fnwfX9CTI6npdw6UqL4pJm97VIYKxDtbW3jfRrc1I
vtWqGISUfRenHmIdpI7CUL+53LTIcmH5Gzdsq7lBQeVQVcRPKcxyHcMKeqd5j8Hp
H7mh9SnfURY7gu60+mpL5Ca4DRBK06y1fAfW4xMVBa3duoMRkvUtJVELtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIs3HEWHor4fuH9HPHqrCGFBwDsqMB8GA1UdIwQY
MBaAFL+Y6BcJWbXmAY9gKzp0h7LYAoEGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjVqb0Z3bFp0ZVlCajJBck9uU0hzdGdDZ1FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yM2ZiMWEtYTc5MS00MDBjLWE0MWEt
NDhjZWVkNWU0MzhlLzEvdjVqb0Z3bFp0ZVlCajJBck9uU0hzdGdDZ1FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yM2ZiMWEtYTc5MS00MDBjLWE0MWEtNDhjZWVkNWU0Mzhl
LzEvdjVqb0Z3bFp0ZVlCajJBck9uU0hzdGdDZ1FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACCd15WWm
5BwCc8St5jviocjrPc1Zp7BRDjarkrcVJ3ANBWPBltcW9RRUGhIVM4biLfpdE/pt
LTcJSTsZqrMmNi169ps7FfBM8HzAvR3OPoVaOh2Hx1pCnnMWoSHR0MoLNEYfGuSR
dCxw5L6FfDxpePCnZJVtnXZPlefRutLEqEE7ctbDJoKh9fcEQ3RleEEBG1fZmgZt
ucFacFVy3VfdCJtow6oBRxA8DNoXHq+fseoCVJHj0ZKTfcT/X2kmcl21jegrT4gO
ZpSHH5Jllvb5JW+S0nk0eRH5beRouk79WqWpVFkA9B0VGTuD9I9lgIURUjQlxtxJ
Kgi5TLyykbaKfg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:41:10 2025 by rpki-client