Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
File: 5GWsyQgJ77RczaJQoQV2GElLhus.mft (raw, json)
Hash identifier: 7dL9eAjUNFc6zRHmQCUHDENzzawN8WMRT8N8VPG7Sig=
Subject key identifier: 2A:8F:9B:BA:F3:94:62:4B:9D:44:EB:DE:CF:15:FF:40:17:17:4D:92
Authority key identifier: E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
Certificate issuer: /CN=e465acc90809efb45ccda250a1057618494b86eb
Certificate serial: 0196ABB12FAD008F1D94C3D48B6AA67066D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
Manifest number: 152B
Signing time: Wed 07 May 2025 17:00:38 +0000
Manifest this update: Wed 07 May 2025 17:00:38 +0000
Manifest next update: Thu 08 May 2025 17:00:38 +0000
Files and hashes: 1: 5GWsyQgJ77RczaJQoQV2GElLhus.crl (hash: GaproL9jQt4D0OQ6pfo9+C5b0OxkRwwOiVQV7JPQmh4=)
2: HXkMZsrBmT3pdly4pNHClnxxiAs.roa (hash: uINrlSFHfmPOAUFp+GFnrxpC6bCJm76Z7RhHxB80xWI=)
3: g56Uh-QZpNYvH0QrLNbigssPnrQ.roa (hash: wrpYwLhb1No98RIDJLncVQMkGDqMDtvmrpGIa2b7nWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:b1:2f:ad:00:8f:1d:94:c3:d4:8b:6a:a6:70:66:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e465acc90809efb45ccda250a1057618494b86eb
Validity
Not Before: May 7 17:00:38 2025 GMT
Not After : May 8 17:00:38 2025 GMT
Subject: CN=2a8f9bbaf394624b9d44ebdecf15ff4017174d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8c:e8:bf:d9:16:06:eb:ae:b0:43:dc:44:4f:
58:12:b9:84:2a:ca:52:d5:c8:ad:64:4b:cb:69:4c:
dd:c0:6a:48:56:71:9f:ae:6e:5e:ae:02:38:28:21:
31:85:63:cd:2c:ca:51:8d:64:f0:49:9b:09:0e:1e:
c4:18:90:f7:a0:b6:c7:1f:cc:32:a1:1a:ca:b2:95:
7f:0f:99:61:07:81:35:1f:72:6e:aa:24:7b:3e:6f:
5d:e2:84:7f:70:a7:2c:b1:a2:99:14:07:5a:30:f4:
89:3c:5f:8a:cd:b8:81:b4:db:69:5d:68:40:37:aa:
0e:50:86:76:44:df:a1:a6:b8:f8:88:60:af:d0:11:
ce:25:3f:22:28:03:c2:72:a8:97:e2:ec:5f:85:a0:
a1:6e:13:4e:63:6e:f7:e9:f6:01:46:e4:24:b9:e6:
3c:04:36:8c:9f:c9:df:c3:df:c5:7a:bd:fd:48:b7:
ed:98:9b:04:53:4d:13:69:14:42:e3:37:2b:ca:63:
f7:42:06:48:7b:a8:31:f4:aa:fa:a4:af:34:99:b4:
05:5a:2c:60:10:10:1c:3e:56:47:13:31:66:de:36:
bd:e7:02:73:bb:e4:03:69:98:48:6f:39:da:05:8d:
1d:6d:27:af:64:45:fd:58:13:3b:04:7c:d0:46:0e:
89:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8F:9B:BA:F3:94:62:4B:9D:44:EB:DE:CF:15:FF:40:17:17:4D:92
X509v3 Authority Key Identifier:
keyid:E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:75:62:b8:97:df:b0:2f:d6:c4:15:a2:bb:f1:8c:df:4e:0f:
e0:7e:f0:f9:e7:a7:b5:98:11:33:fd:f1:33:9c:1d:50:3f:2e:
54:e5:5c:01:ec:ae:27:a4:8f:b0:0c:c8:52:2f:75:54:bf:37:
d9:19:2c:5f:b9:6f:fb:e8:b2:e3:c3:43:78:7c:74:00:f9:b1:
42:5a:42:a7:5a:46:1b:43:b4:6c:c7:04:27:d6:e0:fe:67:ec:
23:f1:55:a2:12:74:f2:dd:08:42:fb:e4:73:6f:bd:f1:fa:40:
85:eb:a6:1d:12:6d:78:4a:cb:fe:3b:61:82:5d:07:e1:db:b3:
e0:7c:30:a9:ae:51:92:69:c3:ee:10:19:7e:cd:5f:3a:42:61:
fd:69:8a:90:44:ce:af:dd:e5:fb:76:04:a3:c0:1e:9c:4d:b3:
6e:01:93:3f:ba:3a:a0:f0:f8:0b:57:17:44:18:07:5f:d3:3d:
4e:aa:2a:c4:1f:0f:e1:8f:73:df:94:f4:92:ae:f2:d9:8b:f5:
94:ae:fe:f3:0c:01:f8:6c:bd:33:25:31:7f:a3:f3:52:90:ef:
82:e3:fc:a5:17:9f:dc:85:73:bf:56:1e:5b:28:70:c8:01:fe:
cf:80:05:53:0f:aa:36:82:24:38:54:da:ac:e3:32:9b:27:54:
a1:de:08:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZarsS+tAI8dlMPUi2qmcGbUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NjVhY2M5MDgwOWVmYjQ1Y2NkYTI1MGExMDU3NjE4NDk0
Yjg2ZWIwHhcNMjUwNTA3MTcwMDM4WhcNMjUwNTA4MTcwMDM4WjAzMTEwLwYDVQQD
EygyYThmOWJiYWYzOTQ2MjRiOWQ0NGViZGVjZjE1ZmY0MDE3MTc0ZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54zov9kWBuuusEPcRE9YErmEKspS
1citZEvLaUzdwGpIVnGfrm5ergI4KCExhWPNLMpRjWTwSZsJDh7EGJD3oLbHH8wy
oRrKspV/D5lhB4E1H3JuqiR7Pm9d4oR/cKcssaKZFAdaMPSJPF+KzbiBtNtpXWhA
N6oOUIZ2RN+hprj4iGCv0BHOJT8iKAPCcqiX4uxfhaChbhNOY2736fYBRuQkueY8
BDaMn8nfw9/Fer39SLftmJsEU00TaRRC4zcrymP3QgZIe6gx9Kr6pK80mbQFWixg
EBAcPlZHEzFm3ja95wJzu+QDaZhIbznaBY0dbSevZEX9WBM7BHzQRg6JJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqPm7rzlGJLnUTr3s8V/0AXF02SMB8GA1UdIwQY
MBaAFORlrMkICe+0XM2iUKEFdhhJS4brMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUdXc3lRZ0o3N1JjemFKUW9RVjJHRWxMaHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi85ZWY2MGEtNzNlZS00MGUxLTkwMDYt
YzBiM2IwZjU0YmViLzEvNUdXc3lRZ0o3N1JjemFKUW9RVjJHRWxMaHVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi85ZWY2MGEtNzNlZS00MGUxLTkwMDYtYzBiM2IwZjU0YmVi
LzEvNUdXc3lRZ0o3N1JjemFKUW9RVjJHRWxMaHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXViuJff
sC/WxBWiu/GM304P4H7w+eentZgRM/3xM5wdUD8uVOVcAeyuJ6SPsAzIUi91VL83
2RksX7lv++iy48NDeHx0APmxQlpCp1pGG0O0bMcEJ9bg/mfsI/FVohJ08t0IQvvk
c2+98fpAheumHRJteErL/jthgl0H4duz4Hwwqa5RkmnD7hAZfs1fOkJh/WmKkETO
r93l+3YEo8AenE2zbgGTP7o6oPD4C1cXRBgHX9M9TqoqxB8P4Y9z35T0kq7y2Yv1
lK7+8wwB+Gy9MyUxf6PzUpDvguP8pRef3IVzv1YeWyhwyAH+z4AFUw+qNoIkOFTa
rOMymydUod4Inw==
-----END CERTIFICATE-----
Generated at Wed May 7 23:58:47 2025 by rpki-client