Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
File: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft (raw, json)
Hash identifier: LwMdhR2fQc8PpKXCkss27qPnOvGDNMY3Mh0CUwYdmJk=
Subject key identifier: D9:BD:C6:D2:E1:07:92:25:72:0E:70:C2:CF:C1:71:93:BA:B6:9C:B1
Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94
Certificate serial: 0196C193E6408E3E9B5A74181A3CD1BE1F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
Manifest number: 0FC6
Signing time: Sun 11 May 2025 23:00:17 +0000
Manifest this update: Sun 11 May 2025 23:00:17 +0000
Manifest next update: Mon 12 May 2025 23:00:17 +0000
Files and hashes: 1: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl (hash: L+McJnPY3N99yRkVW/mA6lnj11QTO0VfsJRW62H1OwY=)
2: QjltdHgB4W_2eDHH-42Rsn7haU4.roa (hash: GyEMXz3VqmF7vL4u7u/PEu1jMNaIBLH5FqjmQMneOuk=)
3: ik_n3d34B4WKWLhhwqx1Hs4Gq10.roa (hash: SF4FNJqkU5gIwE/u+5gu4fhisTugNMrqP4zHCgZbpN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:93:e6:40:8e:3e:9b:5a:74:18:1a:3c:d1:be:1f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94
Validity
Not Before: May 11 23:00:17 2025 GMT
Not After : May 12 23:00:17 2025 GMT
Subject: CN=d9bdc6d2e1079225720e70c2cfc17193bab69cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e3:bc:99:b0:cc:7e:72:14:e8:5c:49:09:bf:
75:c5:b8:e5:c8:1c:a6:42:44:27:f9:25:68:21:71:
5c:ce:a5:c0:3c:79:d3:e1:01:63:03:6b:c5:2b:55:
8d:86:45:f3:04:1a:b4:ad:c0:5d:8c:3c:8c:99:dc:
87:27:5f:a2:9e:09:4a:d3:89:68:61:1b:3e:20:d9:
ad:72:90:5c:87:7a:b2:d5:dc:4d:cc:2d:ab:de:50:
71:51:51:9d:f6:be:bd:a9:9d:68:81:f9:19:4c:35:
12:ea:d0:1f:d0:5a:92:6d:8e:7b:90:4a:5a:9a:f7:
b4:73:b2:39:e7:07:d5:2a:ec:ab:0f:1e:97:f1:a2:
55:69:c1:99:31:c5:60:eb:d6:fd:af:4d:b7:55:82:
db:b9:95:24:fb:44:11:e2:6f:b8:d2:43:f8:28:15:
d9:f8:7d:94:da:37:e2:05:fc:f2:8d:c0:b8:72:05:
c2:94:6c:78:76:1e:b0:e2:5f:d6:bc:6c:ab:b2:bc:
76:db:97:97:84:ec:83:90:b8:aa:25:f5:d6:b3:72:
cd:94:55:de:f9:17:54:87:cb:0f:6a:f1:2d:40:67:
f7:e1:08:29:0b:60:84:d8:5e:5b:ac:3d:e3:34:e1:
5e:b4:44:a3:14:67:ad:a7:a0:02:51:91:ca:77:5a:
e7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BD:C6:D2:E1:07:92:25:72:0E:70:C2:CF:C1:71:93:BA:B6:9C:B1
X509v3 Authority Key Identifier:
keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f6:37:dd:17:ee:0e:b2:d1:79:7d:0c:9c:71:ba:a2:de:7b:
a6:92:4c:b6:11:ad:9f:3b:d8:ee:c7:42:04:cc:64:e0:3f:09:
73:0b:e0:42:bc:a7:75:be:00:fe:4b:da:40:9f:f0:d6:c9:63:
d4:e3:d5:53:5a:f1:fe:22:5e:07:d6:ad:8e:a8:52:c9:d1:6e:
c7:9a:dc:01:66:65:6b:32:4c:39:1a:f9:2a:50:01:69:bd:99:
7c:11:cc:98:23:6c:e4:86:92:79:45:b8:6a:43:98:66:1a:5a:
b2:a7:93:d5:db:00:a3:89:05:a0:c6:aa:35:ae:82:b5:f4:96:
ff:b8:73:e6:0c:85:33:10:28:ea:2a:f6:46:47:d1:24:c5:38:
4c:3c:da:5d:8e:df:7a:44:56:79:5b:ff:cc:89:34:d2:d7:1f:
b3:3a:af:bb:ef:2a:0e:b7:5a:b5:a1:16:45:c5:4e:54:6e:ee:
be:09:ad:6b:90:36:bf:ee:9e:ea:33:6e:4b:f2:d3:06:2d:d0:
f3:c8:ab:6a:33:76:c6:1c:b2:ee:6b:19:32:d6:c1:bc:bf:92:
0e:f9:7f:78:9b:9a:94:af:8e:a8:ce:99:49:67:1e:a8:21:fc:
dd:62:55:c6:17:35:e3:da:37:8f:29:e3:fb:17:3a:4d:f3:69:
19:14:42:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBk+ZAjj6bWnQYGjzRvh8vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MzM0YWQ5YjNmYzUyMTAzMGJlOTlhNTE1NzIxMWI2NjMy
MTZjOTQwHhcNMjUwNTExMjMwMDE3WhcNMjUwNTEyMjMwMDE3WjAzMTEwLwYDVQQD
EyhkOWJkYzZkMmUxMDc5MjI1NzIwZTcwYzJjZmMxNzE5M2JhYjY5Y2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuO8mbDMfnIU6FxJCb91xbjlyBym
QkQn+SVoIXFczqXAPHnT4QFjA2vFK1WNhkXzBBq0rcBdjDyMmdyHJ1+inglK04lo
YRs+INmtcpBch3qy1dxNzC2r3lBxUVGd9r69qZ1ogfkZTDUS6tAf0FqSbY57kEpa
mve0c7I55wfVKuyrDx6X8aJVacGZMcVg69b9r023VYLbuZUk+0QR4m+40kP4KBXZ
+H2U2jfiBfzyjcC4cgXClGx4dh6w4l/WvGyrsrx225eXhOyDkLiqJfXWs3LNlFXe
+RdUh8sPavEtQGf34QgpC2CE2F5brD3jNOFetESjFGetp6ACUZHKd1rnvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNm9xtLhB5Ilcg5wws/BcZO6tpyxMB8GA1UdIwQY
MBaAFOczStmz/FIQML6ZpRVyEbZjIWyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXpOSzJiUDhVaEF3dnBtbEZYSVJ0bU1oYkpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iMDRiMmUtNzNlNi00ODg3LThkZjEt
MzcyMmRmMDczNjAzLzEvNXpOSzJiUDhVaEF3dnBtbEZYSVJ0bU1oYkpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iMDRiMmUtNzNlNi00ODg3LThkZjEtMzcyMmRmMDczNjAz
LzEvNXpOSzJiUDhVaEF3dnBtbEZYSVJ0bU1oYkpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvY33Rfu
DrLReX0MnHG6ot57ppJMthGtnzvY7sdCBMxk4D8JcwvgQryndb4A/kvaQJ/w1slj
1OPVU1rx/iJeB9atjqhSydFux5rcAWZlazJMORr5KlABab2ZfBHMmCNs5IaSeUW4
akOYZhpasqeT1dsAo4kFoMaqNa6CtfSW/7hz5gyFMxAo6ir2RkfRJMU4TDzaXY7f
ekRWeVv/zIk00tcfszqvu+8qDrdataEWRcVOVG7uvgmta5A2v+6e6jNuS/LTBi3Q
88irajN2xhyy7msZMtbBvL+SDvl/eJualK+OqM6ZSWceqCH83WJVxhc149o3jynj
+xc6TfNpGRRCEw==
-----END CERTIFICATE-----
Generated at Mon May 12 02:28:18 2025 by rpki-client