Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File: 5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier: JVF5wcoiZoWCOy4jZfuZIxgGq+hoFO+HXKdDvcs5bTk=
Subject key identifier: 2B:CA:72:43:6B:D5:20:F2:8E:DA:17:34:90:86:A1:6D:D1:D5:E1:DF
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer: /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial: 0196C5A8183D5C7187B9C47042BA10C1BD53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number: 0BC5
Signing time: Mon 12 May 2025 18:00:49 +0000
Manifest this update: Mon 12 May 2025 18:00:49 +0000
Manifest next update: Tue 13 May 2025 18:00:49 +0000
Files and hashes: 1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: jrC7BCIV2N9vdL+RvtR3l6crebpQDeB7Thu6hMVtMNc=)
2: PPydfwM1qrJ_5LEP2Lu7pEc74lg.roa (hash: pMnth1QdrHrp1n0i0bRqhdBwVaon4su5sBWJ9WYdSts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:18:3d:5c:71:87:b9:c4:70:42:ba:10:c1:bd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
Validity
Not Before: May 12 18:00:49 2025 GMT
Not After : May 13 18:00:49 2025 GMT
Subject: CN=2bca72436bd520f28eda17349086a16dd1d5e1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f3:60:e9:6f:a0:88:14:f2:50:08:78:c6:c7:
bd:8d:8b:23:93:56:32:b1:59:43:dc:ab:6a:96:c8:
4d:6c:33:91:96:07:a5:36:f9:1b:16:6b:88:b4:3f:
91:1c:d0:1f:0a:ea:c7:40:9c:f7:27:c2:74:7d:7b:
5a:51:b2:69:33:2f:4e:ae:f7:29:e0:b6:90:22:91:
86:ad:7c:fa:0e:2b:d5:80:d9:46:d8:b9:2b:90:c6:
b5:b8:76:da:46:36:87:43:8e:a9:86:7e:0e:2e:27:
d2:ab:3b:98:3e:26:db:99:5f:88:4a:11:09:90:f4:
0f:b8:7e:74:d9:1f:00:ce:6d:51:53:dd:1c:f7:b7:
f8:86:1f:aa:45:4d:b0:6a:49:ba:53:77:d0:81:42:
8b:5c:90:f1:38:ee:34:66:44:2c:ea:51:a0:ea:68:
24:41:03:5a:e7:08:ce:31:4b:c2:c7:44:21:ad:2b:
fe:2b:c4:1e:f8:e2:40:ec:57:f7:cd:47:db:b8:09:
0a:d6:83:4c:c3:23:45:97:14:3c:cc:aa:d5:0b:1a:
31:4b:da:39:b4:3b:16:24:e7:d9:4b:73:0c:3f:52:
c2:51:42:9d:f8:32:c2:df:8b:c0:06:6f:c5:81:18:
e4:37:bc:57:9d:33:ca:e9:79:80:58:6e:b1:c3:f4:
48:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CA:72:43:6B:D5:20:F2:8E:DA:17:34:90:86:A1:6D:D1:D5:E1:DF
X509v3 Authority Key Identifier:
keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c7:e7:f0:8c:e5:8a:29:bd:d5:dc:26:eb:18:ef:b2:d9:ed:
97:3d:3d:2b:dc:b9:0d:40:1c:15:e0:d4:e3:19:1d:b4:cd:4a:
94:a0:46:5a:b0:fd:ff:79:6a:b7:a1:5a:9e:7d:2b:a2:ed:37:
b8:bf:bf:fa:32:35:a6:43:03:d8:dc:50:7b:98:2f:4b:4f:53:
d1:5b:1e:26:3c:9f:c9:cf:f1:9d:f3:54:3a:29:69:dc:b3:dc:
97:51:dc:4c:df:99:b6:35:5e:2e:c8:f8:60:73:23:c1:ed:95:
9e:ef:0f:93:8e:e5:b0:a8:ae:05:31:fb:e0:90:d7:8d:a4:c5:
e7:b1:a0:0a:bb:9c:30:c3:b5:ca:6b:9b:f7:ed:c5:1b:8c:fb:
66:41:98:79:f1:69:30:94:a9:c7:90:96:10:01:cf:48:8d:6b:
06:af:b0:dd:b4:fa:c7:d0:58:c7:40:49:dc:7a:2d:79:c5:2f:
0d:62:14:22:67:24:be:98:20:9c:b4:de:87:06:5f:3d:5a:5d:
8e:6d:66:a9:44:32:46:7c:f2:27:21:8a:15:ff:84:10:84:ee:
d9:f5:52:c1:83:d3:07:1b:9d:e4:75:3c:82:76:5d:10:80:de:
ca:c4:1b:50:d5:84:85:b4:cc:01:95:9c:25:fe:2a:8d:ab:fa:
18:06:08:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFqBg9XHGHucRwQroQwb1TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NTAyMjAwYTZlNjNmNzYzOTdhZGI5NGRmZDgzNGMxMTY4
MDliOWYwHhcNMjUwNTEyMTgwMDQ5WhcNMjUwNTEzMTgwMDQ5WjAzMTEwLwYDVQQD
EygyYmNhNzI0MzZiZDUyMGYyOGVkYTE3MzQ5MDg2YTE2ZGQxZDVlMWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9fNg6W+giBTyUAh4xse9jYsjk1Yy
sVlD3KtqlshNbDORlgelNvkbFmuItD+RHNAfCurHQJz3J8J0fXtaUbJpMy9Orvcp
4LaQIpGGrXz6DivVgNlG2LkrkMa1uHbaRjaHQ46phn4OLifSqzuYPibbmV+IShEJ
kPQPuH502R8Azm1RU90c97f4hh+qRU2wakm6U3fQgUKLXJDxOO40ZkQs6lGg6mgk
QQNa5wjOMUvCx0QhrSv+K8Qe+OJA7Ff3zUfbuAkK1oNMwyNFlxQ8zKrVCxoxS9o5
tDsWJOfZS3MMP1LCUUKd+DLC34vABm/FgRjkN7xXnTPK6XmAWG6xw/RI6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvKckNr1SDyjtoXNJCGoW3R1eHfMB8GA1UdIwQY
MBaAFOZQIgCm5j92OXrblN/YNMEWgJufMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWxBaUFLYm1QM1k1ZXR1VTM5ZzB3UmFBbTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy85ZmY2MDItYjBiZC00YzNmLWFmOTQt
MmZjMzRhZDlkZDQ3LzEvNWxBaUFLYm1QM1k1ZXR1VTM5ZzB3UmFBbTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy85ZmY2MDItYjBiZC00YzNmLWFmOTQtMmZjMzRhZDlkZDQ3
LzEvNWxBaUFLYm1QM1k1ZXR1VTM5ZzB3UmFBbTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApcfn8Izl
iim91dwm6xjvstntlz09K9y5DUAcFeDU4xkdtM1KlKBGWrD9/3lqt6Fann0rou03
uL+/+jI1pkMD2NxQe5gvS09T0VseJjyfyc/xnfNUOilp3LPcl1HcTN+ZtjVeLsj4
YHMjwe2Vnu8Pk47lsKiuBTH74JDXjaTF57GgCrucMMO1ymub9+3FG4z7ZkGYefFp
MJSpx5CWEAHPSI1rBq+w3bT6x9BYx0BJ3HotecUvDWIUImckvpggnLTehwZfPVpd
jm1mqUQyRnzyJyGKFf+EEITu2fVSwYPTBxud5HU8gnZdEIDeysQbUNWEhbTMAZWc
Jf4qjav6GAYIjQ==
-----END CERTIFICATE-----
Generated at Tue May 13 00:05:57 2025 by rpki-client