Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
File: 5QxErpgedJLTuiHihHIIAYA5jWQ.mft (raw, json)
Hash identifier: o7HEp8Gwffb1UlgXOXy1Ef7IRW31N6WW5tFYwgFdWRo=
Subject key identifier: 4A:D9:0C:8A:13:B8:BB:6A:8A:02:80:C5:85:0A:AB:7A:F0:21:FD:17
Authority key identifier: E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
Certificate issuer: /CN=e50c44ae981e7492d3ba21e28472080180398d64
Certificate serial: 0196C0B8C2D0B2793C10AD48095B4132261D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 19:00:56 +0000
Manifest this update: Sun 11 May 2025 19:00:56 +0000
Manifest next update: Mon 12 May 2025 19:00:56 +0000
Files and hashes: 1: 5QxErpgedJLTuiHihHIIAYA5jWQ.crl (hash: oat1TCJImp+DdESsxF7iRKLEQywMq+Yo+QTe6mWT1EI=)
2: XqJnQtK-Eb1fVOe5J4HfD-Z2VPA.roa (hash: JXjpjJMP71nmxtEw4MnCOZWcY+ewObU/MkJxejPuf3g=)
3: ZU5mIuhec-w4R0nc_UEougNeTzM.roa (hash: Ryu8faEPK4CmfRJ6AZyYHPiiRBpNAisMzS6dIeA5uz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:c2:d0:b2:79:3c:10:ad:48:09:5b:41:32:26:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c44ae981e7492d3ba21e28472080180398d64
Validity
Not Before: May 11 19:00:56 2025 GMT
Not After : May 12 19:00:56 2025 GMT
Subject: CN=4ad90c8a13b8bb6a8a0280c5850aab7af021fd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f2:38:64:2b:69:ce:22:6a:1b:99:12:0e:07:
c9:57:9c:7e:59:a4:14:9e:8b:c9:2a:b0:fb:a6:cc:
88:a1:df:c1:47:db:a6:81:de:79:a4:c2:50:41:ba:
e5:0e:12:30:5a:ce:d4:7d:5a:c8:eb:de:6c:73:22:
e9:37:a9:95:b1:6c:af:63:b1:40:bb:59:17:4c:e1:
ab:b8:c1:da:41:3a:0e:a2:9c:af:9c:0a:81:d7:a8:
fb:18:b6:e7:a8:c4:5e:77:96:23:7a:fa:49:ff:9e:
23:33:92:a4:62:57:1a:c7:c6:e8:57:0c:a8:8b:49:
53:58:8f:0b:8c:ae:38:a4:3d:79:13:2d:58:96:3d:
e1:d2:8b:e7:ef:2d:bd:46:63:7e:2d:18:0f:e0:e2:
54:cf:7e:44:0f:18:ca:c3:43:aa:72:15:fc:1a:ca:
d6:b2:4d:29:ab:23:0e:c2:c8:8e:ed:d3:7e:df:20:
23:92:e7:ef:f1:ed:e0:48:24:b9:44:f0:27:57:d1:
04:3e:94:4f:91:b7:91:4f:36:68:ab:6b:e3:7e:1e:
61:3a:44:8c:8c:cc:27:f7:da:39:af:17:8d:d7:19:
c8:08:e2:2c:89:4d:a5:6f:8a:e7:a1:d3:c8:b5:89:
79:98:fa:f0:2a:60:8e:9a:b2:eb:f8:18:79:ed:36:
74:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D9:0C:8A:13:B8:BB:6A:8A:02:80:C5:85:0A:AB:7A:F0:21:FD:17
X509v3 Authority Key Identifier:
keyid:E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:89:93:1c:6a:c6:69:50:13:65:3e:e3:25:a9:fa:00:57:91:
3d:0f:84:e7:2f:88:e7:a8:29:3f:39:2b:07:b0:55:71:06:0d:
76:5e:c4:d8:82:e6:31:8e:b3:e6:7b:0c:f8:a9:22:0d:ca:ab:
98:63:28:21:c0:0e:29:20:5f:46:db:7e:51:cc:ba:c7:db:09:
ab:f5:69:d5:69:75:5c:55:2e:d5:99:4a:40:6e:96:44:66:4f:
32:03:0b:ca:ee:58:e6:2e:4d:5b:12:a6:9f:3f:fa:d0:82:d2:
d0:96:ba:c7:63:17:02:40:c8:ff:4a:65:7d:7e:77:9b:f5:7c:
82:39:e0:44:3c:d3:52:87:a8:e8:d0:40:b3:fe:6f:f6:45:f6:
ec:1a:e7:55:ee:1f:66:4b:60:fe:4e:77:eb:b6:66:97:a3:e4:
4e:45:dd:78:9d:40:06:35:f2:92:ba:89:0c:3a:99:d1:7e:4e:
c7:39:41:10:28:ff:32:b7:41:89:47:6d:34:b9:11:01:c7:12:
ab:23:0e:1c:0c:90:96:0f:3e:7b:64:fb:7b:8d:b3:6d:67:fe:
da:ce:c1:c8:9b:04:d5:07:b9:14:37:61:8c:c1:7b:bf:84:a1:
09:6f:0a:9f:08:42:91:36:cb:f2:db:86:dd:68:bb:90:16:05:
12:3d:70:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAuMLQsnk8EK1ICVtBMiYdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MGM0NGFlOTgxZTc0OTJkM2JhMjFlMjg0NzIwODAxODAz
OThkNjQwHhcNMjUwNTExMTkwMDU2WhcNMjUwNTEyMTkwMDU2WjAzMTEwLwYDVQQD
Eyg0YWQ5MGM4YTEzYjhiYjZhOGEwMjgwYzU4NTBhYWI3YWYwMjFmZDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PI4ZCtpziJqG5kSDgfJV5x+WaQU
novJKrD7psyIod/BR9umgd55pMJQQbrlDhIwWs7UfVrI695scyLpN6mVsWyvY7FA
u1kXTOGruMHaQToOopyvnAqB16j7GLbnqMRed5YjevpJ/54jM5KkYlcax8boVwyo
i0lTWI8LjK44pD15Ey1Ylj3h0ovn7y29RmN+LRgP4OJUz35EDxjKw0OqchX8GsrW
sk0pqyMOwsiO7dN+3yAjkufv8e3gSCS5RPAnV9EEPpRPkbeRTzZoq2vjfh5hOkSM
jMwn99o5rxeN1xnICOIsiU2lb4rnodPItYl5mPrwKmCOmrLr+Bh57TZ0VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErZDIoTuLtqigKAxYUKq3rwIf0XMB8GA1UdIwQY
MBaAFOUMRK6YHnSS07oh4oRyCAGAOY1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVF4RXJwZ2VkSkxUdWlIaWhISUlBWUE1aldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yMjYwMTgtMGUwNi00MzVlLWFiZmQt
ZjVmZmVlMTcyMGMxLzEvNVF4RXJwZ2VkSkxUdWlIaWhISUlBWUE1aldRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8yMjYwMTgtMGUwNi00MzVlLWFiZmQtZjVmZmVlMTcyMGMx
LzEvNVF4RXJwZ2VkSkxUdWlIaWhISUlBWUE1aldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4mTHGrG
aVATZT7jJan6AFeRPQ+E5y+I56gpPzkrB7BVcQYNdl7E2ILmMY6z5nsM+KkiDcqr
mGMoIcAOKSBfRtt+Ucy6x9sJq/Vp1Wl1XFUu1ZlKQG6WRGZPMgMLyu5Y5i5NWxKm
nz/60ILS0Ja6x2MXAkDI/0plfX53m/V8gjngRDzTUoeo6NBAs/5v9kX27BrnVe4f
Zktg/k5367Zml6PkTkXdeJ1ABjXykrqJDDqZ0X5OxzlBECj/MrdBiUdtNLkRAccS
qyMOHAyQlg8+e2T7e42zbWf+2s7ByJsE1Qe5FDdhjMF7v4ShCW8KnwhCkTbL8tuG
3Wi7kBYFEj1wrw==
-----END CERTIFICATE-----
Generated at Sun May 11 22:56:44 2025 by rpki-client