Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
File: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft (raw, json)
Hash identifier: gzT1Y6RHDVtgByzK+7A9WUfstYTY1vZ2ppUb6BgSKYY=
Subject key identifier: 56:9E:FB:27:55:A5:EE:DA:BA:1E:32:C5:70:00:9A:62:16:77:EF:66
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial: 0196A954F29DFF216D3E0AF7665FD347BE85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
Manifest number: 104B
Signing time: Wed 07 May 2025 06:00:38 +0000
Manifest this update: Wed 07 May 2025 06:00:38 +0000
Manifest next update: Thu 08 May 2025 06:00:38 +0000
Files and hashes: 1: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl (hash: Zkis3o0E0M40v4g8YYL9YfznV6FddB/qKM20J8sfpxo=)
2: _pQtR1EJpgHMSOkTmSK_Er0tXsE.roa (hash: m5yMM2ApK+4Me2gJxPiOKP0gpYE7to93xl8Fx6CP7v4=)
3: qjMWC-5cgR3_FzvTJ8fV4seYOFk.roa (hash: fwjzyDVkTfLPWzdH9pq6+z0fYQ+pKyYb7cgFc8eFsFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:54:f2:9d:ff:21:6d:3e:0a:f7:66:5f:d3:47:be:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
Validity
Not Before: May 7 06:00:38 2025 GMT
Not After : May 8 06:00:38 2025 GMT
Subject: CN=569efb2755a5eedaba1e32c570009a621677ef66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:66:c2:eb:06:49:89:63:01:00:73:9d:88:5a:
47:96:f7:03:85:7e:db:dc:23:b4:3a:05:97:37:bd:
30:67:7d:62:94:67:43:22:1f:e7:31:38:8f:16:d0:
6a:36:3f:8b:f3:86:ce:94:21:77:02:b8:83:48:1a:
ba:9d:78:41:23:9e:f6:81:f0:99:49:db:00:ec:0c:
e7:88:f2:1d:12:d3:a4:94:5d:0b:cb:73:45:f3:3f:
c5:f2:20:ba:b6:49:1a:9b:ae:d8:60:b0:fd:8a:00:
94:f5:ea:1c:c5:b0:b1:e0:d1:67:b7:b2:89:a6:d1:
54:e4:82:ed:eb:57:99:23:d3:93:69:d4:fb:3a:3b:
b6:2c:3e:31:cb:6a:e9:71:60:bd:43:d1:fd:b7:90:
87:76:67:0f:9c:1b:86:67:54:53:bd:0c:51:ac:64:
73:73:86:c3:5a:ac:4c:ce:c1:74:81:69:5a:c7:1c:
5d:3a:ac:f1:e2:47:aa:a6:47:34:04:60:1e:4e:be:
41:76:50:f1:6c:cc:dc:73:39:fa:53:60:04:f5:99:
e4:b4:6b:52:1f:9d:82:63:98:f1:37:70:9b:b4:48:
c1:ec:e4:6f:32:cb:02:0c:b2:cf:e0:ef:ee:2e:b3:
30:7c:84:91:ca:40:73:06:d2:2e:8f:13:5d:5d:ff:
e5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9E:FB:27:55:A5:EE:DA:BA:1E:32:C5:70:00:9A:62:16:77:EF:66
X509v3 Authority Key Identifier:
keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:83:57:8d:66:8d:48:b8:98:c2:56:73:f6:5e:8f:dc:7e:b9:
fa:b3:17:f7:0a:7e:20:f5:d7:6f:73:00:15:c3:93:ac:ed:e6:
f8:93:ef:a2:c1:3b:fc:18:1d:94:2d:3e:1f:17:6c:49:ee:ab:
f8:31:9a:80:fc:18:f6:5a:50:1b:5a:4d:b7:03:20:12:68:f2:
93:b7:b3:29:6e:2a:56:8f:e2:b4:15:26:44:a1:36:98:12:a6:
b2:0d:b6:e0:22:07:f4:f0:9f:66:a6:d3:0d:46:33:ce:d5:76:
7d:2e:09:83:60:94:a6:51:d8:6e:73:ee:5a:a9:08:61:1f:ae:
b0:f6:53:b7:8b:5c:ac:42:31:03:ff:bc:77:e7:98:96:22:38:
26:84:7e:e6:68:98:31:76:7f:46:3d:8f:b1:d5:7a:53:02:b4:
ae:4f:cd:06:65:79:e7:1c:8f:08:a5:f1:95:44:0d:6b:68:e6:
b8:bf:17:5c:80:27:7c:a9:17:08:50:9d:9e:ad:ba:0a:aa:4a:
74:a3:1a:4e:72:50:38:15:3b:eb:f3:00:fb:d9:51:0c:ed:e6:
9b:63:9d:3d:c6:4e:ec:02:56:1e:70:91:fe:23:28:58:61:c6:
89:91:62:eb:8f:8e:b2:ac:64:b2:1d:e4:f5:a6:d8:08:8b:cf:
ba:b9:75:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZapVPKd/yFtPgr3Zl/TR76FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OTE1OWVmMjJmODJiOTM2NzMxNjY0ZWU2N2MzYjZlYTk2
ZWY0NDMwHhcNMjUwNTA3MDYwMDM4WhcNMjUwNTA4MDYwMDM4WjAzMTEwLwYDVQQD
Eyg1NjllZmIyNzU1YTVlZWRhYmExZTMyYzU3MDAwOWE2MjE2NzdlZjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGbC6wZJiWMBAHOdiFpHlvcDhX7b
3CO0OgWXN70wZ31ilGdDIh/nMTiPFtBqNj+L84bOlCF3AriDSBq6nXhBI572gfCZ
SdsA7AzniPIdEtOklF0Ly3NF8z/F8iC6tkkam67YYLD9igCU9eocxbCx4NFnt7KJ
ptFU5ILt61eZI9OTadT7Oju2LD4xy2rpcWC9Q9H9t5CHdmcPnBuGZ1RTvQxRrGRz
c4bDWqxMzsF0gWlaxxxdOqzx4keqpkc0BGAeTr5BdlDxbMzcczn6U2AE9ZnktGtS
H52CY5jxN3CbtEjB7ORvMssCDLLP4O/uLrMwfISRykBzBtIujxNdXf/l+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFae+ydVpe7auh4yxXAAmmIWd+9mMB8GA1UdIwQY
MBaAFCeRWe8i+CuTZzFmTuZ8O26pbvRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS81YzE1YmUtYWVmMi00YzMxLWJmYjQt
MzFiYWY2ZWVkZThhLzEvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS81YzE1YmUtYWVmMi00YzMxLWJmYjQtMzFiYWY2ZWVkZThh
LzEvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoNXjWaN
SLiYwlZz9l6P3H65+rMX9wp+IPXXb3MAFcOTrO3m+JPvosE7/BgdlC0+HxdsSe6r
+DGagPwY9lpQG1pNtwMgEmjyk7ezKW4qVo/itBUmRKE2mBKmsg224CIH9PCfZqbT
DUYzztV2fS4Jg2CUplHYbnPuWqkIYR+usPZTt4tcrEIxA/+8d+eYliI4JoR+5miY
MXZ/Rj2PsdV6UwK0rk/NBmV55xyPCKXxlUQNa2jmuL8XXIAnfKkXCFCdnq26CqpK
dKMaTnJQOBU76/MA+9lRDO3mm2OdPcZO7AJWHnCR/iMoWGHGiZFi64+Osqxksh3k
9abYCIvPurl1bg==
-----END CERTIFICATE-----
Generated at Wed May 7 08:41:24 2025 by rpki-client