Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
File: 5eioFf01iudtJ0sEWwpxW9UcYng.mft (raw, json)
Hash identifier: HiCD3T9aunxxIdp4dTAlCUvOKZD7FHHahzpMxs5d62s=
Subject key identifier: 37:A3:0D:F9:FB:FA:DB:28:19:B7:03:B2:7B:E2:0E:8C:4A:B2:2A:E2
Authority key identifier: E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78
Certificate issuer: /CN=e5e8a815fd358ae76d274b045b0a715bd51c6278
Certificate serial: 0196A1647F68F9003B5643750C58F55EC25B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
Manifest number: 038D
Signing time: Mon 05 May 2025 17:00:39 +0000
Manifest this update: Mon 05 May 2025 17:00:39 +0000
Manifest next update: Tue 06 May 2025 17:00:39 +0000
Files and hashes: 1: 5eioFf01iudtJ0sEWwpxW9UcYng.crl (hash: LkqjzA43XkUhh6msQzg8PAQg0E2cR2RNXrj8HyOr0Sk=)
2: zgXChFab3CAW1cEIvlaaHwBihDQ.roa (hash: KIPNLp3NHIAV1bWGC3MaoaY8HHw3uTlNTX/DpY4nEoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:7f:68:f9:00:3b:56:43:75:0c:58:f5:5e:c2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e8a815fd358ae76d274b045b0a715bd51c6278
Validity
Not Before: May 5 17:00:39 2025 GMT
Not After : May 6 17:00:39 2025 GMT
Subject: CN=37a30df9fbfadb2819b703b27be20e8c4ab22ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a9:6c:c5:03:c2:e0:50:81:a8:04:16:e0:00:
99:93:3b:13:50:09:87:53:d8:05:01:9a:1f:f8:6e:
fa:fa:dc:bf:c9:ff:69:80:5a:54:fc:38:fb:4d:ff:
c3:9f:4c:05:39:5d:84:e7:ed:ad:02:be:04:a1:ac:
38:9a:4c:90:dc:42:e6:1a:7f:d6:0b:fd:37:61:5c:
91:92:32:95:b7:8e:d7:3a:fb:ed:92:28:83:46:09:
66:e0:d6:38:67:07:5f:38:a0:26:98:e6:4c:4c:33:
ed:17:79:2c:fe:7a:85:ef:84:e4:b7:15:56:6e:ba:
98:d4:9e:67:2b:8c:8d:9d:8a:f3:66:63:73:63:12:
2a:38:e4:ea:5b:12:5b:68:ad:5f:6c:bb:69:c8:9a:
ea:75:f2:fc:be:11:0c:ba:a7:0b:7e:40:18:94:1b:
af:de:c3:25:73:3a:97:1b:fc:68:5e:7e:8b:90:d8:
66:e9:d8:56:8c:ec:f6:48:09:0e:a2:62:d3:bb:50:
2e:14:3e:ca:49:3b:61:8f:62:c7:43:77:9f:cd:7d:
2e:5b:4c:24:cb:97:59:03:f1:e3:ff:2f:b7:b9:12:
a5:56:53:91:3f:53:f2:b6:7f:1e:89:30:47:23:08:
1d:ca:bd:c8:fa:09:3b:1e:e1:22:e8:55:b3:1d:21:
38:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A3:0D:F9:FB:FA:DB:28:19:B7:03:B2:7B:E2:0E:8C:4A:B2:2A:E2
X509v3 Authority Key Identifier:
keyid:E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:10:52:38:a9:1a:3f:09:03:c1:ba:7c:4d:8b:8f:fe:6a:69:
8e:a9:b0:33:5d:e6:f1:83:a9:17:6f:fc:db:b9:7d:08:d3:76:
78:a1:26:d1:66:15:61:6b:57:0d:16:8b:30:54:27:a0:a4:23:
51:c4:4b:50:e4:f8:59:b9:61:27:1e:e8:b5:e8:82:76:87:d6:
88:ae:4f:0b:d6:29:f2:48:6f:bc:12:7a:c2:fa:92:db:b7:7e:
94:d6:26:7a:28:05:89:65:5a:54:41:b3:19:01:02:88:57:9a:
c5:ac:e9:b9:8e:dd:f1:a2:5f:5d:05:e1:32:2b:dd:1a:de:f8:
45:58:a5:e8:fe:4b:cf:27:1e:fd:0f:31:b6:22:e7:99:3c:6f:
5a:e0:08:6d:00:ba:4e:46:5f:9c:83:67:fd:a8:53:b7:0b:48:
28:d4:08:7e:1d:3c:dd:a5:aa:b7:70:08:e8:aa:c2:e0:d0:4c:
33:b6:e6:6b:89:82:bb:7a:ec:3f:52:76:87:51:71:10:d8:48:
e1:34:f1:91:b1:5f:01:2e:9a:9f:87:b4:bd:8c:f9:57:c7:7a:
e1:cb:26:1f:ee:b0:fd:0b:a7:f5:5e:21:02:16:42:8e:32:27:
63:0a:01:96:96:2a:fd:54:86:f0:fc:14:a8:3d:97:37:95:cc:
08:9c:0c:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZahZH9o+QA7VkN1DFj1XsJbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZThhODE1ZmQzNThhZTc2ZDI3NGIwNDViMGE3MTViZDUx
YzYyNzgwHhcNMjUwNTA1MTcwMDM5WhcNMjUwNTA2MTcwMDM5WjAzMTEwLwYDVQQD
EygzN2EzMGRmOWZiZmFkYjI4MTliNzAzYjI3YmUyMGU4YzRhYjIyYWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KlsxQPC4FCBqAQW4ACZkzsTUAmH
U9gFAZof+G76+ty/yf9pgFpU/Dj7Tf/Dn0wFOV2E5+2tAr4Eoaw4mkyQ3ELmGn/W
C/03YVyRkjKVt47XOvvtkiiDRglm4NY4ZwdfOKAmmOZMTDPtF3ks/nqF74TktxVW
brqY1J5nK4yNnYrzZmNzYxIqOOTqWxJbaK1fbLtpyJrqdfL8vhEMuqcLfkAYlBuv
3sMlczqXG/xoXn6LkNhm6dhWjOz2SAkOomLTu1AuFD7KSTthj2LHQ3efzX0uW0wk
y5dZA/Hj/y+3uRKlVlORP1Pytn8eiTBHIwgdyr3I+gk7HuEi6FWzHSE4TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDejDfn7+tsoGbcDsnviDoxKsiriMB8GA1UdIwQY
MBaAFOXoqBX9NYrnbSdLBFsKcVvVHGJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWVpb0ZmMDFpdWR0SjBzRVd3cHhXOVVjWW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85MjNlNzgtNzhhNy00ZDk3LTlhN2Mt
Nzg2ZGUzZDFhYmU0LzEvNWVpb0ZmMDFpdWR0SjBzRVd3cHhXOVVjWW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi85MjNlNzgtNzhhNy00ZDk3LTlhN2MtNzg2ZGUzZDFhYmU0
LzEvNWVpb0ZmMDFpdWR0SjBzRVd3cHhXOVVjWW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnhBSOKka
PwkDwbp8TYuP/mppjqmwM13m8YOpF2/827l9CNN2eKEm0WYVYWtXDRaLMFQnoKQj
UcRLUOT4WblhJx7oteiCdofWiK5PC9Yp8khvvBJ6wvqS27d+lNYmeigFiWVaVEGz
GQECiFeaxazpuY7d8aJfXQXhMivdGt74RVil6P5Lzyce/Q8xtiLnmTxvWuAIbQC6
TkZfnINn/ahTtwtIKNQIfh083aWqt3AI6KrC4NBMM7bma4mCu3rsP1J2h1FxENhI
4TTxkbFfAS6an4e0vYz5V8d64csmH+6w/Qun9V4hAhZCjjInYwoBlpYq/VSG8PwU
qD2XN5XMCJwM5g==
-----END CERTIFICATE-----
Generated at Tue May 6 01:28:11 2025 by rpki-client