Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.mft
File: c5ddXanaigdLM_vLXAnVA6O0Q6E.mft (raw, json)
Hash identifier: 7UM7dEbIynRnfcHa4RSSrfv6DuD/AG2OAu4x9TME1wI=
Subject key identifier: 32:DC:B9:A1:D6:88:A2:03:BB:99:0D:79:7B:12:A6:BE:B6:71:F1:09
Authority key identifier: 73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1
Certificate issuer: /CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
Certificate serial: 0196BE9309D2CCF632EACA111D19C5533ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.mft
Manifest number: 154D
Signing time: Sun 11 May 2025 09:00:29 +0000
Manifest this update: Sun 11 May 2025 09:00:29 +0000
Manifest next update: Mon 12 May 2025 09:00:29 +0000
Files and hashes: 1: 5hi4oRUV3-lKQNDaUn51nnT1qK0.roa (hash: JinYSimT/Wg2ItaoADr26fHiavicFEOuho5581RUh7s=)
2: SjDGqMtyA_tOZOFH9qEhztndPDA.roa (hash: SYm04LsgP1kHh1UhWwOlwBd3q7mezHyPYrt9bFb03b4=)
3: T7iXt4sJUoDnHP-qWowXfwJDp5I.roa (hash: KTxUHbHDaHdkVbRY7Vka++NBqUDid63y2hSOJuy207k=)
4: c5ddXanaigdLM_vLXAnVA6O0Q6E.crl (hash: k5knRjhgv5Of0cRHZUGq7b3r9hszm0Nef5yLKb0NwQw=)
5: cJwqie2X40_QNltIbFm8mbtEYgg.roa (hash: 3tSp6jg9Ep/kPYXuczS90i3Bn6SwmlbgTSU/wFhXkuM=)
6: gE2C1EfDuVwxxJDKotTRnz-Yq4w.roa (hash: pwL0fRQakGirIxsJOmpHF82vAfTBBCME2LVYmBIAzQA=)
7: iSqhLAHx-OPTgee6HZU05Gn7mrg.roa (hash: /LTwUnCBfctjGJbeDzhYKUgsItn5b+f1/FLcjg7y0VU=)
8: il1qN-6b575Qrhubx9ECJYw-ExA.roa (hash: l3cKFcZsIxHBwQmjzQTRktanLJGMwjOlGIjh3dsWi3s=)
9: nwasxCIPFFaQLDFGjgREeCDdEJ0.roa (hash: l3Qci4Ma0ZBc/BJswSuk3N16gUqszJQ2M5qXeNWO8Z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:09:d2:cc:f6:32:ea:ca:11:1d:19:c5:53:3a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
Validity
Not Before: May 11 09:00:29 2025 GMT
Not After : May 12 09:00:29 2025 GMT
Subject: CN=32dcb9a1d688a203bb990d797b12a6beb671f109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:58:ea:f7:18:60:1a:c2:b1:ef:b6:97:07:
e5:cb:0e:84:39:40:32:03:20:ae:e5:52:71:ae:74:
1f:8c:f4:c6:6a:58:07:70:c1:84:a9:b8:6f:23:19:
d3:ef:0c:16:59:3a:b7:18:c5:59:31:3a:0a:4c:f0:
0e:75:6d:de:99:63:2a:7b:c7:45:62:ba:26:35:90:
83:2f:b7:52:3a:cd:73:56:7c:a3:54:f9:1b:dd:17:
5b:44:c1:bd:70:d2:fd:04:a5:65:a7:d6:4e:34:fb:
80:33:c5:81:9e:52:cd:fd:9b:00:04:86:ac:1d:e0:
0f:ef:cc:ae:df:d0:8a:6f:aa:aa:01:20:a2:8f:17:
a5:ac:a2:c7:e7:c9:38:33:02:de:4d:a7:ae:ce:e4:
1c:f0:ca:21:d0:b7:f2:82:28:40:02:d6:3b:9f:09:
46:b9:72:57:2d:a9:c7:f2:12:30:5c:07:c8:95:93:
2d:ea:f6:f5:33:ac:51:a0:6d:9f:a5:90:e4:33:be:
78:7e:1f:e7:0b:58:83:3d:cb:74:fb:4e:73:9c:3f:
f3:2b:c9:f1:cd:2a:d7:1b:cb:af:24:ec:07:cd:fc:
86:e0:f4:f3:cf:72:b3:a2:29:19:54:3a:a6:2d:e2:
8c:f4:be:f3:59:20:e0:14:3a:e0:d9:03:ab:c0:3d:
55:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DC:B9:A1:D6:88:A2:03:BB:99:0D:79:7B:12:A6:BE:B6:71:F1:09
X509v3 Authority Key Identifier:
keyid:73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:8a:e7:99:d6:e0:f6:a4:f6:d2:8f:00:f6:cc:c3:b9:f1:49:
74:f9:60:1d:17:13:45:ac:24:93:21:b4:63:34:54:77:f4:0f:
83:69:37:92:77:76:65:f7:fa:12:66:a4:33:c7:bb:a2:06:cd:
7a:24:15:3c:1b:b3:98:8e:40:b4:04:4f:94:a8:0a:d6:c5:27:
a5:69:4e:cd:68:6e:25:96:e4:00:78:77:7f:b5:3c:10:2e:39:
37:03:a0:04:ab:75:d0:85:77:d0:32:ea:57:59:a3:79:fc:c6:
5f:51:44:21:e7:26:b6:38:ca:a7:29:c4:84:a6:45:66:20:24:
fb:f2:21:ef:59:88:75:a1:45:9d:75:72:3c:a0:85:b9:13:7b:
ca:23:80:26:47:3f:09:e3:2c:4e:11:ee:05:77:7b:2d:14:52:
3f:63:5a:00:f5:69:59:72:31:b1:0d:cf:ca:c5:ac:61:07:89:
97:d6:b0:54:63:33:1e:13:5a:60:fb:3d:28:c8:07:18:50:34:
7a:4c:54:33:39:11:70:81:8f:27:3c:e8:c5:ec:78:21:50:ef:
28:77:82:5a:98:07:85:13:00:8c:88:e3:a9:70:1f:f3:b6:eb:
ca:f9:b7:66:54:58:d3:cb:0d:1d:f6:dc:43:f0:a3:e0:2c:41:
31:95:35:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+kwnSzPYy6soRHRnFUzq6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczOTc1ZDVkYTlkYThhMDc0YjMzZmJjYjVjMDlkNTAzYTNi
NDQzYTEwHhcNMjUwNTExMDkwMDI5WhcNMjUwNTEyMDkwMDI5WjAzMTEwLwYDVQQD
EygzMmRjYjlhMWQ2ODhhMjAzYmI5OTBkNzk3YjEyYTZiZWI2NzFmMTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr91Y6vcYYBrCse+2lwflyw6EOUAy
AyCu5VJxrnQfjPTGalgHcMGEqbhvIxnT7wwWWTq3GMVZMToKTPAOdW3emWMqe8dF
YromNZCDL7dSOs1zVnyjVPkb3RdbRMG9cNL9BKVlp9ZONPuAM8WBnlLN/ZsABIas
HeAP78yu39CKb6qqASCijxelrKLH58k4MwLeTaeuzuQc8Moh0LfygihAAtY7nwlG
uXJXLanH8hIwXAfIlZMt6vb1M6xRoG2fpZDkM754fh/nC1iDPct0+05znD/zK8nx
zSrXG8uvJOwHzfyG4PTzz3KzoikZVDqmLeKM9L7zWSDgFDrg2QOrwD1VlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLcuaHWiKIDu5kNeXsSpr62cfEJMB8GA1UdIwQY
MBaAFHOXXV2p2ooHSzP7y1wJ1QOjtEOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzVkZFhhbmFpZ2RMTV92TFhBblZBNk8wUTZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mMDE3MmUtNjljMi00MjJmLTgyOTYt
OWU4MGQwZDg3YzJkLzEvYzVkZFhhbmFpZ2RMTV92TFhBblZBNk8wUTZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9mMDE3MmUtNjljMi00MjJmLTgyOTYtOWU4MGQwZDg3YzJk
LzEvYzVkZFhhbmFpZ2RMTV92TFhBblZBNk8wUTZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuIrnmdbg
9qT20o8A9szDufFJdPlgHRcTRawkkyG0YzRUd/QPg2k3knd2Zff6EmakM8e7ogbN
eiQVPBuzmI5AtARPlKgK1sUnpWlOzWhuJZbkAHh3f7U8EC45NwOgBKt10IV30DLq
V1mjefzGX1FEIecmtjjKpynEhKZFZiAk+/Ih71mIdaFFnXVyPKCFuRN7yiOAJkc/
CeMsThHuBXd7LRRSP2NaAPVpWXIxsQ3PysWsYQeJl9awVGMzHhNaYPs9KMgHGFA0
ekxUMzkRcIGPJzzoxex4IVDvKHeCWpgHhRMAjIjjqXAf87bryvm3ZlRY08sNHfbc
Q/Cj4CxBMZU1FQ==
-----END CERTIFICATE-----
Generated at Sun May 11 15:48:45 2025 by rpki-client