Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
File: 5J2_PERGjlJBHUhhhWvwvceQY-Q.mft (raw, json)
Hash identifier: j9FkhX18UZhcwFlmD3AL34XYc3U6bo3bS6Xfo9YqalE=
Subject key identifier: C5:E5:A3:FF:4F:D9:D5:87:5D:CE:65:C6:25:9B:83:9D:46:1D:5F:24
Authority key identifier: E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
Certificate issuer: /CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Certificate serial: 0196B7ECA14B22140FFAC2105E3471A4210C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
Manifest number: 0D04
Signing time: Sat 10 May 2025 02:01:00 +0000
Manifest this update: Sat 10 May 2025 02:01:00 +0000
Manifest next update: Sun 11 May 2025 02:01:00 +0000
Files and hashes: 1: 5J2_PERGjlJBHUhhhWvwvceQY-Q.crl (hash: KdGcqRAzRKnruc7uxVBQRHo2+VnWyWhloy0imslDjH4=)
2: 7JvOqf8jCijk_scq8k44QE4ZcJg.roa (hash: Zr9qOX5zC6nd7EBM4UVaMfXBvFyKtR8sioHct77HMic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:a1:4b:22:14:0f:fa:c2:10:5e:34:71:a4:21:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Validity
Not Before: May 10 02:01:00 2025 GMT
Not After : May 11 02:01:00 2025 GMT
Subject: CN=c5e5a3ff4fd9d5875dce65c6259b839d461d5f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8c:c8:bb:b4:9c:1d:e7:18:5b:13:8a:46:99:
39:cd:71:2c:93:28:98:4e:c3:b0:34:b6:ab:9a:83:
b1:d2:ed:9e:38:43:90:e8:e5:4e:48:30:5f:05:5e:
52:20:7a:47:ec:76:08:15:3e:b1:c3:02:71:08:2f:
4f:dc:75:4f:d5:97:27:a6:e0:a2:11:0f:e3:63:45:
7b:d7:1e:c5:a6:83:23:a7:4a:77:fc:93:ce:9d:31:
22:20:d0:78:7d:33:51:dc:d3:7b:6f:ae:87:d4:cc:
26:1d:ab:c8:fa:73:4d:2e:bd:b3:cd:98:88:7d:e5:
6d:12:60:73:4b:16:00:9d:98:c9:ce:7c:4e:f4:6d:
d6:f3:ce:bd:13:25:3b:f8:63:1a:dd:73:37:db:5b:
34:34:83:70:a6:70:7b:89:76:09:ec:23:18:e9:fb:
45:fc:84:1a:33:b6:50:97:4a:8a:4a:01:a5:29:fb:
64:9a:7e:91:cc:2a:93:af:48:69:e4:cb:08:1d:48:
51:e9:dd:aa:56:88:80:7e:33:9c:3d:d7:d1:4d:81:
e2:6f:f4:3a:80:27:e8:cc:84:53:fb:4d:15:df:9c:
e8:29:92:46:ca:76:12:bf:b3:8f:8a:4d:13:a3:d8:
be:01:af:ee:b7:48:f7:86:88:1a:08:1c:e7:e1:bd:
84:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E5:A3:FF:4F:D9:D5:87:5D:CE:65:C6:25:9B:83:9D:46:1D:5F:24
X509v3 Authority Key Identifier:
keyid:E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:51:6f:ec:8b:21:e8:ae:0c:fe:36:a5:68:82:dd:6f:ec:62:
4a:0b:f2:d1:bd:60:86:c9:1a:78:4c:a0:ba:d8:55:8f:bf:17:
c9:ff:02:38:85:e9:b5:c5:c8:97:94:27:2b:7d:c7:b5:53:cc:
03:22:5c:d1:bd:0a:a3:dd:1b:c2:b9:7f:ec:01:e5:89:c8:98:
e0:b0:01:ef:c3:f5:f3:ea:9b:7d:89:6c:18:9c:5c:7a:0d:e1:
c8:93:bf:9a:7b:5b:fb:98:39:96:fa:c3:d5:85:5d:26:08:bb:
f8:c1:99:d4:37:f5:bb:96:5e:bc:a0:d8:b1:49:ff:c1:0e:be:
42:53:59:15:d9:51:77:45:e4:1a:5b:c9:f0:42:fc:f4:82:b6:
65:c8:49:74:2c:4e:ec:12:a8:04:70:5f:8d:9b:a6:d4:31:70:
74:0c:07:a5:02:34:55:0d:94:d0:58:2e:cd:40:15:89:b2:03:
36:88:d7:42:82:e9:7f:31:4e:a1:fa:74:99:60:f8:73:c3:3b:
5f:ef:88:78:28:8e:3f:a1:7b:72:d7:45:cb:a0:72:78:f6:b5:
6e:17:e9:ba:4b:4d:49:f4:fe:af:02:b6:57:10:c4:b6:55:70:
bd:f0:81:ed:55:ed:b1:08:9b:bd:eb:58:12:49:a0:4b:03:ad:
f6:10:63:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa37KFLIhQP+sIQXjRxpCEMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0OWRiZjNjNDQ0NjhlNTI0MTFkNDg2MTg1NmJmMGJkYzc5
MDYzZTQwHhcNMjUwNTEwMDIwMTAwWhcNMjUwNTExMDIwMTAwWjAzMTEwLwYDVQQD
EyhjNWU1YTNmZjRmZDlkNTg3NWRjZTY1YzYyNTliODM5ZDQ2MWQ1ZjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoozIu7ScHecYWxOKRpk5zXEskyiY
TsOwNLarmoOx0u2eOEOQ6OVOSDBfBV5SIHpH7HYIFT6xwwJxCC9P3HVP1ZcnpuCi
EQ/jY0V71x7FpoMjp0p3/JPOnTEiINB4fTNR3NN7b66H1MwmHavI+nNNLr2zzZiI
feVtEmBzSxYAnZjJznxO9G3W8869EyU7+GMa3XM321s0NINwpnB7iXYJ7CMY6ftF
/IQaM7ZQl0qKSgGlKftkmn6RzCqTr0hp5MsIHUhR6d2qVoiAfjOcPdfRTYHib/Q6
gCfozIRT+00V35zoKZJGynYSv7OPik0To9i+Aa/ut0j3hogaCBzn4b2EGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXlo/9P2dWHXc5lxiWbg51GHV8kMB8GA1UdIwQY
MBaAFOSdvzxERo5SQR1IYYVr8L3HkGPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUoyX1BFUkdqbEpCSFVoaGhXdnd2Y2VRWS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82ZTQ1N2UtMzY2ZC00NDBiLWFmMmMt
NWNhZGJkY2YyMjE1LzEvNUoyX1BFUkdqbEpCSFVoaGhXdnd2Y2VRWS1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS82ZTQ1N2UtMzY2ZC00NDBiLWFmMmMtNWNhZGJkY2YyMjE1
LzEvNUoyX1BFUkdqbEpCSFVoaGhXdnd2Y2VRWS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFFv7Ish
6K4M/jalaILdb+xiSgvy0b1ghskaeEyguthVj78Xyf8COIXptcXIl5QnK33HtVPM
AyJc0b0Ko90bwrl/7AHliciY4LAB78P18+qbfYlsGJxceg3hyJO/mntb+5g5lvrD
1YVdJgi7+MGZ1Df1u5ZevKDYsUn/wQ6+QlNZFdlRd0XkGlvJ8EL89IK2ZchJdCxO
7BKoBHBfjZum1DFwdAwHpQI0VQ2U0FguzUAVibIDNojXQoLpfzFOofp0mWD4c8M7
X++IeCiOP6F7ctdFy6ByePa1bhfpuktNSfT+rwK2VxDEtlVwvfCB7VXtsQibvetY
EkmgSwOt9hBjzg==
-----END CERTIFICATE-----
Generated at Sat May 10 10:21:20 2025 by rpki-client