Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
File: 5jRhbtvWAVT6Pax36pDb18aKEy0.mft (raw, json)
Hash identifier: XETT8P28lhQ1KC1O1vUyXJni561A5zFHfby8UFeXgME=
Subject key identifier: 0C:49:72:09:36:8A:A1:81:5C:A5:9F:77:83:C4:30:76:BA:A1:0A:1C
Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
Certificate issuer: /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Certificate serial: 0196AB7A3101ED8F72D410D99FE564FDB193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
Manifest number: 12B9
Signing time: Wed 07 May 2025 16:00:33 +0000
Manifest this update: Wed 07 May 2025 16:00:33 +0000
Manifest next update: Thu 08 May 2025 16:00:33 +0000
Files and hashes: 1: 5jRhbtvWAVT6Pax36pDb18aKEy0.crl (hash: 8baFIo9gkMayR6tqEehPhOp0vRCL6jP+Zj/ulRhpCPc=)
2: VzSRXIJg549082TDLwuDhpZSHdM.roa (hash: A7LBmXbBqDdzugUEkji9OFm2eXNsHo+v5p497CjSCCA=)
3: gHDsE-M7Bds6BODdronU54n9Gb0.roa (hash: wZSAuVITgB+tf10qxZ+G6OSnVz70iDg6RypnL81jrkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 16:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:7a:31:01:ed:8f:72:d4:10:d9:9f:e5:64:fd:b1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Validity
Not Before: May 7 16:00:33 2025 GMT
Not After : May 8 16:00:33 2025 GMT
Subject: CN=0c497209368aa1815ca59f7783c43076baa10a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:d2:4d:bd:d1:f4:5f:cf:34:a4:fb:d1:5b:
73:2f:16:45:7d:4f:a7:0d:ba:fb:f3:22:b2:b6:73:
0c:04:3a:ad:f6:bb:17:08:05:92:21:97:64:94:39:
80:af:b3:6a:19:61:78:1b:95:9a:f4:50:67:94:3e:
48:01:7f:7a:cb:7e:50:56:5e:4e:79:8a:92:49:c6:
16:e2:56:06:0f:44:16:43:03:f9:7a:76:46:3a:52:
4e:f0:12:95:3f:da:36:29:87:95:7d:85:18:5c:2c:
5f:ab:ab:0f:03:b9:f7:8d:3b:c7:99:27:ad:b6:4d:
c1:7a:84:46:29:d2:60:2c:71:cf:e0:0f:0c:04:66:
52:54:fc:a5:79:b8:f8:ad:43:5c:b2:3f:58:7c:43:
a3:75:cb:94:da:59:03:a5:a1:85:f2:18:1d:76:e5:
73:9e:8f:fd:4b:19:e2:a0:b0:6c:04:82:a1:06:4d:
78:ed:1a:2c:9e:70:cf:e4:28:07:9f:e2:a3:c3:79:
11:e1:40:da:95:09:63:13:6a:f9:86:bc:8c:a9:b4:
7d:e9:64:a9:6e:50:f3:43:8a:18:79:4a:92:c1:69:
18:c5:ac:e5:0a:92:f1:4b:c0:4a:54:87:02:34:18:
fe:8d:71:ce:54:5d:6e:ca:26:65:69:f0:4d:6f:4e:
13:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:49:72:09:36:8A:A1:81:5C:A5:9F:77:83:C4:30:76:BA:A1:0A:1C
X509v3 Authority Key Identifier:
keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d2:50:2b:10:0f:21:ad:6a:cc:dd:e6:4d:d7:f4:78:9d:7c:
e3:88:8b:1e:91:5e:24:59:c5:21:95:50:34:1f:60:63:42:99:
0b:81:25:63:41:2a:af:86:5e:fc:e1:7d:a9:72:bb:41:c0:a8:
89:2d:f6:cf:9f:b5:4b:c2:8d:36:16:08:d5:cf:2e:48:dc:ee:
5e:b4:c9:69:77:b0:dc:cf:42:a9:13:bb:2c:b0:a1:f3:92:58:
67:36:fd:b5:6f:bb:30:0d:74:35:7b:ec:ae:ef:3a:e4:9b:19:
88:9a:fe:bd:28:74:62:cb:10:a9:cf:99:a3:ba:a4:04:ba:74:
cb:a2:5d:40:9c:16:88:b0:47:38:20:87:0d:e3:ac:52:b0:63:
be:1d:ad:8a:48:7d:b5:e5:19:3f:81:74:85:e7:9a:24:37:88:
27:4f:be:a9:cd:65:79:d0:47:ab:63:be:dd:40:e5:46:23:8e:
eb:44:4e:ac:f0:58:6f:f8:eb:0c:4e:f3:99:b9:c6:1a:90:fe:
a1:39:9e:c0:84:fd:0f:c4:c4:82:b2:54:60:15:f3:90:23:8c:
64:2c:d0:ea:8f:95:fe:b0:3e:ef:cf:57:e9:c9:8e:75:eb:0f:
e3:80:30:3d:68:07:85:5e:55:58:d3:ad:37:3e:21:a5:84:ad:
2d:b4:f6:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZarejEB7Y9y1BDZn+Vk/bGTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MzQ2MTZlZGJkNjAxNTRmYTNkYWM3N2VhOTBkYmQ3YzY4
YTEzMmQwHhcNMjUwNTA3MTYwMDMzWhcNMjUwNTA4MTYwMDMzWjAzMTEwLwYDVQQD
EygwYzQ5NzIwOTM2OGFhMTgxNWNhNTlmNzc4M2M0MzA3NmJhYTEwYTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEjSTb3R9F/PNKT70VtzLxZFfU+n
Dbr78yKytnMMBDqt9rsXCAWSIZdklDmAr7NqGWF4G5Wa9FBnlD5IAX96y35QVl5O
eYqSScYW4lYGD0QWQwP5enZGOlJO8BKVP9o2KYeVfYUYXCxfq6sPA7n3jTvHmSet
tk3BeoRGKdJgLHHP4A8MBGZSVPylebj4rUNcsj9YfEOjdcuU2lkDpaGF8hgdduVz
no/9SxnioLBsBIKhBk147RosnnDP5CgHn+Kjw3kR4UDalQljE2r5hryMqbR96WSp
blDzQ4oYeUqSwWkYxazlCpLxS8BKVIcCNBj+jXHOVF1uyiZlafBNb04TcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxJcgk2iqGBXKWfd4PEMHa6oQocMB8GA1UdIwQY
MBaAFOY0YW7b1gFU+j2sd+qQ29fGihMtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWpSaGJ0dldBVlQ2UGF4MzZwRGIxOGFLRXkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9mMjkyNjgtMmM2YS00ZTlkLWFhMmQt
ZDk5MjMxZTQ2NDU3LzEvNWpSaGJ0dldBVlQ2UGF4MzZwRGIxOGFLRXkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9mMjkyNjgtMmM2YS00ZTlkLWFhMmQtZDk5MjMxZTQ2NDU3
LzEvNWpSaGJ0dldBVlQ2UGF4MzZwRGIxOGFLRXkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9JQKxAP
Ia1qzN3mTdf0eJ1844iLHpFeJFnFIZVQNB9gY0KZC4ElY0Eqr4Ze/OF9qXK7QcCo
iS32z5+1S8KNNhYI1c8uSNzuXrTJaXew3M9CqRO7LLCh85JYZzb9tW+7MA10NXvs
ru865JsZiJr+vSh0YssQqc+Zo7qkBLp0y6JdQJwWiLBHOCCHDeOsUrBjvh2tikh9
teUZP4F0heeaJDeIJ0++qc1ledBHq2O+3UDlRiOO60ROrPBYb/jrDE7zmbnGGpD+
oTmewIT9D8TEgrJUYBXzkCOMZCzQ6o+V/rA+789X6cmOdesP44AwPWgHhV5VWNOt
Nz4hpYStLbT2aQ==
-----END CERTIFICATE-----
Generated at Thu May 8 02:20:41 2025 by rpki-client