Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
File: An5YWPpUP-P_R02NdquXAeoBCws.mft (raw, json)
Hash identifier: PgGTmnOSQUfuVcmxX5gZXH5Ebyz6rKnPoCn/M6nUMqs=
Subject key identifier: 5A:E5:23:50:2B:4B:23:EE:FC:D5:00:89:9A:0F:57:05:8B:74:C0:79
Authority key identifier: 02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
Certificate issuer: /CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Certificate serial: 01967FB43076319871A9249C3BDC0FC9C862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
Manifest number: 02D5
Signing time: Tue 29 Apr 2025 04:00:37 +0000
Manifest this update: Tue 29 Apr 2025 04:00:37 +0000
Manifest next update: Wed 30 Apr 2025 04:00:37 +0000
Files and hashes: 1: An5YWPpUP-P_R02NdquXAeoBCws.crl (hash: wY80YH+5JNqo0L1bRqJbCmTc0YbKXO9rrf9x/xMSr0c=)
2: M5q-y_pSOaw-LnhCtgtI_cxU90s.roa (hash: EkxFUEnDMMrgIyFYsLlI4yCORNtS7fa6ZKub0vDM94A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:30:76:31:98:71:a9:24:9c:3b:dc:0f:c9:c8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Validity
Not Before: Apr 29 04:00:37 2025 GMT
Not After : Apr 30 04:00:37 2025 GMT
Subject: CN=5ae523502b4b23eefcd500899a0f57058b74c079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a6:83:75:a9:76:22:f5:7d:46:0e:32:83:b1:
e4:46:0e:d3:97:ab:54:a8:58:ec:41:c3:ff:e2:69:
fe:0a:e7:0f:3e:85:56:38:f5:82:6f:16:f8:29:68:
53:1a:2d:90:a3:71:7d:63:e2:b8:11:5b:7e:f7:d7:
0f:fc:2a:f6:d9:29:b7:e8:a3:4b:2b:6c:42:b0:38:
41:27:9c:5c:b9:72:6f:5b:23:f7:19:26:0e:37:0b:
9a:9e:27:3d:b2:a1:dc:8c:72:7b:4b:b7:e2:60:1d:
a0:16:31:14:d5:3b:59:e9:33:b1:5e:38:3d:a8:60:
ba:30:89:05:1a:80:69:08:aa:ce:c1:05:68:10:88:
0e:f3:47:ba:44:dc:96:14:29:ff:a5:d7:d5:ab:39:
91:97:7b:2b:e7:ea:a0:9c:46:25:74:1d:2e:0a:ee:
da:bf:ee:4e:45:e6:9c:aa:f3:a5:20:1e:eb:2b:06:
ff:51:90:9c:18:52:70:5f:b0:ca:70:cd:42:a8:22:
8b:76:57:98:8d:86:55:4e:dd:6b:52:17:4b:09:71:
84:28:54:65:7e:b1:c8:f8:0d:05:77:42:93:92:ca:
1a:35:23:8f:f0:eb:56:58:ad:dd:f2:ae:a3:b7:ac:
1c:4b:23:1f:7e:3c:3c:0d:78:53:4b:4b:c5:4f:16:
96:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E5:23:50:2B:4B:23:EE:FC:D5:00:89:9A:0F:57:05:8B:74:C0:79
X509v3 Authority Key Identifier:
keyid:02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:31:0a:d9:6d:38:57:27:82:48:a5:45:e8:56:82:65:ae:cb:
c6:d2:14:7e:a2:57:e0:45:36:f6:da:96:c4:4f:5d:a7:58:4b:
0e:74:6a:dc:0e:34:52:8b:b5:fe:a0:51:61:9a:26:f7:28:3a:
bb:2e:a0:0e:a5:4c:91:ff:bd:c7:c1:03:a2:0a:29:cf:87:b6:
9d:e2:95:f1:ab:5a:35:ee:13:6d:89:a7:5f:b1:41:0a:99:a9:
4b:a2:be:63:29:db:e0:a9:e6:d0:8d:c6:b4:87:9d:a6:0d:ff:
44:c4:aa:9c:68:2f:91:eb:07:c7:d6:fc:52:8c:27:3a:6c:0b:
a1:11:7a:53:e5:06:5b:ca:62:5c:31:14:a0:54:89:b5:8e:15:
5b:f7:3e:0a:e9:d4:25:a9:13:b7:05:06:9f:db:11:4a:c0:20:
94:c8:ac:80:65:a5:27:1d:54:16:d0:9c:02:0f:f6:ec:c1:4d:
9b:27:aa:58:5b:b5:cd:6f:19:42:c4:5d:a3:74:4c:6c:c3:ab:
3e:e6:8d:14:d8:85:ed:49:64:38:95:ad:a4:fc:c7:26:0c:8f:
6f:d8:03:84:3c:1b:d3:2a:17:fa:51:29:47:c1:c6:6a:e8:b8:
ef:81:ea:ec:8a:0a:02:3e:cd:6d:12:5c:4f:4f:3f:56:4e:72:
ee:f1:93:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/tDB2MZhxqSScO9wPychiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyN2U1ODU4ZmE1NDNmZTNmZjQ3NGQ4ZDc2YWI5NzAxZWEw
MTBiMGIwHhcNMjUwNDI5MDQwMDM3WhcNMjUwNDMwMDQwMDM3WjAzMTEwLwYDVQQD
Eyg1YWU1MjM1MDJiNGIyM2VlZmNkNTAwODk5YTBmNTcwNThiNzRjMDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKaDdal2IvV9Rg4yg7HkRg7Tl6tU
qFjsQcP/4mn+CucPPoVWOPWCbxb4KWhTGi2Qo3F9Y+K4EVt+99cP/Cr22Sm36KNL
K2xCsDhBJ5xcuXJvWyP3GSYONwuanic9sqHcjHJ7S7fiYB2gFjEU1TtZ6TOxXjg9
qGC6MIkFGoBpCKrOwQVoEIgO80e6RNyWFCn/pdfVqzmRl3sr5+qgnEYldB0uCu7a
v+5OReacqvOlIB7rKwb/UZCcGFJwX7DKcM1CqCKLdleYjYZVTt1rUhdLCXGEKFRl
frHI+A0Fd0KTksoaNSOP8OtWWK3d8q6jt6wcSyMffjw8DXhTS0vFTxaWMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrlI1ArSyPu/NUAiZoPVwWLdMB5MB8GA1UdIwQY
MBaAFAJ+WFj6VD/j/0dNjXarlwHqAQsLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW41WVdQcFVQLVBfUjAyTmRxdVhBZW9CQ3dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82N2JiYzUtNjRhZS00MWQ1LTkzZDMt
M2IyODk0ZjBlNjljLzEvQW41WVdQcFVQLVBfUjAyTmRxdVhBZW9CQ3dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82N2JiYzUtNjRhZS00MWQ1LTkzZDMtM2IyODk0ZjBlNjlj
LzEvQW41WVdQcFVQLVBfUjAyTmRxdVhBZW9CQ3dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjEK2W04
VyeCSKVF6FaCZa7LxtIUfqJX4EU29tqWxE9dp1hLDnRq3A40Uou1/qBRYZom9yg6
uy6gDqVMkf+9x8EDogopz4e2neKV8ataNe4TbYmnX7FBCpmpS6K+Yynb4Knm0I3G
tIedpg3/RMSqnGgvkesHx9b8UownOmwLoRF6U+UGW8piXDEUoFSJtY4VW/c+CunU
JakTtwUGn9sRSsAglMisgGWlJx1UFtCcAg/27MFNmyeqWFu1zW8ZQsRdo3RMbMOr
PuaNFNiF7UlkOJWtpPzHJgyPb9gDhDwb0yoX+lEpR8HGaui474Hq7IoKAj7NbRJc
T08/Vk5y7vGTEg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:43:59 2025 by rpki-client