Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
File: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft (raw, json)
Hash identifier: cnDc24rWY2DK8HA1bnLaTRqhZrv/cK2i3Ankl7R0+vA=
Subject key identifier: C0:9E:E4:23:3B:25:2B:92:14:CE:1C:0E:3E:87:82:65:08:22:E0:9F
Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Certificate issuer: /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Certificate serial: 0196AB7A364E149BEFC030E49E00A2D2450F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
Manifest number: 152B
Signing time: Wed 07 May 2025 16:00:35 +0000
Manifest this update: Wed 07 May 2025 16:00:35 +0000
Manifest next update: Thu 08 May 2025 16:00:35 +0000
Files and hashes: 1: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl (hash: l5ZjP+/sskAv9bZ/kOfqumsq/FWZHTzxoEWP+CBdD48=)
2: H9LigG1-eoyksArBLiDVRw0BhjU.roa (hash: oha3QLmkXpQFYs1KCF6A8sqvDCo/E/9M5bF7ey6N14M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:7a:36:4e:14:9b:ef:c0:30:e4:9e:00:a2:d2:45:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Validity
Not Before: May 7 16:00:35 2025 GMT
Not After : May 8 16:00:35 2025 GMT
Subject: CN=c09ee4233b252b9214ce1c0e3e8782650822e09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7b:27:91:44:a5:44:2f:97:da:10:10:1a:30:
01:cc:4a:b2:f1:27:57:2c:fd:6c:41:a9:ea:58:4a:
86:6a:12:79:3a:63:56:ff:cb:16:0e:e3:e1:2b:b3:
59:89:61:ce:60:4c:e1:b1:a5:2a:8b:58:a2:f1:24:
bb:d6:93:09:b1:15:9b:88:31:d5:7f:14:32:59:8a:
d1:71:46:33:2a:15:c4:18:ad:4e:1b:09:4b:c4:29:
5c:51:2c:f1:51:5c:ff:e3:c6:52:bc:9b:0c:92:9b:
05:44:a1:40:75:56:86:6e:9d:01:dc:58:b6:ca:70:
19:d1:87:eb:3d:1d:40:70:b6:01:6e:e4:92:f7:7e:
00:1e:7a:f9:b9:3f:9b:98:f7:43:65:ca:c3:e0:4a:
9a:f0:c9:70:38:77:92:20:57:94:39:91:17:e1:70:
93:2d:c6:17:65:fb:58:ce:e6:2f:70:a5:f6:28:a7:
4b:10:0d:db:8f:40:ca:04:25:d1:04:d8:5f:5d:13:
fd:c2:1b:f7:78:64:52:f3:44:34:e2:1e:22:04:ff:
33:70:01:79:b5:f4:62:f5:ce:ce:0b:07:f4:4f:25:
bd:a3:fb:eb:5e:2b:ac:bb:cd:3c:e6:76:0f:e5:2b:
d4:31:90:0f:98:65:4d:52:da:57:c0:38:73:f6:58:
d8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9E:E4:23:3B:25:2B:92:14:CE:1C:0E:3E:87:82:65:08:22:E0:9F
X509v3 Authority Key Identifier:
keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1e:e9:c4:3b:0b:3a:43:f0:58:e0:39:d1:9d:d1:05:66:b8:
73:4a:63:39:3f:2b:50:79:01:1f:e9:e4:b0:1e:2a:c8:20:c1:
a8:af:97:08:97:b2:43:88:47:2f:e3:68:01:9b:2d:0c:e1:0d:
08:9b:05:b5:cf:28:03:87:9a:6a:c9:fc:8c:b2:54:15:ed:a8:
ae:26:e9:24:95:d1:0b:09:f8:e7:04:b4:73:94:33:ac:06:5d:
6f:0d:15:dd:47:85:db:3e:3d:08:d7:00:23:93:9e:06:f2:75:
fa:0a:10:2f:e7:da:cb:0a:50:82:43:dc:e1:60:53:5e:b9:21:
7f:b5:1a:17:8e:88:ab:32:4a:92:f5:19:85:4e:ce:bf:af:87:
e0:38:c1:24:ce:11:b9:f5:a3:3b:61:76:73:d0:b4:55:f2:74:
2e:5c:74:d3:fd:88:82:82:cd:3d:51:16:a6:d0:b7:01:74:8c:
36:8d:21:ec:de:7a:70:b0:da:68:e0:35:6a:4f:20:20:7f:ad:
d1:95:ca:a0:ca:05:fd:f6:3e:d4:15:9c:9d:cb:2d:cc:a8:05:
b0:99:6a:85:44:e4:de:f7:1f:fd:fd:3e:e5:c1:2e:27:c7:2c:
4d:db:6b:88:3e:57:51:c6:09:2c:c7:f8:47:78:cd:3a:e2:1f:
0a:e3:dc:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZarejZOFJvvwDDkngCi0kUPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZTVjNGM5OWQ2MTMxMDQ5OTgyYWY5YWQ5Yjg2NjAyYjI5
MjliYjgwHhcNMjUwNTA3MTYwMDM1WhcNMjUwNTA4MTYwMDM1WjAzMTEwLwYDVQQD
EyhjMDllZTQyMzNiMjUyYjkyMTRjZTFjMGUzZTg3ODI2NTA4MjJlMDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXsnkUSlRC+X2hAQGjABzEqy8SdX
LP1sQanqWEqGahJ5OmNW/8sWDuPhK7NZiWHOYEzhsaUqi1ii8SS71pMJsRWbiDHV
fxQyWYrRcUYzKhXEGK1OGwlLxClcUSzxUVz/48ZSvJsMkpsFRKFAdVaGbp0B3Fi2
ynAZ0YfrPR1AcLYBbuSS934AHnr5uT+bmPdDZcrD4Eqa8MlwOHeSIFeUOZEX4XCT
LcYXZftYzuYvcKX2KKdLEA3bj0DKBCXRBNhfXRP9whv3eGRS80Q04h4iBP8zcAF5
tfRi9c7OCwf0TyW9o/vrXiusu8085nYP5SvUMZAPmGVNUtpXwDhz9ljYuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCe5CM7JSuSFM4cDj6HgmUIIuCfMB8GA1UdIwQY
MBaAFOflxMmdYTEEmYKvmtm4ZgKykpu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNS1YRXlaMWhNUVNaZ3EtYTJiaG1BcktTbTdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lNzA5ZGUtNmIyZC00YmU0LTg1MDMt
YTFlNDg3N2NlZTQ4LzEvNS1YRXlaMWhNUVNaZ3EtYTJiaG1BcktTbTdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9lNzA5ZGUtNmIyZC00YmU0LTg1MDMtYTFlNDg3N2NlZTQ4
LzEvNS1YRXlaMWhNUVNaZ3EtYTJiaG1BcktTbTdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAax7pxDsL
OkPwWOA50Z3RBWa4c0pjOT8rUHkBH+nksB4qyCDBqK+XCJeyQ4hHL+NoAZstDOEN
CJsFtc8oA4eaasn8jLJUFe2oribpJJXRCwn45wS0c5QzrAZdbw0V3UeF2z49CNcA
I5OeBvJ1+goQL+faywpQgkPc4WBTXrkhf7UaF46IqzJKkvUZhU7Ov6+H4DjBJM4R
ufWjO2F2c9C0VfJ0Llx00/2IgoLNPVEWptC3AXSMNo0h7N56cLDaaOA1ak8gIH+t
0ZXKoMoF/fY+1BWcncstzKgFsJlqhUTk3vcf/f0+5cEuJ8csTdtriD5XUcYJLMf4
R3jNOuIfCuPcQA==
-----END CERTIFICATE-----
Generated at Wed May 7 23:25:08 2025 by rpki-client