Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
File: 5z3xVch6WQrB5ThUTPM1bk_IF0g.mft (raw, json)
Hash identifier: MDpTFvBbNk4K6kogDRUwQPhYLGR6t00VaDyzve19xaA=
Subject key identifier: 71:C3:F7:B5:5D:E3:73:12:65:44:AD:FC:1B:76:76:E2:47:45:49:04
Authority key identifier: E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
Certificate issuer: /CN=e73df155c87a590ac1e538544cf3356e4fc81748
Certificate serial: 0196AAD50FA2BEEE77B9C2AB4344C31DBCFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
Manifest number: 14CC
Signing time: Wed 07 May 2025 13:00:11 +0000
Manifest this update: Wed 07 May 2025 13:00:11 +0000
Manifest next update: Thu 08 May 2025 13:00:11 +0000
Files and hashes: 1: 5z3xVch6WQrB5ThUTPM1bk_IF0g.crl (hash: fEE+QdTHtF78RPHcL9KI4WnVpIrRzTHw2fKidveU2ug=)
2: pOwukpz6uQtAZQ26wgZyWA0w-Pc.roa (hash: 0LNaJ+BbQgNK+Ci6/J4w+3/assiqy/xOnI28WaXKzkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:d5:0f:a2:be:ee:77:b9:c2:ab:43:44:c3:1d:bc:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73df155c87a590ac1e538544cf3356e4fc81748
Validity
Not Before: May 7 13:00:11 2025 GMT
Not After : May 8 13:00:11 2025 GMT
Subject: CN=71c3f7b55de373126544adfc1b7676e247454904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:7c:6b:83:e8:ba:2a:e2:2c:c4:dd:43:1b:
e9:d3:27:11:bb:b4:6d:54:57:98:ab:96:2c:57:b6:
0f:b8:54:49:b7:30:a5:8e:96:01:44:34:af:74:03:
8a:e4:42:0e:17:ad:17:1c:10:23:48:74:35:90:fa:
a7:37:c7:f9:b5:64:ba:be:b5:f9:72:f6:e5:5b:07:
9c:00:24:25:ab:fb:3b:0d:25:97:e3:81:92:b7:72:
1a:55:1c:47:d0:36:2b:d6:1c:a8:a2:5c:7c:21:a7:
24:9c:37:f0:fd:6d:e6:1a:11:47:6c:0a:92:c5:ed:
43:81:fd:03:15:95:6f:3c:fd:2e:d5:b7:15:5d:e5:
f4:d3:c0:ba:6d:6f:59:05:6d:7e:a9:ac:90:7f:b1:
1b:96:84:56:c8:f3:b5:3b:5b:aa:21:ec:de:ee:82:
84:37:22:23:0e:83:e7:d2:31:64:94:3f:7a:47:30:
12:5c:1a:a6:af:f7:ea:c4:b1:36:98:ad:31:8a:13:
6a:2d:3c:ac:33:1b:18:aa:df:2a:94:47:ef:f1:46:
47:56:39:4d:a6:a4:b6:dc:c1:b4:db:c4:73:5d:ff:
4e:08:a1:a2:c6:d7:2e:84:22:34:f8:71:d8:6b:71:
94:e0:e8:46:c2:af:7f:e8:02:ae:0d:49:56:b4:a5:
a0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C3:F7:B5:5D:E3:73:12:65:44:AD:FC:1B:76:76:E2:47:45:49:04
X509v3 Authority Key Identifier:
keyid:E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:12:67:92:d8:5e:4d:ea:46:75:7a:9b:24:45:30:a2:e0:f0:
ba:94:9c:b0:f1:55:e4:3d:43:ac:44:08:d8:b6:30:17:e5:cf:
1d:a3:60:db:62:ab:16:8f:86:6e:4a:3a:6e:d1:be:7b:41:10:
73:64:b3:e5:92:2d:df:6e:90:51:2b:a9:6a:ce:03:83:5c:f5:
d0:93:99:d7:66:26:17:01:38:c6:40:15:8c:fc:2e:bb:30:b3:
a9:e1:a4:dd:cb:b9:0b:33:79:a2:e5:51:80:1d:db:68:34:be:
6a:cf:47:40:5c:6a:c1:46:f5:9b:a8:d6:4a:a9:d8:31:49:23:
9e:9b:df:85:82:a5:35:51:8e:49:a4:ff:4f:4f:55:04:ce:26:
39:38:64:90:51:b3:66:69:ef:44:10:dc:83:80:49:e5:f8:0f:
7f:d1:93:c3:74:83:b9:6a:dd:35:26:ba:df:b0:2d:b7:0d:46:
5c:bf:58:2c:31:c6:61:d0:0f:d9:72:b8:7d:59:9d:85:bf:3b:
89:0e:3c:18:a5:74:d5:b6:4c:76:81:70:97:79:fd:ef:f8:7c:
5d:6b:d8:b4:e7:91:f9:61:3d:d7:e8:a9:5a:18:11:71:a8:0a:
05:3f:92:d9:ba:91:0d:bd:71:27:b9:d9:49:2d:88:22:bf:5d:
fc:d3:3c:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaq1Q+ivu53ucKrQ0TDHbz8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3M2RmMTU1Yzg3YTU5MGFjMWU1Mzg1NDRjZjMzNTZlNGZj
ODE3NDgwHhcNMjUwNTA3MTMwMDExWhcNMjUwNTA4MTMwMDExWjAzMTEwLwYDVQQD
Eyg3MWMzZjdiNTVkZTM3MzEyNjU0NGFkZmMxYjc2NzZlMjQ3NDU0OTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS58a4PouiriLMTdQxvp0ycRu7Rt
VFeYq5YsV7YPuFRJtzCljpYBRDSvdAOK5EIOF60XHBAjSHQ1kPqnN8f5tWS6vrX5
cvblWwecACQlq/s7DSWX44GSt3IaVRxH0DYr1hyoolx8IacknDfw/W3mGhFHbAqS
xe1Dgf0DFZVvPP0u1bcVXeX008C6bW9ZBW1+qayQf7EbloRWyPO1O1uqIeze7oKE
NyIjDoPn0jFklD96RzASXBqmr/fqxLE2mK0xihNqLTysMxsYqt8qlEfv8UZHVjlN
pqS23MG028RzXf9OCKGixtcuhCI0+HHYa3GU4OhGwq9/6AKuDUlWtKWg4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHD97Vd43MSZUSt/Bt2duJHRUkEMB8GA1UdIwQY
MBaAFOc98VXIelkKweU4VEzzNW5PyBdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXozeFZjaDZXUXJCNVRoVVRQTTFia19JRjBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iYzU3ZmYtYWIxYi00NjUxLTk1YjQt
ZGRkN2JmOTNkMzU2LzEvNXozeFZjaDZXUXJCNVRoVVRQTTFia19JRjBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iYzU3ZmYtYWIxYi00NjUxLTk1YjQtZGRkN2JmOTNkMzU2
LzEvNXozeFZjaDZXUXJCNVRoVVRQTTFia19JRjBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhJnkthe
TepGdXqbJEUwouDwupScsPFV5D1DrEQI2LYwF+XPHaNg22KrFo+Gbko6btG+e0EQ
c2Sz5ZIt326QUSupas4Dg1z10JOZ12YmFwE4xkAVjPwuuzCzqeGk3cu5CzN5ouVR
gB3baDS+as9HQFxqwUb1m6jWSqnYMUkjnpvfhYKlNVGOSaT/T09VBM4mOThkkFGz
ZmnvRBDcg4BJ5fgPf9GTw3SDuWrdNSa637Attw1GXL9YLDHGYdAP2XK4fVmdhb87
iQ48GKV01bZMdoFwl3n97/h8XWvYtOeR+WE91+ipWhgRcagKBT+S2bqRDb1xJ7nZ
SS2IIr9d/NM8jA==
-----END CERTIFICATE-----
Generated at Wed May 7 18:08:05 2025 by rpki-client