Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
File: I5xF5DYlUiCArsU5UpiaE6KKvQA.mft (raw, json)
Hash identifier: weakjyvpZM2xxhijpdc3EGyShDHI8DsjQTWYyWwARZE=
Subject key identifier: 5F:39:62:1A:5C:DE:F0:7D:9D:C0:F6:AA:58:66:6D:A4:DC:67:A4:B9
Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00
Certificate serial: 0196B9A3E7EF9CDB3B548B088CA37AB2A33F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 10:00:48 +0000
Manifest this update: Sat 10 May 2025 10:00:48 +0000
Manifest next update: Sun 11 May 2025 10:00:48 +0000
Files and hashes: 1: I5xF5DYlUiCArsU5UpiaE6KKvQA.crl (hash: C3vlTZ/AL1cY4813wWZN1Uil5j1Wmdf1XHYliHb7A/o=)
2: lw90sey6Y2XkP3Sip6ebzWQtTKU.roa (hash: IdqbojAlXr4XwjmKtJYEU/2zd7cvDplQCfLZ9IO+/d0=)
3: uBZl19XYTdc5SBXaRHXvV0GGF98.roa (hash: 1Ti03xYR3EsLOQdndtqiFtUtuVxyXY66yoLYTtqG1ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a3:e7:ef:9c:db:3b:54:8b:08:8c:a3:7a:b2:a3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239c45e43625522080aec53952989a13a28abd00
Validity
Not Before: May 10 10:00:48 2025 GMT
Not After : May 11 10:00:48 2025 GMT
Subject: CN=5f39621a5cdef07d9dc0f6aa58666da4dc67a4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0d:3f:90:d5:7c:86:68:34:cd:1c:13:62:49:
7a:45:e4:4a:9e:6c:07:ce:b0:9a:c5:c0:c7:33:6e:
e0:91:a6:ad:30:f7:ff:0e:9f:d3:d7:a3:87:6c:1e:
3d:37:4e:11:32:59:30:71:78:e8:2c:3a:7f:f3:63:
f0:8f:9e:f3:c7:53:23:8a:0f:36:14:0c:b9:77:be:
59:b7:a6:9d:58:a6:b0:b6:b4:4f:02:d3:d0:4a:0a:
ec:16:f0:9e:04:2b:b3:84:6f:78:2a:55:6f:03:c9:
3f:da:d0:49:da:53:ce:2c:51:02:30:a4:a7:52:c4:
4f:42:35:e6:01:67:e4:57:c5:bb:bc:c2:31:df:04:
7f:4a:99:b7:f4:cd:00:11:84:b1:22:a5:91:cc:66:
e1:0f:38:75:29:24:59:79:2a:c9:28:ae:6f:8d:12:
f2:e7:86:c9:d6:0b:7b:6b:e4:57:73:00:ee:06:5d:
32:6b:85:a5:12:32:cd:1a:23:a1:e2:07:b0:77:d4:
c2:c3:16:63:b4:d2:4e:97:e7:9b:f5:57:d9:4e:29:
2b:ed:bc:77:9a:a2:98:6d:97:0b:87:e1:d2:f7:11:
5d:68:22:d3:d7:03:cc:52:76:d5:fc:32:72:ba:ce:
ce:54:34:b0:d2:03:d7:3a:d4:06:d5:0d:55:8c:ac:
69:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:39:62:1A:5C:DE:F0:7D:9D:C0:F6:AA:58:66:6D:A4:DC:67:A4:B9
X509v3 Authority Key Identifier:
keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:27:c1:23:94:69:53:9d:11:84:4f:48:ec:d7:c0:ec:2c:3e:
c3:df:f4:6e:32:03:c2:e3:5d:df:ab:f9:89:3a:5f:c7:3f:74:
fa:50:5c:d9:fc:d2:d6:1f:6d:60:df:9d:7d:0d:b6:7e:45:44:
46:b0:32:ca:f3:2f:6c:e6:a9:eb:34:65:67:eb:95:97:e0:74:
d4:87:bc:87:4f:e5:41:0e:0e:7f:6d:b2:6e:c6:f9:20:ed:1f:
0a:d3:23:7e:cf:38:5a:cc:72:88:88:86:8a:8a:b1:a3:b6:8f:
e1:7b:f0:3e:44:1d:c0:20:ac:e9:0c:3d:69:12:21:32:a3:4f:
8e:33:75:23:b7:ab:3f:4f:71:e5:69:24:e9:36:e1:e4:5b:85:
d4:a0:f2:47:a5:0c:09:80:56:1c:59:fc:3c:8a:1e:c2:16:6f:
23:77:91:ff:4c:47:27:b3:ff:93:a8:83:18:56:35:27:2a:46:
57:09:da:b8:29:c8:9f:36:91:e2:a6:af:dd:1f:74:68:90:94:
f4:cf:fb:d4:1b:4b:b2:cd:6d:8d:44:dd:8e:c5:9d:35:3c:6d:
2d:4c:e7:41:69:93:79:8a:80:84:df:53:e2:57:86:28:13:5b:
bc:41:ec:6d:f9:97:fe:47:01:6f:fa:82:c7:63:6b:13:0b:49:
1b:6f:1e:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa5o+fvnNs7VIsIjKN6sqM/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzOWM0NWU0MzYyNTUyMjA4MGFlYzUzOTUyOTg5YTEzYTI4
YWJkMDAwHhcNMjUwNTEwMTAwMDQ4WhcNMjUwNTExMTAwMDQ4WjAzMTEwLwYDVQQD
Eyg1ZjM5NjIxYTVjZGVmMDdkOWRjMGY2YWE1ODY2NmRhNGRjNjdhNGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5A0/kNV8hmg0zRwTYkl6ReRKnmwH
zrCaxcDHM27gkaatMPf/Dp/T16OHbB49N04RMlkwcXjoLDp/82Pwj57zx1Mjig82
FAy5d75Zt6adWKawtrRPAtPQSgrsFvCeBCuzhG94KlVvA8k/2tBJ2lPOLFECMKSn
UsRPQjXmAWfkV8W7vMIx3wR/Spm39M0AEYSxIqWRzGbhDzh1KSRZeSrJKK5vjRLy
54bJ1gt7a+RXcwDuBl0ya4WlEjLNGiOh4gewd9TCwxZjtNJOl+eb9VfZTikr7bx3
mqKYbZcLh+HS9xFdaCLT1wPMUnbV/DJyus7OVDSw0gPXOtQG1Q1VjKxpVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF85Yhpc3vB9ncD2qlhmbaTcZ6S5MB8GA1UdIwQY
MBaAFCOcReQ2JVIggK7FOVKYmhOiir0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTV4RjVEWWxVaUNBcnNVNVVwaWFFNktLdlFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80YzQ4OTQtODBmYy00OGVmLWI2Njgt
OTc1YTIzN2VjZDA2LzEvSTV4RjVEWWxVaUNBcnNVNVVwaWFFNktLdlFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi80YzQ4OTQtODBmYy00OGVmLWI2NjgtOTc1YTIzN2VjZDA2
LzEvSTV4RjVEWWxVaUNBcnNVNVVwaWFFNktLdlFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADSfBI5Rp
U50RhE9I7NfA7Cw+w9/0bjIDwuNd36v5iTpfxz90+lBc2fzS1h9tYN+dfQ22fkVE
RrAyyvMvbOap6zRlZ+uVl+B01Ie8h0/lQQ4Of22ybsb5IO0fCtMjfs84WsxyiIiG
ioqxo7aP4XvwPkQdwCCs6Qw9aRIhMqNPjjN1I7erP09x5Wkk6Tbh5FuF1KDyR6UM
CYBWHFn8PIoewhZvI3eR/0xHJ7P/k6iDGFY1JypGVwnauCnInzaR4qav3R90aJCU
9M/71BtLss1tjUTdjsWdNTxtLUznQWmTeYqAhN9T4leGKBNbvEHsbfmX/kcBb/qC
x2NrEwtJG28e9Q==
-----END CERTIFICATE-----
Generated at Sat May 10 16:39:23 2025 by rpki-client