Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
File: v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft (raw, json)
Hash identifier: SCdNZ2Hz6jDDtXVidN9tpqc88DOuZHfqlXbMEfdgsGY=
Subject key identifier: AD:0D:DA:9A:CA:37:AA:FE:EE:0B:82:29:50:2C:43:33:CE:96:D8:B3
Authority key identifier: BF:EE:53:11:55:60:71:46:30:4D:C6:5D:D5:76:FB:EE:9F:0D:6E:4E
Certificate issuer: /CN=bfee531155607146304dc65dd576fbee9f0d6e4e
Certificate serial: 0196BDB7302F7FD12EBADE902F6D136CC86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
Manifest number: 0356
Signing time: Sun 11 May 2025 05:00:21 +0000
Manifest this update: Sun 11 May 2025 05:00:21 +0000
Manifest next update: Mon 12 May 2025 05:00:21 +0000
Files and hashes: 1: v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl (hash: MjWZRBKsw9lxMDdDzrmGgwJxgTfIYz4Mi7Mqrvv5Cbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:30:2f:7f:d1:2e:ba:de:90:2f:6d:13:6c:c8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfee531155607146304dc65dd576fbee9f0d6e4e
Validity
Not Before: May 11 05:00:21 2025 GMT
Not After : May 12 05:00:21 2025 GMT
Subject: CN=ad0dda9aca37aafeee0b8229502c4333ce96d8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:b9:30:39:2c:a5:0a:ab:4d:cb:57:15:08:
a2:cd:a9:a7:e6:95:b4:2d:2b:5f:60:74:ae:95:38:
76:08:94:96:d9:02:b9:89:cd:a4:44:92:85:a9:f4:
b5:f5:84:3b:df:68:ab:08:c3:71:2f:f8:03:d4:0c:
84:75:0c:7a:cc:b0:22:09:f8:a3:44:8b:94:0e:24:
eb:30:b5:95:eb:2e:c0:4b:88:fb:95:99:68:d8:da:
5b:01:88:c5:40:33:17:0e:02:60:af:c9:17:75:0a:
65:35:36:41:72:9b:98:e4:6e:a1:56:e4:e5:97:08:
56:be:44:91:90:d3:29:7c:8b:5b:81:bb:5a:2c:ce:
0a:ba:ff:32:7d:8c:f7:0b:2d:52:d9:19:ea:00:1f:
af:bf:4f:a3:25:4b:27:c5:1b:be:5f:e5:6a:6a:0d:
5a:67:a2:5c:5e:41:a8:d9:85:0f:f0:6b:b6:55:ab:
a5:a1:a5:af:3c:11:5a:10:f2:84:02:55:d8:8d:74:
92:82:8e:81:e9:07:1d:b9:0a:5b:2d:09:43:fe:74:
8c:c9:2a:67:66:e4:ba:fb:be:cb:f0:78:83:08:ea:
64:50:9d:5b:cd:af:89:eb:aa:e6:8d:fa:2b:75:f6:
d5:88:a8:86:11:51:7f:e6:88:ee:22:77:16:55:12:
20:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0D:DA:9A:CA:37:AA:FE:EE:0B:82:29:50:2C:43:33:CE:96:D8:B3
X509v3 Authority Key Identifier:
keyid:BF:EE:53:11:55:60:71:46:30:4D:C6:5D:D5:76:FB:EE:9F:0D:6E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:8e:ad:fa:69:e7:60:8d:e9:11:e9:09:36:73:16:86:72:f6:
b8:16:22:ab:57:47:1f:9f:8c:4c:b1:fc:5f:b4:88:1e:94:83:
22:81:66:a6:a2:15:3f:86:10:db:af:b7:53:f6:80:79:38:15:
fc:f7:58:91:bf:30:85:00:1b:0f:c5:22:b1:81:0b:eb:b7:eb:
a2:d6:cf:3f:ca:dd:45:3d:89:b0:d2:07:78:4c:0b:12:86:34:
72:b5:cb:d6:8a:37:a3:83:8a:f6:b7:53:89:e0:12:3c:7e:6a:
5e:82:d4:85:00:9b:0a:53:be:f4:c6:0a:0c:46:5a:b3:c9:b1:
4f:94:bb:e4:c9:da:e3:b1:04:07:bf:ee:e9:31:c3:ea:3a:af:
67:d8:26:40:77:4a:2c:70:f2:21:b9:10:30:b6:95:09:ae:34:
2f:9b:d8:f2:25:01:1d:cc:89:11:5a:20:8a:4b:c0:24:e7:97:
e4:1d:97:ec:25:07:58:89:92:ce:1e:6d:47:9d:e3:9a:70:74:
fa:6a:a2:12:1e:bb:3e:41:5f:c2:e2:34:9a:1e:77:08:47:5c:
29:d1:30:62:e1:3a:e8:bc:fd:9b:90:64:3e:af:6b:70:bd:c1:
49:7b:43:09:30:26:0a:ca:c5:b0:7e:56:2e:ce:34:8c:31:06:
58:8b:87:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9tzAvf9Euut6QL20TbMhuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZWU1MzExNTU2MDcxNDYzMDRkYzY1ZGQ1NzZmYmVlOWYw
ZDZlNGUwHhcNMjUwNTExMDUwMDIxWhcNMjUwNTEyMDUwMDIxWjAzMTEwLwYDVQQD
EyhhZDBkZGE5YWNhMzdhYWZlZWUwYjgyMjk1MDJjNDMzM2NlOTZkOGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFe5MDkspQqrTctXFQiizamn5pW0
LStfYHSulTh2CJSW2QK5ic2kRJKFqfS19YQ732irCMNxL/gD1AyEdQx6zLAiCfij
RIuUDiTrMLWV6y7AS4j7lZlo2NpbAYjFQDMXDgJgr8kXdQplNTZBcpuY5G6hVuTl
lwhWvkSRkNMpfItbgbtaLM4Kuv8yfYz3Cy1S2RnqAB+vv0+jJUsnxRu+X+Vqag1a
Z6JcXkGo2YUP8Gu2VauloaWvPBFaEPKEAlXYjXSSgo6B6QcduQpbLQlD/nSMySpn
ZuS6+77L8HiDCOpkUJ1bza+J66rmjfordfbViKiGEVF/5ojuIncWVRIg+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0N2prKN6r+7guCKVAsQzPOltizMB8GA1UdIwQY
MBaAFL/uUxFVYHFGME3GXdV2++6fDW5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdi01VEVWVmdjVVl3VGNaZDFYYjc3cDhOYms0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZWM2NGItZDNhMS00MzMxLTkyNTIt
ZDRmODMzODBhOWM1LzEvdi01VEVWVmdjVVl3VGNaZDFYYjc3cDhOYms0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zZWM2NGItZDNhMS00MzMxLTkyNTItZDRmODMzODBhOWM1
LzEvdi01VEVWVmdjVVl3VGNaZDFYYjc3cDhOYms0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATo6t+mnn
YI3pEekJNnMWhnL2uBYiq1dHH5+MTLH8X7SIHpSDIoFmpqIVP4YQ26+3U/aAeTgV
/PdYkb8whQAbD8UisYEL67frotbPP8rdRT2JsNIHeEwLEoY0crXL1oo3o4OK9rdT
ieASPH5qXoLUhQCbClO+9MYKDEZas8mxT5S75Mna47EEB7/u6THD6jqvZ9gmQHdK
LHDyIbkQMLaVCa40L5vY8iUBHcyJEVogikvAJOeX5B2X7CUHWImSzh5tR53jmnB0
+mqiEh67PkFfwuI0mh53CEdcKdEwYuE66Lz9m5BkPq9rcL3BSXtDCTAmCsrFsH5W
Ls40jDEGWIuHjA==
-----END CERTIFICATE-----
Generated at Sun May 11 08:32:28 2025 by rpki-client