Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
File: 5Neqo9JcL5677HTIMMwM3pMYyPg.mft (raw, json)
Hash identifier: kZWj1SRQGquj36urQ4K58TANZw7hI1KqbVBzAJpGqMA=
Subject key identifier: 06:4B:01:C2:00:D0:AB:52:8E:5B:34:70:44:21:6E:F5:C9:51:2D:0F
Authority key identifier: E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
Certificate issuer: /CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Certificate serial: 0196B8FEE05747894A8BF9562F365D3A110A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
Manifest number: 045E
Signing time: Sat 10 May 2025 07:00:33 +0000
Manifest this update: Sat 10 May 2025 07:00:33 +0000
Manifest next update: Sun 11 May 2025 07:00:33 +0000
Files and hashes: 1: 5Neqo9JcL5677HTIMMwM3pMYyPg.crl (hash: XiQ4Yo16KHZa0E1BsHXR4BhNP9i7hCaYA0z/HHbuzGI=)
2: wSUmQHvgicp0DUrp54U8e4B9bSs.roa (hash: 6yxPMXDSw6KRHugvWVrYp4LQxI6BlFDftXD+dNw90ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:e0:57:47:89:4a:8b:f9:56:2f:36:5d:3a:11:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Validity
Not Before: May 10 07:00:33 2025 GMT
Not After : May 11 07:00:33 2025 GMT
Subject: CN=064b01c200d0ab528e5b347044216ef5c9512d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:4b:be:6b:3a:14:f3:ac:fa:1e:cf:07:2f:
f2:1c:31:bb:ca:1c:21:75:7d:23:42:f6:38:cb:18:
4a:01:7f:c8:01:2c:98:76:63:6e:2d:f5:60:d7:8e:
3a:b0:f1:4e:3d:56:8e:79:6b:9d:2f:5b:48:97:78:
cf:90:f4:7c:85:ad:f5:60:2f:bf:82:88:3b:1b:b8:
2f:f3:5f:9b:9f:1e:e4:d7:f7:a6:5c:62:b4:de:04:
92:53:74:fc:13:40:1e:7b:f9:79:32:42:c0:20:31:
33:ad:8a:1a:b3:95:ed:8f:a7:06:5c:e2:63:40:11:
44:cd:0c:48:3b:1c:ad:06:19:4c:1f:ff:d8:b7:77:
a1:28:e8:a4:a6:84:b8:47:67:01:10:df:48:6e:d0:
40:4f:f9:85:73:59:e6:37:f6:21:b6:a7:e9:1f:8a:
db:59:7c:44:0a:17:96:6c:ff:90:bd:e3:8d:61:0e:
82:58:14:f0:6f:02:3d:39:c2:34:ff:92:ba:1e:fc:
3c:a3:6b:36:aa:f8:e6:a8:30:53:e5:e4:bf:d3:84:
98:d0:30:69:6b:14:9a:a9:98:c4:e1:8e:bb:38:85:
8e:aa:c9:f4:af:ee:54:00:f0:82:bf:7a:e5:c6:37:
a4:87:1a:f0:14:f8:f3:58:21:c9:76:66:76:62:47:
e7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4B:01:C2:00:D0:AB:52:8E:5B:34:70:44:21:6E:F5:C9:51:2D:0F
X509v3 Authority Key Identifier:
keyid:E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:73:af:97:e9:28:73:db:65:7c:fe:cf:bc:56:e1:9b:f1:5c:
8d:4f:56:d9:8b:52:80:ab:bb:d4:5a:9e:fb:40:ec:ea:df:68:
13:1e:a8:d4:f9:b6:30:de:d7:b3:39:a6:e2:1a:a7:37:36:f5:
34:00:b0:e4:fe:bc:ff:da:7d:55:a0:89:cf:6e:1e:ae:5f:53:
9e:7b:cf:45:61:da:62:7d:17:19:2b:cd:a9:96:77:6d:87:f5:
19:b1:cc:b5:42:d6:60:c8:c1:48:29:0e:ed:c9:15:ce:22:c2:
8f:22:de:0d:48:07:a9:a9:62:87:ff:4d:4b:53:17:72:b6:84:
05:cc:39:78:c4:00:dc:52:fd:d5:99:91:22:f7:39:f6:3c:08:
08:1a:54:21:85:bd:94:5a:ad:3b:c7:b4:e1:a9:15:ae:9f:3f:
c8:3d:f9:2d:37:68:36:51:5b:64:84:04:47:24:3f:3c:8d:82:
87:e5:47:f1:d8:a2:a8:ee:d6:12:30:84:55:38:61:4e:09:3f:
45:64:b7:43:5b:15:59:15:47:24:12:9f:05:01:32:ef:f8:c4:
00:8a:70:14:02:76:e8:e7:d6:3a:97:f1:78:c5:c0:b4:d6:85:
8b:71:8b:cd:84:42:5d:8c:dd:8e:7d:da:5f:05:a8:6a:48:37:
5f:34:a9:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4/uBXR4lKi/lWLzZdOhEKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZDdhYWEzZDI1YzJmOWViYmVjNzRjODMwY2MwY2RlOTMx
OGM4ZjgwHhcNMjUwNTEwMDcwMDMzWhcNMjUwNTExMDcwMDMzWjAzMTEwLwYDVQQD
EygwNjRiMDFjMjAwZDBhYjUyOGU1YjM0NzA0NDIxNmVmNWM5NTEyZDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx11Lvms6FPOs+h7PBy/yHDG7yhwh
dX0jQvY4yxhKAX/IASyYdmNuLfVg1446sPFOPVaOeWudL1tIl3jPkPR8ha31YC+/
gog7G7gv81+bnx7k1/emXGK03gSSU3T8E0Aee/l5MkLAIDEzrYoas5Xtj6cGXOJj
QBFEzQxIOxytBhlMH//Yt3ehKOikpoS4R2cBEN9IbtBAT/mFc1nmN/YhtqfpH4rb
WXxECheWbP+QveONYQ6CWBTwbwI9OcI0/5K6Hvw8o2s2qvjmqDBT5eS/04SY0DBp
axSaqZjE4Y67OIWOqsn0r+5UAPCCv3rlxjekhxrwFPjzWCHJdmZ2YkfnxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZLAcIA0KtSjls0cEQhbvXJUS0PMB8GA1UdIwQY
MBaAFOTXqqPSXC+eu+x0yDDMDN6TGMj4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5lcW85SmNMNTY3N0hUSU1Nd00zcE1ZeVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84YjQxNDctZTZlMC00ZDgwLWE5M2Yt
ZWY2M2I4MTZkZDM1LzEvNU5lcW85SmNMNTY3N0hUSU1Nd00zcE1ZeVBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84YjQxNDctZTZlMC00ZDgwLWE5M2YtZWY2M2I4MTZkZDM1
LzEvNU5lcW85SmNMNTY3N0hUSU1Nd00zcE1ZeVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXOvl+ko
c9tlfP7PvFbhm/FcjU9W2YtSgKu71Fqe+0Ds6t9oEx6o1Pm2MN7Xszmm4hqnNzb1
NACw5P68/9p9VaCJz24erl9TnnvPRWHaYn0XGSvNqZZ3bYf1GbHMtULWYMjBSCkO
7ckVziLCjyLeDUgHqalih/9NS1MXcraEBcw5eMQA3FL91ZmRIvc59jwICBpUIYW9
lFqtO8e04akVrp8/yD35LTdoNlFbZIQERyQ/PI2Ch+VH8diiqO7WEjCEVThhTgk/
RWS3Q1sVWRVHJBKfBQEy7/jEAIpwFAJ26OfWOpfxeMXAtNaFi3GLzYRCXYzdjn3a
XwWoakg3XzSpKg==
-----END CERTIFICATE-----
Generated at Sat May 10 09:54:10 2025 by rpki-client