Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: xkK/mqeT8/d4bIhMde7X3P7PpgEXJ8jeVL/9/Y3aCrY=
Subject key identifier: 73:07:15:55:B7:9B:69:9A:D5:ED:7E:DB:61:73:C6:55:23:7D:85:8F
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 01969E9AE3A22251376D8744F30258B784CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 04:01:12 +0000
Manifest this update: Mon 05 May 2025 04:01:12 +0000
Manifest next update: Tue 06 May 2025 04:01:12 +0000
Files and hashes: 1: 963pl4kMqERhlH5zQNINJ9q-oB4.roa (hash: BOAkYmCmSJL+jWIjxEb3nC4tx8Y5C6plreJ8j+irwHk=)
2: 9nSaJxHrbQ3QEW5mfZiYPpI-ugo.roa (hash: wy2LzSvu/dsXfdQ3akCDVPoEcY+5eaESxs8S9jGdusU=)
3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: DoeSzFTOhdeYFb8WAXKp2GLMhdEFgOlbs3+OkmIHtj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:e3:a2:22:51:37:6d:87:44:f3:02:58:b7:84:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: May 5 04:01:12 2025 GMT
Not After : May 6 04:01:12 2025 GMT
Subject: CN=73071555b79b699ad5ed7edb6173c655237d858f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:d0:e6:55:d8:d5:62:39:0f:ed:5c:a8:dc:
88:b0:4b:f0:4b:ca:73:76:7a:0d:2f:79:9a:b3:6a:
51:38:42:ff:63:d9:2d:53:4d:50:8c:6a:b1:f0:38:
7c:e2:22:2a:25:4f:eb:07:10:77:23:30:7e:c9:21:
0b:45:89:7f:84:c6:03:de:90:6d:8b:4a:19:8c:73:
3f:d9:8f:c8:fb:69:60:a2:89:21:4d:c0:b3:03:fc:
8e:ac:5f:5b:f8:5e:d7:75:59:77:cc:85:d7:d4:dc:
20:8d:c6:eb:27:ff:c5:9b:d0:77:94:6e:e4:0d:f6:
0d:5b:0c:46:5e:71:ce:ce:09:93:94:c6:48:5b:b7:
32:ab:dc:74:b7:20:80:0a:fd:8e:99:99:e0:3c:ef:
c8:4b:ab:2b:7c:ab:47:1a:1c:67:f7:e8:ad:b2:37:
d8:00:cd:a7:38:fa:0e:2a:ba:d4:55:83:3d:69:c3:
c4:a7:35:65:97:94:ca:07:47:c9:61:29:e0:7f:be:
05:b2:e1:62:11:c6:1b:0a:7a:f6:9a:3d:07:ac:84:
d9:7e:02:9b:13:b5:af:ff:d1:18:09:41:25:89:7e:
ab:03:ee:f0:53:d9:60:ce:ff:c0:69:c5:3c:42:25:
8d:1e:d5:77:94:ea:f7:41:aa:e9:8e:1a:d7:91:2c:
c4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:07:15:55:B7:9B:69:9A:D5:ED:7E:DB:61:73:C6:55:23:7D:85:8F
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4d:ee:a5:33:37:c8:bb:b5:48:8c:05:57:2d:ab:28:9c:d8:
96:95:e4:d3:c4:d0:21:b5:09:79:69:75:d9:b3:98:10:35:c5:
ca:84:e1:38:65:b0:04:ec:2c:1b:0b:cc:3b:4a:f4:86:25:9b:
a1:cd:10:b6:ad:50:ed:cd:4c:84:e2:1b:1b:9f:0c:af:75:f8:
3d:3b:8e:e7:61:b2:a5:ca:84:3e:f4:4d:40:02:f1:ff:ca:e7:
c1:e9:b9:49:45:19:6f:db:43:a3:db:c4:da:62:15:5b:3c:a6:
ac:19:68:55:83:67:e5:0f:d4:95:71:f8:f2:6f:7c:04:78:5b:
84:96:b0:a9:85:0c:0f:b3:2f:5e:f1:4f:ed:ad:23:ef:ba:8f:
6b:ac:fb:ad:36:7b:0a:54:a1:a6:63:e4:87:07:b2:28:59:e4:
e8:39:77:d9:79:d3:0e:48:7e:1c:d6:82:67:6f:be:1e:f1:a1:
12:b5:ff:26:43:ce:28:56:52:22:88:8e:23:f8:ac:f9:d7:b7:
c0:16:6e:8d:a5:e4:e4:e6:fe:ba:d9:1c:ad:22:e5:19:1d:26:
0a:fa:69:78:d4:bc:7d:d6:d1:c6:06:6b:f8:77:39:34:c8:38:
e3:4e:7f:1e:46:c7:60:3b:c9:08:b8:0b:b2:97:10:1d:a4:e5:
97:f2:d0:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaemuOiIlE3bYdE8wJYt4TOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MWU0YjE3OWUwOTUzYjllY2M1ODVhZDk4NTlhMDBiZTM1
NjgwMDEwHhcNMjUwNTA1MDQwMTEyWhcNMjUwNTA2MDQwMTEyWjAzMTEwLwYDVQQD
Eyg3MzA3MTU1NWI3OWI2OTlhZDVlZDdlZGI2MTczYzY1NTIzN2Q4NThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rDQ5lXY1WI5D+1cqNyIsEvwS8pz
dnoNL3mas2pROEL/Y9ktU01QjGqx8Dh84iIqJU/rBxB3IzB+ySELRYl/hMYD3pBt
i0oZjHM/2Y/I+2lgookhTcCzA/yOrF9b+F7XdVl3zIXX1NwgjcbrJ//Fm9B3lG7k
DfYNWwxGXnHOzgmTlMZIW7cyq9x0tyCACv2OmZngPO/IS6srfKtHGhxn9+itsjfY
AM2nOPoOKrrUVYM9acPEpzVll5TKB0fJYSngf74FsuFiEcYbCnr2mj0HrITZfgKb
E7Wv/9EYCUEliX6rA+7wU9lgzv/AacU8QiWNHtV3lOr3QarpjhrXkSzE7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMHFVW3m2ma1e1+22FzxlUjfYWPMB8GA1UdIwQY
MBaAFJkeSxeeCVO57MWFrZhZoAvjVoABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYt
ZWY5Yzk1Mjc2OTMyLzEvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYtZWY5Yzk1Mjc2OTMy
LzEvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZU3upTM3
yLu1SIwFVy2rKJzYlpXk08TQIbUJeWl12bOYEDXFyoThOGWwBOwsGwvMO0r0hiWb
oc0Qtq1Q7c1MhOIbG58Mr3X4PTuO52GypcqEPvRNQALx/8rnwem5SUUZb9tDo9vE
2mIVWzymrBloVYNn5Q/UlXH48m98BHhbhJawqYUMD7MvXvFP7a0j77qPa6z7rTZ7
ClShpmPkhweyKFnk6Dl32XnTDkh+HNaCZ2++HvGhErX/JkPOKFZSIoiOI/is+de3
wBZujaXk5Ob+utkcrSLlGR0mCvppeNS8fdbRxgZr+Hc5NMg4405/HkbHYDvJCLgL
spcQHaTll/LQZA==
-----END CERTIFICATE-----
Generated at Mon May 5 12:24:31 2025 by rpki-client