Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
File: 5gRDG1VUd8GaP0xcttEHNljVs-M.mft (raw, json)
Hash identifier: mVVEVbGq21a0x62Gb3OXZOQ8JIKq/tHBFozdvDyMZOU=
Subject key identifier: 21:EE:5B:95:B6:62:C6:F5:AD:D9:A8:3C:C5:D5:69:22:7E:16:95:60
Authority key identifier: E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
Certificate issuer: /CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Certificate serial: 0196CBA9C7CE23203D8F6940B2F929085064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
Manifest number: 0B7D
Signing time: Tue 13 May 2025 22:00:23 +0000
Manifest this update: Tue 13 May 2025 22:00:23 +0000
Manifest next update: Wed 14 May 2025 22:00:23 +0000
Files and hashes: 1: 5gRDG1VUd8GaP0xcttEHNljVs-M.crl (hash: 5P5UKQrVlAIcAwHamjFTISXagDHC5+Cm1rdFVuyzLE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:a9:c7:ce:23:20:3d:8f:69:40:b2:f9:29:08:50:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Validity
Not Before: May 13 22:00:23 2025 GMT
Not After : May 14 22:00:23 2025 GMT
Subject: CN=21ee5b95b662c6f5add9a83cc5d569227e169560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d1:9c:1f:0d:27:4b:ae:c6:05:58:73:87:66:
1a:c0:ab:dd:a9:0e:72:f5:ce:7c:c7:d3:86:e6:c9:
a8:ac:7c:d1:59:58:fc:90:ea:e3:f2:95:e1:73:0d:
4f:c2:e0:bd:5c:cd:e8:c0:44:08:2f:9f:20:de:5a:
8e:65:51:ad:96:0a:19:02:57:1e:5e:73:80:4f:7b:
ce:b4:ee:2a:f4:21:c1:62:81:c8:20:9a:5d:1c:67:
88:bd:04:bb:d3:70:88:87:6f:8f:c6:3b:66:dd:43:
35:04:10:51:2b:d5:4f:bd:f5:09:ac:cf:07:ff:66:
fd:21:f6:98:92:f1:e9:d3:05:ed:d4:ae:9b:70:78:
56:1c:dc:ad:2d:24:b7:87:2f:a7:8d:72:da:1f:b6:
62:d7:c4:02:57:4d:28:42:db:e0:1c:86:0f:a7:b8:
1a:85:24:fd:e6:3f:88:3b:ae:e4:1a:69:d4:cb:69:
28:b1:1d:fc:e8:06:ad:a8:ec:19:a6:d1:fc:8c:df:
13:9e:0d:74:b8:24:31:3e:e0:4d:5d:22:c7:f9:95:
12:fb:49:cf:76:08:42:05:85:3e:08:48:4a:a6:0a:
02:94:21:cc:a0:25:7b:ec:5c:53:38:d0:8a:e5:46:
92:02:64:d0:87:53:9a:86:ea:c1:6d:56:67:20:00:
da:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EE:5B:95:B6:62:C6:F5:AD:D9:A8:3C:C5:D5:69:22:7E:16:95:60
X509v3 Authority Key Identifier:
keyid:E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4c:25:da:5b:74:9a:b0:c5:81:ed:eb:28:70:96:fc:f3:fd:
64:f8:64:18:9f:e4:dc:72:10:a2:10:b1:46:0c:87:93:b2:62:
5a:65:e2:e9:81:5e:5d:0b:5d:7d:66:e8:b0:a8:80:44:3f:90:
d0:44:95:dc:61:4b:7e:fd:83:9d:01:0d:5c:2e:56:5b:f8:a5:
01:b8:f9:4b:f2:c5:b0:10:02:1a:da:a3:20:8d:11:dd:a5:dd:
32:3d:da:e8:fe:01:f2:7d:8b:bd:3a:95:30:dd:c0:65:41:c2:
80:57:61:fd:2f:6e:49:f3:c4:cb:0d:42:79:93:a2:02:72:41:
8d:d7:61:15:65:87:57:57:17:22:65:f6:eb:77:44:6a:05:10:
65:c3:f3:5f:75:06:2c:aa:00:04:f6:8a:c1:df:0f:53:8c:a7:
de:73:b7:16:e8:37:b5:6d:03:9c:0e:c5:bc:6f:8a:67:0b:3a:
d7:a9:a7:0e:aa:bc:8f:8e:35:36:07:30:f8:83:eb:35:17:8e:
d7:23:7c:ac:2a:dc:d6:44:0c:bd:40:e3:10:cf:48:b4:fa:bf:
a0:c2:9d:44:26:a7:66:4f:32:22:b6:e2:79:7f:72:c2:85:50:
2b:c9:89:9b:ab:99:f8:bb:f1:51:e1:00:09:f1:be:7d:76:c4:
c9:d5:40:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLqcfOIyA9j2lAsvkpCFBkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MDQ0MzFiNTU1NDc3YzE5YTNmNGM1Y2I2ZDEwNzM2NThk
NWIzZTMwHhcNMjUwNTEzMjIwMDIzWhcNMjUwNTE0MjIwMDIzWjAzMTEwLwYDVQQD
EygyMWVlNWI5NWI2NjJjNmY1YWRkOWE4M2NjNWQ1NjkyMjdlMTY5NTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tGcHw0nS67GBVhzh2YawKvdqQ5y
9c58x9OG5smorHzRWVj8kOrj8pXhcw1PwuC9XM3owEQIL58g3lqOZVGtlgoZAlce
XnOAT3vOtO4q9CHBYoHIIJpdHGeIvQS703CIh2+Pxjtm3UM1BBBRK9VPvfUJrM8H
/2b9IfaYkvHp0wXt1K6bcHhWHNytLSS3hy+njXLaH7Zi18QCV00oQtvgHIYPp7ga
hST95j+IO67kGmnUy2kosR386AatqOwZptH8jN8Tng10uCQxPuBNXSLH+ZUS+0nP
dghCBYU+CEhKpgoClCHMoCV77FxTONCK5UaSAmTQh1OahurBbVZnIADagQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHuW5W2Ysb1rdmoPMXVaSJ+FpVgMB8GA1UdIwQY
MBaAFOYEQxtVVHfBmj9MXLbRBzZY1bPjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWdSREcxVlVkOEdhUDB4Y3R0RUhObGpWcy1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kN2RjOGQtZTM4Ni00MDRjLTg4YjQt
MjgzZWM0MmMyYzk0LzEvNWdSREcxVlVkOEdhUDB4Y3R0RUhObGpWcy1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9kN2RjOGQtZTM4Ni00MDRjLTg4YjQtMjgzZWM0MmMyYzk0
LzEvNWdSREcxVlVkOEdhUDB4Y3R0RUhObGpWcy1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkwl2lt0
mrDFge3rKHCW/PP9ZPhkGJ/k3HIQohCxRgyHk7JiWmXi6YFeXQtdfWbosKiARD+Q
0ESV3GFLfv2DnQENXC5WW/ilAbj5S/LFsBACGtqjII0R3aXdMj3a6P4B8n2LvTqV
MN3AZUHCgFdh/S9uSfPEyw1CeZOiAnJBjddhFWWHV1cXImX263dEagUQZcPzX3UG
LKoABPaKwd8PU4yn3nO3Fug3tW0DnA7FvG+KZws616mnDqq8j441Ngcw+IPrNReO
1yN8rCrc1kQMvUDjEM9ItPq/oMKdRCanZk8yIrbieX9ywoVQK8mJm6uZ+LvxUeEA
CfG+fXbEydVA/A==
-----END CERTIFICATE-----
Generated at Wed May 14 02:34:17 2025 by rpki-client