Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File: 5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier: FusamVPltCuVPLnEOfIfpmZaehVTytnC37PnC07vgdo=
Subject key identifier: 56:E5:98:1C:B2:C3:F5:18:A3:62:2B:D6:B9:B7:66:69:FF:5B:6B:4D
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial: 0196BD495D07DC4B8978845B709ED78618E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 03:00:23 +0000
Manifest this update: Sun 11 May 2025 03:00:23 +0000
Manifest next update: Mon 12 May 2025 03:00:23 +0000
Files and hashes: 1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: DMCZDwVdyjGRJj+qQLc6wQRkX73/Wsootww/YkyEEx8=)
2: HK-o-7NfDvPjOf99JzJL3ciySc8.roa (hash: DfwAR936JyRgw/jNJGOSmvyuLlvSXJeaVAPRyL2njSw=)
3: HMayfNdgxzPgTIksbOz-A7oqLCk.roa (hash: 3k2Q130datVFrgfiHucYcHqZP3tKnpk1Z1BK3tttEV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:5d:07:dc:4b:89:78:84:5b:70:9e:d7:86:18:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Validity
Not Before: May 11 03:00:23 2025 GMT
Not After : May 12 03:00:23 2025 GMT
Subject: CN=56e5981cb2c3f518a3622bd6b9b76669ff5b6b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:60:42:51:8e:81:2f:13:1d:5a:27:85:72:24:
b7:0e:c8:39:a8:66:a2:04:c0:cd:10:0e:be:4e:df:
d5:50:20:81:e6:ac:9d:64:0b:84:ad:0b:99:3c:58:
b1:2f:c9:ec:07:34:6f:bc:ee:88:ef:f2:4f:ec:a3:
9c:01:f1:49:f2:f0:23:74:49:0c:9e:fb:b1:94:c4:
2c:e3:c0:63:ec:31:56:57:bd:24:d1:aa:f0:a7:46:
03:9c:a4:56:a0:ff:d2:f5:a5:20:c1:9c:86:2c:54:
25:85:11:fe:01:89:47:57:e1:ab:47:07:7e:46:33:
06:5c:92:ac:ee:bf:20:d8:4d:2c:71:c3:61:5f:1c:
3f:f9:fa:ad:da:a7:13:41:96:e5:8c:9e:1e:4a:bc:
a8:a0:39:dd:ee:c0:f3:44:10:23:a7:61:0e:d3:3f:
e4:17:a9:72:43:5a:42:f8:7c:73:39:95:8d:08:c3:
3c:8c:2f:5e:d2:cb:33:24:8c:02:58:04:b8:b1:31:
01:1a:57:8e:41:50:1b:29:21:8f:cc:ca:31:66:b2:
72:1a:65:1f:6b:d0:11:e2:d8:22:a3:42:22:9c:5c:
80:a2:92:d2:72:c0:95:18:08:6f:67:a1:e2:74:5d:
a5:34:b8:88:51:3f:3d:77:d4:83:92:35:61:a4:74:
83:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E5:98:1C:B2:C3:F5:18:A3:62:2B:D6:B9:B7:66:69:FF:5B:6B:4D
X509v3 Authority Key Identifier:
keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:fa:65:40:53:40:5b:a8:3a:28:1c:f6:41:8c:f4:dc:60:95:
be:b2:f3:2e:ea:cc:72:99:ae:ab:2c:e5:54:de:09:47:39:7b:
01:65:72:66:24:97:46:dd:52:e5:77:29:e0:db:7b:58:8d:e3:
4e:77:4e:df:ac:bc:6c:62:66:85:bb:13:43:c1:71:e6:8f:29:
8d:d4:a6:a2:87:6b:a6:34:53:48:2b:df:04:d2:4c:a7:d7:82:
c1:0b:fe:f6:c7:03:96:e7:f7:23:7e:0b:be:5a:7a:65:0c:03:
08:bb:1a:37:8c:7d:8a:49:7f:79:7b:8b:5e:4f:2f:25:a9:61:
5f:de:02:98:26:d5:dc:9c:1e:47:d5:58:eb:05:5d:6e:3b:7d:
ba:51:df:1d:99:5e:9c:f0:67:8d:35:39:e7:59:53:e2:e8:67:
9d:00:e5:d7:e6:72:41:2d:b2:cd:d4:a0:04:67:64:d5:9c:99:
2e:b8:07:fa:cd:7e:c5:2a:d4:62:71:93:43:38:87:6c:54:6a:
da:11:53:0c:c2:d5:86:60:50:6a:45:6d:22:e6:bb:6a:38:cb:
3c:4c:10:e2:f0:de:e7:67:cb:73:fc:fa:fc:f8:5d:79:b2:97:
d1:4f:ba:bb:9e:ec:cd:06:f8:1b:00:bf:06:3d:64:d9:c1:c1:
4c:10:2c:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9SV0H3EuJeIRbcJ7XhhjmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MWE4YzQyZWNlODliNWZiZmMyMTBkYzdiNTU0YzcyZWE0
ZjM1NDQwHhcNMjUwNTExMDMwMDIzWhcNMjUwNTEyMDMwMDIzWjAzMTEwLwYDVQQD
Eyg1NmU1OTgxY2IyYzNmNTE4YTM2MjJiZDZiOWI3NjY2OWZmNWI2YjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2BCUY6BLxMdWieFciS3Dsg5qGai
BMDNEA6+Tt/VUCCB5qydZAuErQuZPFixL8nsBzRvvO6I7/JP7KOcAfFJ8vAjdEkM
nvuxlMQs48Bj7DFWV70k0arwp0YDnKRWoP/S9aUgwZyGLFQlhRH+AYlHV+GrRwd+
RjMGXJKs7r8g2E0sccNhXxw/+fqt2qcTQZbljJ4eSryooDnd7sDzRBAjp2EO0z/k
F6lyQ1pC+HxzOZWNCMM8jC9e0sszJIwCWAS4sTEBGleOQVAbKSGPzMoxZrJyGmUf
a9AR4tgio0IinFyAopLScsCVGAhvZ6HidF2lNLiIUT89d9SDkjVhpHSDaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFblmByyw/UYo2Ir1rm3Zmn/W2tNMB8GA1UdIwQY
MBaAFOQajELs6Jtfv8IQ3HtVTHLqTzVEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kMTljMmQtMzhjMy00NTI2LWE3Y2Yt
MWQ2NjZjNDIyYzZhLzEvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kMTljMmQtMzhjMy00NTI2LWE3Y2YtMWQ2NjZjNDIyYzZh
LzEvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPplQFNA
W6g6KBz2QYz03GCVvrLzLurMcpmuqyzlVN4JRzl7AWVyZiSXRt1S5Xcp4Nt7WI3j
TndO36y8bGJmhbsTQ8Fx5o8pjdSmoodrpjRTSCvfBNJMp9eCwQv+9scDluf3I34L
vlp6ZQwDCLsaN4x9ikl/eXuLXk8vJalhX94CmCbV3JweR9VY6wVdbjt9ulHfHZle
nPBnjTU551lT4uhnnQDl1+ZyQS2yzdSgBGdk1ZyZLrgH+s1+xSrUYnGTQziHbFRq
2hFTDMLVhmBQakVtIua7ajjLPEwQ4vDe52fLc/z6/PhdebKX0U+6u57szQb4GwC/
Bj1k2cHBTBAsig==
-----END CERTIFICATE-----
Generated at Sun May 11 06:47:07 2025 by rpki-client