Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
File: T51fuq92qApl4OksAgYeiVsrgRc.mft (raw, json)
Hash identifier: BuGGwQYqisGaMUksczJ0NEF3ny3BN41+nNG8UjhQS7Y=
Subject key identifier: D5:33:50:5C:DA:E6:D3:22:7C:3D:B9:85:4A:EB:D2:7C:2E:59:7E:1C
Authority key identifier: 4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
Certificate issuer: /CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Certificate serial: 0196C94DD35D9720ABF91DBEADC17C2EAB41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 11:00:42 +0000
Manifest this update: Tue 13 May 2025 11:00:42 +0000
Manifest next update: Wed 14 May 2025 11:00:42 +0000
Files and hashes: 1: T51fuq92qApl4OksAgYeiVsrgRc.crl (hash: Ppuc8ZP3Zz8pZmgjq+gBX5pgayawZpTYbJvSc4uvAhM=)
2: oudSfHdCLiNB6U8UydMcb_Ovg84.roa (hash: LQDm0fv1Tzx1NMtk5XfrPEJuzKPUwQiMUZ87fbukA4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:4d:d3:5d:97:20:ab:f9:1d:be:ad:c1:7c:2e:ab:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Validity
Not Before: May 13 11:00:42 2025 GMT
Not After : May 14 11:00:42 2025 GMT
Subject: CN=d533505cdae6d3227c3db9854aebd27c2e597e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e3:8c:c1:c1:c2:ce:2e:b3:51:56:0a:87:07:
a5:19:a9:8b:b6:2d:df:a8:63:16:28:ea:c9:68:ae:
f7:1a:03:b6:cf:83:2f:8b:b1:4f:74:7f:61:d3:0d:
1b:7a:34:5d:9f:38:66:56:9a:cf:63:82:11:af:29:
78:85:e9:db:cb:a7:76:96:3e:ee:a0:3e:78:ef:5e:
e8:06:b1:7f:c1:f6:e7:3b:28:03:8e:52:3d:77:ce:
26:d0:1f:29:f1:6e:bd:56:d6:b7:3a:c4:6a:d3:b6:
6d:f1:68:ef:a1:14:06:4c:2d:d6:0d:ab:4a:86:18:
eb:45:58:f7:6e:65:61:71:55:ee:8b:80:ec:92:3e:
07:3d:cb:5b:a9:e5:5e:0e:25:0b:77:b5:72:6c:59:
24:11:9f:93:ca:94:2d:a2:ce:df:13:5a:32:54:95:
37:4e:07:7b:a3:8b:57:34:19:1e:ab:88:7a:19:6c:
f3:ea:29:2f:97:25:d1:b3:00:73:e8:f6:50:27:03:
01:4b:78:86:c8:79:61:3d:bf:e5:7b:f4:69:b5:1c:
5f:db:81:47:2b:4b:d9:4c:9d:ab:19:88:ea:90:a6:
8c:01:64:a3:41:d6:5b:0b:27:3b:54:49:ed:4a:2a:
d8:df:a2:d2:8c:c4:22:7b:1f:1b:31:38:0e:40:06:
7b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:33:50:5C:DA:E6:D3:22:7C:3D:B9:85:4A:EB:D2:7C:2E:59:7E:1C
X509v3 Authority Key Identifier:
keyid:4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5c:f7:17:a2:a7:68:e2:7c:a6:f4:25:32:df:27:1a:2f:a8:
4a:fb:77:61:f8:d3:ad:58:fe:68:cc:d1:3f:af:e3:ea:a8:d1:
04:92:fb:42:b2:45:15:61:43:b8:f5:bc:6f:a2:bb:65:95:e4:
6c:bb:04:f7:ec:79:22:3b:e5:40:54:85:41:63:3f:a3:ee:3d:
c3:94:60:6e:c2:c8:96:d7:fa:95:c2:23:a3:b5:02:5c:fe:26:
4b:6b:d0:4d:5d:0c:bd:bf:5d:bc:00:93:ca:03:3e:7f:de:83:
81:df:02:5e:ff:92:d9:f3:02:57:db:69:45:66:d6:d4:79:68:
c3:7c:4a:99:92:5f:e5:35:83:78:c0:01:f8:df:f0:8b:e9:59:
1a:9c:d6:1f:45:10:a0:36:41:2f:36:f5:9b:68:8a:02:66:d6:
36:e8:55:eb:34:cb:33:99:45:bb:e1:bd:8b:33:dc:85:52:8e:
ec:24:f1:5e:75:4b:37:9c:33:25:f2:17:68:e6:e5:d3:0a:fa:
ef:a1:74:5c:0e:bb:c9:aa:33:38:60:8d:a7:a0:90:64:49:62:
80:de:76:7d:58:5b:63:f6:b1:ea:59:1b:0c:44:3e:9f:01:7a:
2d:5c:dc:f8:70:c8:53:65:54:02:87:c4:f3:5d:4e:c6:49:4e:
99:3e:45:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJTdNdlyCr+R2+rcF8LqtBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOWQ1ZmJhYWY3NmE4MGE2NWUwZTkyYzAyMDYxZTg5NWIy
YjgxMTcwHhcNMjUwNTEzMTEwMDQyWhcNMjUwNTE0MTEwMDQyWjAzMTEwLwYDVQQD
EyhkNTMzNTA1Y2RhZTZkMzIyN2MzZGI5ODU0YWViZDI3YzJlNTk3ZTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+OMwcHCzi6zUVYKhwelGamLti3f
qGMWKOrJaK73GgO2z4Mvi7FPdH9h0w0bejRdnzhmVprPY4IRryl4henby6d2lj7u
oD54717oBrF/wfbnOygDjlI9d84m0B8p8W69Vta3OsRq07Zt8WjvoRQGTC3WDatK
hhjrRVj3bmVhcVXui4Dskj4HPctbqeVeDiULd7VybFkkEZ+TypQtos7fE1oyVJU3
Tgd7o4tXNBkeq4h6GWzz6ikvlyXRswBz6PZQJwMBS3iGyHlhPb/le/RptRxf24FH
K0vZTJ2rGYjqkKaMAWSjQdZbCyc7VEntSirY36LSjMQiex8bMTgOQAZ7WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUzUFza5tMifD25hUrr0nwuWX4cMB8GA1UdIwQY
MBaAFE+dX7qvdqgKZeDpLAIGHolbK4EXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDUxZnVxOTJxQXBsNE9rc0FnWWVpVnNyZ1JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jNzA5MjgtY2VkZS00YjYyLTg5YTct
NjBmNmZhOTExMGUyLzEvVDUxZnVxOTJxQXBsNE9rc0FnWWVpVnNyZ1JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9jNzA5MjgtY2VkZS00YjYyLTg5YTctNjBmNmZhOTExMGUy
LzEvVDUxZnVxOTJxQXBsNE9rc0FnWWVpVnNyZ1JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVz3F6Kn
aOJ8pvQlMt8nGi+oSvt3YfjTrVj+aMzRP6/j6qjRBJL7QrJFFWFDuPW8b6K7ZZXk
bLsE9+x5IjvlQFSFQWM/o+49w5RgbsLIltf6lcIjo7UCXP4mS2vQTV0Mvb9dvACT
ygM+f96Dgd8CXv+S2fMCV9tpRWbW1Hlow3xKmZJf5TWDeMAB+N/wi+lZGpzWH0UQ
oDZBLzb1m2iKAmbWNuhV6zTLM5lFu+G9izPchVKO7CTxXnVLN5wzJfIXaObl0wr6
76F0XA67yaozOGCNp6CQZEligN52fVhbY/ax6lkbDEQ+nwF6LVzc+HDIU2VUAofE
811OxklOmT5F8g==
-----END CERTIFICATE-----
Generated at Tue May 13 20:37:14 2025 by rpki-client