Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
File: 5q1QzkYdtcs3pYPnKbcVSZjssRc.mft (raw, json)
Hash identifier: QDmX7BOSnICJlGTKqelEVAozGmjspPLpZbh+dPFrlC0=
Subject key identifier: BF:17:0A:39:E9:36:06:9D:BD:50:73:4E:C0:7C:75:F1:D4:AA:DD:76
Authority key identifier: E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17
Certificate issuer: /CN=e6ad50ce461db5cb37a583e729b7154998ecb117
Certificate serial: 0196895CF5FC37974EED7C4B5F7AB7D81FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
Manifest number: 02CD
Signing time: Thu 01 May 2025 01:01:32 +0000
Manifest this update: Thu 01 May 2025 01:01:32 +0000
Manifest next update: Fri 02 May 2025 01:01:32 +0000
Files and hashes: 1: 5q1QzkYdtcs3pYPnKbcVSZjssRc.crl (hash: AWkXd+eCjLdOhVhL3hCk8JOqyNUgtaBQPzpL6nl1rmE=)
2: IGFfOsfuRBLRoDQXZrvrXPV6GDg.roa (hash: GBdaIeCW55nvw4wNP3jzu/1bBBTCqNE/C3I0UV/65Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5c:f5:fc:37:97:4e:ed:7c:4b:5f:7a:b7:d8:1f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ad50ce461db5cb37a583e729b7154998ecb117
Validity
Not Before: May 1 01:01:32 2025 GMT
Not After : May 2 01:01:32 2025 GMT
Subject: CN=bf170a39e936069dbd50734ec07c75f1d4aadd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b8:57:11:60:d1:7e:b1:3b:f2:5c:cf:69:8f:
26:50:17:cd:92:79:ab:f0:66:4a:1c:92:ce:23:b1:
55:30:3f:b3:c3:05:7e:2b:50:9e:00:61:25:82:0d:
1d:ac:9a:42:ae:48:c2:4b:99:fc:c8:6b:57:35:91:
10:55:84:c9:e2:30:92:4a:46:e5:88:da:f4:45:55:
e3:cc:60:cb:c3:8f:87:b0:30:c1:17:01:55:d7:c3:
08:38:b3:00:05:b9:ed:73:70:f4:f1:38:20:37:2b:
f4:36:db:6c:69:79:b0:33:d2:03:87:2d:4e:19:83:
05:64:29:8a:0d:9e:6b:03:6f:5c:63:b6:02:f0:33:
d8:c0:2c:2a:78:7b:49:3c:26:1b:ca:8c:cd:46:2d:
3e:c1:e8:b2:3e:b8:c3:2b:ac:6d:a1:ee:9e:95:e5:
11:03:e9:96:49:d3:1c:ad:c2:da:df:5b:db:27:4c:
34:c9:d0:12:3e:aa:43:1b:fe:b9:d2:f1:8a:d5:15:
ac:f9:95:a1:a0:57:b0:07:db:1a:54:b5:a0:73:9d:
81:41:b8:4a:7b:00:0e:12:b0:d6:bc:a1:72:60:96:
98:3b:3b:cf:e6:ba:d1:5a:7c:5c:d7:0a:0a:3c:9d:
4f:f8:62:54:06:7d:47:07:30:67:85:40:7a:16:10:
34:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:17:0A:39:E9:36:06:9D:BD:50:73:4E:C0:7C:75:F1:D4:AA:DD:76
X509v3 Authority Key Identifier:
keyid:E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:61:33:0d:0d:72:8e:55:1d:b7:9f:66:1f:e8:d8:83:af:46:
40:2e:f9:20:90:c3:e6:2e:8a:2f:78:44:15:e7:d9:bc:be:50:
bd:93:95:2a:3e:84:e5:f0:7e:40:fc:86:7d:60:ca:a0:3c:90:
4b:40:9b:f2:6c:eb:66:46:57:5c:ef:8f:19:c2:ad:cf:d2:ff:
36:b2:8f:d0:51:4e:bd:e6:29:fc:ae:da:e4:1a:69:7e:26:f6:
1a:4a:ed:19:59:f6:fc:33:ae:56:41:69:7a:c1:4b:fc:03:48:
d3:5f:3e:81:73:6d:70:01:ec:f5:b2:42:e9:cb:5a:79:0d:94:
bc:d6:2a:b8:a2:2b:bb:1f:67:62:6a:ee:40:75:47:e5:be:67:
12:e7:23:03:32:0b:28:36:38:39:38:c0:70:b5:69:b3:df:59:
9e:2e:85:ff:62:04:41:cd:5c:ce:41:d6:d1:a0:b4:4b:4d:af:
d9:92:8c:2f:1d:d7:e7:a3:cb:2e:26:d0:ab:be:f8:4f:8c:89:
ca:b0:a4:79:65:be:38:e9:15:b6:66:9e:2e:2c:71:18:6d:99:
c7:58:c0:c0:63:93:5d:ef:03:22:3e:f1:b7:86:65:f3:5d:3a:
7c:50:e9:32:22:3a:02:b6:3e:ca:51:4d:07:3f:0c:f5:57:b1:
fe:28:8f:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaJXPX8N5dO7XxLX3q32B/EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YWQ1MGNlNDYxZGI1Y2IzN2E1ODNlNzI5YjcxNTQ5OThl
Y2IxMTcwHhcNMjUwNTAxMDEwMTMyWhcNMjUwNTAyMDEwMTMyWjAzMTEwLwYDVQQD
EyhiZjE3MGEzOWU5MzYwNjlkYmQ1MDczNGVjMDdjNzVmMWQ0YWFkZDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7hXEWDRfrE78lzPaY8mUBfNknmr
8GZKHJLOI7FVMD+zwwV+K1CeAGElgg0drJpCrkjCS5n8yGtXNZEQVYTJ4jCSSkbl
iNr0RVXjzGDLw4+HsDDBFwFV18MIOLMABbntc3D08TggNyv0NttsaXmwM9IDhy1O
GYMFZCmKDZ5rA29cY7YC8DPYwCwqeHtJPCYbyozNRi0+weiyPrjDK6xtoe6eleUR
A+mWSdMcrcLa31vbJ0w0ydASPqpDG/650vGK1RWs+ZWhoFewB9saVLWgc52BQbhK
ewAOErDWvKFyYJaYOzvP5rrRWnxc1woKPJ1P+GJUBn1HBzBnhUB6FhA0twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8XCjnpNgadvVBzTsB8dfHUqt12MB8GA1UdIwQY
MBaAFOatUM5GHbXLN6WD5ym3FUmY7LEXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXExUXprWWR0Y3MzcFlQbktiY1ZTWmpzc1JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lYTE3MjUtZGNkNS00OTkwLTk0NDgt
MGViM2JhNTEzNzRjLzEvNXExUXprWWR0Y3MzcFlQbktiY1ZTWmpzc1JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9lYTE3MjUtZGNkNS00OTkwLTk0NDgtMGViM2JhNTEzNzRj
LzEvNXExUXprWWR0Y3MzcFlQbktiY1ZTWmpzc1JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmEzDQ1y
jlUdt59mH+jYg69GQC75IJDD5i6KL3hEFefZvL5QvZOVKj6E5fB+QPyGfWDKoDyQ
S0Cb8mzrZkZXXO+PGcKtz9L/NrKP0FFOveYp/K7a5Bppfib2GkrtGVn2/DOuVkFp
esFL/ANI018+gXNtcAHs9bJC6ctaeQ2UvNYquKIrux9nYmruQHVH5b5nEucjAzIL
KDY4OTjAcLVps99Zni6F/2IEQc1czkHW0aC0S02v2ZKMLx3X56PLLibQq774T4yJ
yrCkeWW+OOkVtmaeLixxGG2Zx1jAwGOTXe8DIj7xt4Zl8106fFDpMiI6ArY+ylFN
Bz8M9Vex/iiPZw==
-----END CERTIFICATE-----
Generated at Thu May 1 07:20:16 2025 by rpki-client