Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
File: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft (raw, json)
Hash identifier: 52aOjXOgos3y+AD55G/hEvMqzfEfsxjumwG952sjuyw=
Subject key identifier: C5:3F:57:7D:06:BC:3B:4E:46:ED:5C:BE:94:AF:6F:1C:9A:C3:A0:9F
Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
Certificate issuer: /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Certificate serial: 0196B71054920B933E6A6EDEA78808F9682B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
Manifest number: 1011
Signing time: Fri 09 May 2025 22:00:22 +0000
Manifest this update: Fri 09 May 2025 22:00:22 +0000
Manifest next update: Sat 10 May 2025 22:00:22 +0000
Files and hashes: 1: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl (hash: pPSRD+CwUFiJ8K9lfTYUfzve9NBdAw2x2jx+OQ9sTOQ=)
2: 5RNQOoYI7rp8d4nASoBcHUOUpY8.roa (hash: FG1C0t8LdLpHD2f41qfi65AEKFEoAI1fPmg3pwTrSAI=)
3: 9sR2L5tWHl9nYIOa3aPDj2epTyM.roa (hash: DVpf87jmOmV1usbZpIj3EdX+MCp0oX2EtW5xng4U88Q=)
4: eQWgmPYrRyxmbW7jic8MtUc1Zpo.roa (hash: QgtMWXIUrz6jvt1nPBxlt0MfdGFiSY2UtDQz0hujdYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:54:92:0b:93:3e:6a:6e:de:a7:88:08:f9:68:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Validity
Not Before: May 9 22:00:22 2025 GMT
Not After : May 10 22:00:22 2025 GMT
Subject: CN=c53f577d06bc3b4e46ed5cbe94af6f1c9ac3a09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:21:2b:d0:ec:6d:dc:cc:d7:2b:5b:1e:a0:38:
32:7f:85:aa:30:06:9c:11:61:4f:ab:dd:8e:76:5f:
1d:d2:04:21:2e:b5:6d:e5:de:47:92:c8:a9:0c:62:
aa:0b:c2:e6:ed:2b:b3:19:87:42:2b:24:aa:2f:4a:
e6:f3:bf:b0:0a:84:2d:c3:16:0c:70:38:a3:9e:ce:
ff:fb:f7:61:c5:37:e4:8f:c6:98:bc:2b:f6:d6:e9:
c0:08:75:35:95:1b:40:bf:1e:ef:46:48:68:0a:05:
24:33:0d:a7:ef:95:3b:94:7c:d4:7a:b5:17:d3:32:
1a:01:9f:0c:3e:40:e4:e9:ca:04:26:72:41:8b:13:
16:63:04:16:15:38:54:78:b6:57:d3:33:38:f1:c3:
5d:ec:1a:78:09:be:ac:d5:98:b8:76:5b:1e:ae:a5:
61:0b:d8:de:dc:28:91:5a:26:44:fb:4e:6a:fe:a6:
c1:43:40:df:bc:92:41:c6:f9:47:19:11:c3:08:83:
7f:91:cb:0e:ab:bc:1e:c4:cf:f0:16:19:8f:a3:74:
e2:c0:a3:df:2f:ee:d6:3b:0d:0a:c8:54:26:9d:e3:
93:3b:f3:62:90:c9:57:f2:f2:a8:fa:2b:cd:58:ec:
cb:1b:88:a1:bc:8a:7f:cf:38:f8:e3:8c:0b:18:44:
da:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3F:57:7D:06:BC:3B:4E:46:ED:5C:BE:94:AF:6F:1C:9A:C3:A0:9F
X509v3 Authority Key Identifier:
keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fc:fa:ad:2d:a3:a5:ea:57:6b:43:56:cc:52:a9:b9:b1:13:
f1:a6:7f:21:b9:04:28:59:1a:29:d4:9e:c4:42:60:5f:2c:e6:
d6:2d:43:b2:b3:4b:a0:c6:2c:c9:03:b3:bb:2a:ea:be:b3:52:
6e:e0:71:2f:7e:88:96:d4:8a:4c:38:ef:45:cb:e4:13:12:ef:
b5:5f:0c:90:82:de:da:91:01:95:7f:b9:9e:a5:9d:60:38:52:
f7:b2:c6:7c:e3:7d:0b:e5:ff:6d:e0:5b:82:0f:1d:82:81:3f:
95:c1:82:43:91:18:7d:6b:5c:89:71:31:1e:59:51:9b:b9:88:
d2:a1:28:64:ef:58:59:c8:86:cf:00:5a:40:3b:ce:23:0b:9f:
0a:6e:1e:e0:47:16:56:69:ff:57:d5:9e:06:51:b5:fc:69:89:
21:72:e8:25:86:fb:a3:a2:be:d3:91:ea:2a:f6:44:58:31:22:
0e:29:0c:8e:52:1d:05:66:09:ff:bf:dc:36:f4:ce:9c:e9:d5:
ed:2a:84:73:75:8a:10:b6:57:ed:d2:bd:4e:0d:2e:38:fc:7c:
b6:9f:ad:b3:64:f9:5c:33:80:be:f5:bb:3f:38:57:c1:a4:89:
ee:24:47:4c:e6:08:bf:77:5a:6b:7c:cb:d3:5b:83:4b:ac:8e:
52:6c:90:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3EFSSC5M+am7ep4gI+WgrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTcxNGZmYzU5OGIxNTY0N2JiYWZlMmM2NDYwYTg3ZWFm
YmNmOTcwHhcNMjUwNTA5MjIwMDIyWhcNMjUwNTEwMjIwMDIyWjAzMTEwLwYDVQQD
EyhjNTNmNTc3ZDA2YmMzYjRlNDZlZDVjYmU5NGFmNmYxYzlhYzNhMDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCEr0Oxt3MzXK1seoDgyf4WqMAac
EWFPq92Odl8d0gQhLrVt5d5HksipDGKqC8Lm7SuzGYdCKySqL0rm87+wCoQtwxYM
cDijns7/+/dhxTfkj8aYvCv21unACHU1lRtAvx7vRkhoCgUkMw2n75U7lHzUerUX
0zIaAZ8MPkDk6coEJnJBixMWYwQWFThUeLZX0zM48cNd7Bp4Cb6s1Zi4dlserqVh
C9je3CiRWiZE+05q/qbBQ0DfvJJBxvlHGRHDCIN/kcsOq7wexM/wFhmPo3TiwKPf
L+7WOw0KyFQmneOTO/NikMlX8vKo+ivNWOzLG4ihvIp/zzj444wLGETaHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMU/V30GvDtORu1cvpSvbxyaw6CfMB8GA1UdIwQY
MBaAFOSnFP/FmLFWR7uv4sZGCofq+8+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTkt
N2NiMzQ1ZTg1NDFhLzEvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTktN2NiMzQ1ZTg1NDFh
LzEvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPz6rS2j
pepXa0NWzFKpubET8aZ/IbkEKFkaKdSexEJgXyzm1i1DsrNLoMYsyQOzuyrqvrNS
buBxL36IltSKTDjvRcvkExLvtV8MkILe2pEBlX+5nqWdYDhS97LGfON9C+X/beBb
gg8dgoE/lcGCQ5EYfWtciXExHllRm7mI0qEoZO9YWciGzwBaQDvOIwufCm4e4EcW
Vmn/V9WeBlG1/GmJIXLoJYb7o6K+05HqKvZEWDEiDikMjlIdBWYJ/7/cNvTOnOnV
7SqEc3WKELZX7dK9Tg0uOPx8tp+ts2T5XDOAvvW7PzhXwaSJ7iRHTOYIv3daa3zL
01uDS6yOUmyQ1w==
-----END CERTIFICATE-----
Generated at Sat May 10 06:27:26 2025 by rpki-client