Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
File: 0cSRMJSiEmjHOmdlOjc41z5cWac.mft (raw, json)
Hash identifier: z10r2nYvRK7snBvqT+AT3nHN1m1ksvcfXB2griYPzKw=
Subject key identifier: 5F:B8:14:31:9D:96:4A:D8:12:66:5D:4F:9C:09:FA:F1:00:E1:4F:3C
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial: 0196C15DB42FF03C23C46FEE0285D11AD2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
Manifest number: 140F
Signing time: Sun 11 May 2025 22:01:05 +0000
Manifest this update: Sun 11 May 2025 22:01:05 +0000
Manifest next update: Mon 12 May 2025 22:01:05 +0000
Files and hashes: 1: 0cSRMJSiEmjHOmdlOjc41z5cWac.crl (hash: prAq8kBDVu8SwZaysH85ih+xs9uutFVaiJcw5JuNHyE=)
2: FIvNNxujkeosaQmK-8zL99U8I-8.roa (hash: xdptKNwYHkOXesPFH1LxyuhIbU4UE4ZRfmuf1MyhTcI=)
3: Z5fcF5W7KXTPN2HuxSQd8ZQH4aQ.roa (hash: KQQ09ojl8xnv8sB90M9HtEN2nEY3TEzVcMAwOp9asR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:b4:2f:f0:3c:23:c4:6f:ee:02:85:d1:1a:d2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Validity
Not Before: May 11 22:01:05 2025 GMT
Not After : May 12 22:01:05 2025 GMT
Subject: CN=5fb814319d964ad812665d4f9c09faf100e14f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:34:cd:cd:4f:23:c1:86:1d:6e:a6:f4:ec:2d:
59:e8:a0:70:47:25:99:47:72:f0:2d:e4:69:f9:9f:
35:8c:4f:bc:e7:59:ef:2f:0a:f1:ae:9b:f4:fe:12:
e0:71:c7:8b:e4:90:b4:3c:22:ef:73:cb:95:28:85:
d0:6f:11:f8:4c:2d:86:94:15:eb:58:c4:0e:d7:da:
ce:52:c8:de:c5:43:74:bc:9d:ff:0d:fb:c8:dd:34:
c8:47:b0:72:29:f7:64:1f:44:11:b5:71:5c:7f:93:
dc:cd:6e:b5:3d:6d:95:60:f1:8f:90:29:55:9d:a3:
8e:02:35:7d:5d:09:71:a3:e1:41:81:78:d2:86:b8:
a4:8b:f0:30:9c:9f:53:1d:b5:90:92:9a:38:69:71:
be:69:9e:78:25:1d:ad:61:d1:4b:a6:d6:8a:db:04:
83:d3:8b:85:7a:3e:8a:99:0a:20:65:0d:c7:0a:25:
67:db:03:0e:42:72:70:cc:6b:c4:60:4e:1c:db:b0:
18:e4:06:6c:19:e0:d7:a2:e8:aa:b3:fc:97:82:02:
fb:d0:73:a8:80:35:d6:4f:da:7a:91:ff:57:17:da:
0e:85:97:6f:1d:95:2d:64:71:c4:ff:25:ca:ed:fb:
a9:4d:89:41:29:a2:5a:68:83:d4:41:1d:b5:50:5c:
8f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B8:14:31:9D:96:4A:D8:12:66:5D:4F:9C:09:FA:F1:00:E1:4F:3C
X509v3 Authority Key Identifier:
keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:77:8d:ff:01:65:61:ff:53:6d:c0:46:eb:45:7e:04:12:61:
60:33:f7:f9:6d:6f:a6:a6:2e:e4:88:a2:25:85:d9:73:cc:3e:
3f:62:81:54:31:d4:b9:3d:57:d0:bb:dd:b6:cf:ab:92:14:b4:
be:1e:21:13:3f:dc:a1:c8:c9:81:80:20:f1:c0:ac:f5:ca:5f:
fe:52:8f:fa:36:7f:ed:0f:de:77:37:36:ae:4e:4c:56:6d:ed:
98:b5:0d:94:a1:7c:1e:71:ed:74:88:49:63:12:28:c3:70:9b:
16:37:b0:3b:d2:b6:f7:a9:8a:80:83:a8:33:84:22:db:d7:c5:
f8:72:a9:88:24:ff:5e:32:3f:22:22:f9:f7:48:b3:45:a1:3e:
30:67:60:eb:ab:2a:fc:59:0b:54:b0:cc:7a:f1:cd:f7:23:9a:
05:09:e5:d1:f3:fb:21:df:94:7b:08:1b:60:ca:7e:4e:f0:59:
6b:8d:83:ff:29:e0:e3:8d:0c:cb:38:17:4c:33:58:ca:c9:5b:
d4:7b:b0:a0:4f:86:f2:b3:e3:45:ca:80:3b:d1:42:c5:7f:2f:
ea:7e:2c:6c:52:20:92:cb:96:84:96:db:54:97:65:24:ab:6e:
c2:8b:04:d7:fe:8d:5a:9f:5c:91:06:d0:a8:b9:d7:63:92:fa:
37:0e:56:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBXbQv8DwjxG/uAoXRGtLXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYzQ5MTMwOTRhMjEyNjhjNzNhNjc2NTNhMzczOGQ3M2U1
YzU5YTcwHhcNMjUwNTExMjIwMTA1WhcNMjUwNTEyMjIwMTA1WjAzMTEwLwYDVQQD
Eyg1ZmI4MTQzMTlkOTY0YWQ4MTI2NjVkNGY5YzA5ZmFmMTAwZTE0ZjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjTNzU8jwYYdbqb07C1Z6KBwRyWZ
R3LwLeRp+Z81jE+851nvLwrxrpv0/hLgcceL5JC0PCLvc8uVKIXQbxH4TC2GlBXr
WMQO19rOUsjexUN0vJ3/DfvI3TTIR7ByKfdkH0QRtXFcf5PczW61PW2VYPGPkClV
naOOAjV9XQlxo+FBgXjShriki/AwnJ9THbWQkpo4aXG+aZ54JR2tYdFLptaK2wSD
04uFej6KmQogZQ3HCiVn2wMOQnJwzGvEYE4c27AY5AZsGeDXouiqs/yXggL70HOo
gDXWT9p6kf9XF9oOhZdvHZUtZHHE/yXK7fupTYlBKaJaaIPUQR21UFyPqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+4FDGdlkrYEmZdT5wJ+vEA4U88MB8GA1UdIwQY
MBaAFNHEkTCUohJoxzpnZTo3ONc+XFmnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGNTUk1KU2lFbWpIT21kbE9qYzQxejVjV2FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iZDRlNWMtNDE0Ny00MTMxLTg3NTAt
MzNhODJhYjVmNTEzLzEvMGNTUk1KU2lFbWpIT21kbE9qYzQxejVjV2FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9iZDRlNWMtNDE0Ny00MTMxLTg3NTAtMzNhODJhYjVmNTEz
LzEvMGNTUk1KU2lFbWpIT21kbE9qYzQxejVjV2FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3eN/wFl
Yf9TbcBG60V+BBJhYDP3+W1vpqYu5IiiJYXZc8w+P2KBVDHUuT1X0Lvdts+rkhS0
vh4hEz/cocjJgYAg8cCs9cpf/lKP+jZ/7Q/edzc2rk5MVm3tmLUNlKF8HnHtdIhJ
YxIow3CbFjewO9K296mKgIOoM4Qi29fF+HKpiCT/XjI/IiL590izRaE+MGdg66sq
/FkLVLDMevHN9yOaBQnl0fP7Id+UewgbYMp+TvBZa42D/yng440MyzgXTDNYyslb
1HuwoE+G8rPjRcqAO9FCxX8v6n4sbFIgksuWhJbbVJdlJKtuwosE1/6NWp9ckQbQ
qLnXY5L6Nw5Wvw==
-----END CERTIFICATE-----
Generated at Mon May 12 01:32:33 2025 by rpki-client