Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
File: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft (raw, json)
Hash identifier: sf/OkYqSPz0tS42nXL2zkvKf3N4H08xUOVeD6YTsA1M=
Subject key identifier: AB:1D:15:63:1F:8A:E1:B4:19:5A:3A:0F:B6:F2:0B:15:44:A1:A7:7D
Authority key identifier: E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
Certificate issuer: /CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Certificate serial: 0196C34B49DACA8B6624398F39C2172BE09F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
Manifest number: 014A
Signing time: Mon 12 May 2025 07:00:13 +0000
Manifest this update: Mon 12 May 2025 07:00:13 +0000
Manifest next update: Tue 13 May 2025 07:00:13 +0000
Files and hashes: 1: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl (hash: CM0uDQ4yL4nSm9nUyiOIRrQfBe6kyHuAQApsB+cdDu0=)
2: GqkvkcQA2bbgQwHJ2b6jWAleiGg.roa (hash: EGM2nICbqAUwB5CP81F3mXlaWH5q4kAR9J7Mx82LHRQ=)
3: U_pf5mr7mVogKbgEVCSPIKt6P1Q.roa (hash: A+REPWck5DlDgbp9k+f3tR4pBhovVcICYPMhumJUrjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:49:da:ca:8b:66:24:39:8f:39:c2:17:2b:e0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Validity
Not Before: May 12 07:00:13 2025 GMT
Not After : May 13 07:00:13 2025 GMT
Subject: CN=ab1d15631f8ae1b4195a3a0fb6f20b1544a1a77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b3:68:4f:9d:1a:61:a3:1d:82:7c:4e:91:95:
54:f7:b2:80:cc:e7:d8:ee:72:38:ac:cd:7b:88:c2:
1d:b1:82:6d:1f:c1:29:0d:82:16:52:b1:bf:e4:62:
28:2f:2c:88:6f:d5:f2:a0:f9:af:ae:8d:68:25:ae:
63:85:ef:8d:70:76:bb:fa:6e:e0:fa:73:d5:1a:e5:
25:7a:7a:40:fd:21:10:70:5f:c3:93:df:27:96:69:
92:3f:0e:72:04:10:f3:e1:86:b4:ff:c4:6b:97:ec:
27:65:5b:21:b6:81:7c:52:78:8e:6c:f9:35:a5:59:
90:da:8e:f1:28:b9:38:43:ea:76:31:2b:9f:e3:58:
68:25:69:eb:31:6b:1b:c8:ac:73:2c:5b:81:c1:4b:
1d:16:55:37:d8:e2:61:1d:a6:84:2a:51:43:03:22:
b7:7f:f8:77:75:ae:39:87:47:99:e7:14:ec:fe:f1:
06:a8:c3:41:39:5c:58:a5:3c:9e:d0:8e:0e:6f:75:
62:99:3a:f2:f2:b5:e0:8b:4c:a2:49:1d:b0:54:b5:
0a:56:97:86:30:40:c0:18:39:fb:4a:d5:3c:2b:2e:
a8:f1:74:c9:86:ce:b7:eb:b8:4c:d1:62:76:15:ff:
12:12:dd:fc:37:90:c6:17:7d:59:73:ea:5d:c8:89:
2d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1D:15:63:1F:8A:E1:B4:19:5A:3A:0F:B6:F2:0B:15:44:A1:A7:7D
X509v3 Authority Key Identifier:
keyid:E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:63:b0:7c:99:90:8e:09:dd:46:ab:6a:dd:b7:4f:2f:d1:5f:
ab:a3:77:8a:9d:a7:07:0d:ba:ed:f9:89:22:2d:47:ff:93:16:
a3:ea:10:8d:aa:e4:28:79:9f:fc:f1:74:54:22:02:61:65:54:
00:b3:1d:a1:96:e5:b8:2a:8f:a7:68:b4:86:18:13:47:bd:9a:
d3:26:de:7c:79:f4:06:03:87:ab:b3:8d:74:f6:d1:bb:ee:87:
e3:c0:02:b2:88:ed:c8:43:21:b2:e2:98:4f:4d:e1:ca:15:ff:
ac:cb:d4:b6:36:0d:cb:9a:74:c4:aa:22:99:8e:a5:19:d3:f8:
2c:2c:ce:4b:bb:a5:52:f0:2d:3a:f5:98:3d:2f:4a:67:6f:5d:
cc:6b:b5:f8:93:95:3c:a5:99:89:81:c5:54:54:03:e3:66:16:
87:46:fa:a8:c1:2b:04:54:79:7d:b7:97:b7:c4:d0:18:42:f1:
9c:08:52:71:8e:8d:6a:61:0d:04:a4:26:47:0b:62:71:d8:2f:
0a:c7:d6:3b:aa:6a:11:a4:c9:aa:6c:4d:16:39:d3:63:0c:7d:
0e:45:ff:6b:40:a6:55:64:ff:ed:ad:06:83:e9:24:4c:13:e8:
01:b4:b3:ea:f9:20:e8:5b:5b:b2:29:e3:a2:33:0b:8b:f6:4e:
ab:05:09:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDS0nayotmJDmPOcIXK+CfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzI5ZWU4OTYzNmJhMzRmZTU2YmQ3MmU3NThmNTgyYWRl
NzBlNTIwHhcNMjUwNTEyMDcwMDEzWhcNMjUwNTEzMDcwMDEzWjAzMTEwLwYDVQQD
EyhhYjFkMTU2MzFmOGFlMWI0MTk1YTNhMGZiNmYyMGIxNTQ0YTFhNzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrNoT50aYaMdgnxOkZVU97KAzOfY
7nI4rM17iMIdsYJtH8EpDYIWUrG/5GIoLyyIb9XyoPmvro1oJa5jhe+NcHa7+m7g
+nPVGuUlenpA/SEQcF/Dk98nlmmSPw5yBBDz4Ya0/8Rrl+wnZVshtoF8UniObPk1
pVmQ2o7xKLk4Q+p2MSuf41hoJWnrMWsbyKxzLFuBwUsdFlU32OJhHaaEKlFDAyK3
f/h3da45h0eZ5xTs/vEGqMNBOVxYpTye0I4Ob3VimTry8rXgi0yiSR2wVLUKVpeG
MEDAGDn7StU8Ky6o8XTJhs6367hM0WJ2Ff8SEt38N5DGF31Zc+pdyIkt9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsdFWMfiuG0GVo6D7byCxVEoad9MB8GA1UdIwQY
MBaAFOVynuiWNro0/la9cudY9YKt5w5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhLZTZKWTJ1alQtVnIxeTUxajFncTNuRGxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hMTdhZTctOGU4Ni00M2ZkLWI4NTAt
YzEzOGJkMWMxNzFlLzEvNVhLZTZKWTJ1alQtVnIxeTUxajFncTNuRGxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9hMTdhZTctOGU4Ni00M2ZkLWI4NTAtYzEzOGJkMWMxNzFl
LzEvNVhLZTZKWTJ1alQtVnIxeTUxajFncTNuRGxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmOwfJmQ
jgndRqtq3bdPL9Ffq6N3ip2nBw267fmJIi1H/5MWo+oQjarkKHmf/PF0VCICYWVU
ALMdoZbluCqPp2i0hhgTR72a0ybefHn0BgOHq7ONdPbRu+6H48ACsojtyEMhsuKY
T03hyhX/rMvUtjYNy5p0xKoimY6lGdP4LCzOS7ulUvAtOvWYPS9KZ29dzGu1+JOV
PKWZiYHFVFQD42YWh0b6qMErBFR5fbeXt8TQGELxnAhScY6NamENBKQmRwticdgv
CsfWO6pqEaTJqmxNFjnTYwx9DkX/a0CmVWT/7a0Gg+kkTBPoAbSz6vkg6Ftbsinj
ojMLi/ZOqwUJYA==
-----END CERTIFICATE-----
Generated at Mon May 12 13:30:41 2025 by rpki-client