Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
File: 5gFfHiAENZyudla5aK2ypUpDTx4.mft (raw, json)
Hash identifier: F0KIBvS1jxHot7Gjp2pRMBiMpN/qDHzW3gPQz8VDUaw=
Subject key identifier: 01:A2:93:CC:5A:5A:45:4A:A3:36:E6:2A:A7:DC:2D:68:82:D0:58:03
Authority key identifier: E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
Certificate issuer: /CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Certificate serial: 0196C53A81BF75F621A43C0CBEEF71E79719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 16:01:07 +0000
Manifest this update: Mon 12 May 2025 16:01:07 +0000
Manifest next update: Tue 13 May 2025 16:01:07 +0000
Files and hashes: 1: 5gFfHiAENZyudla5aK2ypUpDTx4.crl (hash: esSPEqFf8YrnuVICVq+X3mWcKI0nDL+TK9Y1CBRQWtg=)
2: MvZ9UpTU1jkxQ9uFTXHU8G59uDg.roa (hash: kL1zPGLwfZE8020kfHibTnemsjFNFBdHlurHXKEnCxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:81:bf:75:f6:21:a4:3c:0c:be:ef:71:e7:97:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Validity
Not Before: May 12 16:01:07 2025 GMT
Not After : May 13 16:01:07 2025 GMT
Subject: CN=01a293cc5a5a454aa336e62aa7dc2d6882d05803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1d:eb:85:07:4e:d0:8a:3e:b3:40:ab:4c:1d:
4b:8a:ea:f8:e1:aa:8a:23:cf:6d:44:8b:6c:f7:c0:
a9:af:42:3f:98:f6:e1:97:65:66:ad:40:2d:de:82:
5e:c8:28:9e:db:1f:80:e9:7a:6e:93:29:74:db:2d:
85:6e:c5:51:f1:c9:5f:56:6b:16:7b:ca:94:3e:0f:
1c:df:65:28:e8:3a:48:89:f3:3c:13:89:d8:78:64:
6d:a3:87:67:5b:9a:c2:6b:45:ba:45:e4:fd:4e:73:
aa:4f:25:cc:79:1b:38:cd:a7:04:a1:18:6a:88:f7:
4a:2e:43:ac:6e:a6:83:f7:d3:60:46:a2:0b:09:d8:
21:a4:bc:97:26:de:00:cf:95:5e:d8:34:84:0f:6f:
a6:a5:79:fc:a8:8d:e7:49:3d:91:01:30:8f:3f:49:
ba:9d:e7:2b:34:c3:80:c0:3d:08:7a:79:c5:28:ac:
65:de:68:e9:8b:d9:38:9f:e3:27:0b:b8:d9:50:21:
dc:76:ee:a3:34:f5:c2:d3:03:e3:74:4e:bc:63:19:
94:67:ec:ea:fe:e0:55:70:ef:d1:66:6c:bf:79:78:
57:2e:1f:cf:60:13:da:89:12:1d:b7:81:24:de:f5:
55:fb:ef:fa:bb:75:95:cf:4b:28:99:ba:a3:1e:ab:
12:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A2:93:CC:5A:5A:45:4A:A3:36:E6:2A:A7:DC:2D:68:82:D0:58:03
X509v3 Authority Key Identifier:
keyid:E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fe:63:a8:e7:f6:62:9f:1e:fe:b7:d4:40:37:ce:28:11:d8:
a1:0f:02:45:3e:6f:d3:5a:49:27:bb:bf:34:d8:5d:ef:5d:91:
f1:39:8b:e9:34:49:e0:9c:86:59:7b:ed:0b:b1:0e:b3:d9:02:
b0:4f:91:b9:91:5c:17:1e:07:0f:7f:9c:77:af:94:0a:e3:55:
73:3f:e0:ef:c5:6d:bd:f7:a1:e2:16:b8:1d:fe:1f:ba:10:80:
57:6f:1f:9b:dd:80:2b:78:92:5b:e1:d1:93:f2:cf:df:ff:93:
20:b9:1f:d3:c8:8c:c5:46:27:4c:e2:f9:07:a8:b2:c7:2a:17:
a5:46:0e:f4:7f:a7:a4:48:56:a0:c1:be:24:da:14:38:62:5e:
2a:ee:9e:dc:1b:e7:b6:6c:a2:0f:64:88:80:3a:3a:fe:ec:88:
d3:fc:78:95:ba:c2:7d:17:71:08:a4:38:f3:f1:e1:e7:d6:7d:
77:25:0d:df:3e:08:35:7d:79:73:92:d3:9e:2e:50:86:38:76:
f6:4f:d8:a9:d8:df:b3:a2:e8:b6:f8:89:7d:3d:53:43:4e:3b:
2e:40:53:50:2c:e4:f7:25:ec:39:f8:e3:d7:3d:4e:c9:7b:9e:
f3:50:88:72:00:01:6d:95:51:6d:f5:09:75:35:c3:c0:4e:f5:
72:e3:d8:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFOoG/dfYhpDwMvu9x55cZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MDE1ZjFlMjAwNDM1OWNhZTc2NTZiOTY4YWRiMmE1NGE0
MzRmMWUwHhcNMjUwNTEyMTYwMTA3WhcNMjUwNTEzMTYwMTA3WjAzMTEwLwYDVQQD
EygwMWEyOTNjYzVhNWE0NTRhYTMzNmU2MmFhN2RjMmQ2ODgyZDA1ODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R3rhQdO0Io+s0CrTB1Liur44aqK
I89tRIts98Cpr0I/mPbhl2VmrUAt3oJeyCie2x+A6Xpukyl02y2FbsVR8clfVmsW
e8qUPg8c32Uo6DpIifM8E4nYeGRto4dnW5rCa0W6ReT9TnOqTyXMeRs4zacEoRhq
iPdKLkOsbqaD99NgRqILCdghpLyXJt4Az5Ve2DSED2+mpXn8qI3nST2RATCPP0m6
necrNMOAwD0IennFKKxl3mjpi9k4n+MnC7jZUCHcdu6jNPXC0wPjdE68YxmUZ+zq
/uBVcO/RZmy/eXhXLh/PYBPaiRIdt4Ek3vVV++/6u3WVz0sombqjHqsSRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGik8xaWkVKozbmKqfcLWiC0FgDMB8GA1UdIwQY
MBaAFOYBXx4gBDWcrnZWuWitsqVKQ08eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWdGZkhpQUVOWnl1ZGxhNWFLMnlwVXBEVHg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81MDgzMjEtMmRmYS00MjUzLWEzY2It
MmY5MjY1MTBmZmJmLzEvNWdGZkhpQUVOWnl1ZGxhNWFLMnlwVXBEVHg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81MDgzMjEtMmRmYS00MjUzLWEzY2ItMmY5MjY1MTBmZmJm
LzEvNWdGZkhpQUVOWnl1ZGxhNWFLMnlwVXBEVHg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXf5jqOf2
Yp8e/rfUQDfOKBHYoQ8CRT5v01pJJ7u/NNhd712R8TmL6TRJ4JyGWXvtC7EOs9kC
sE+RuZFcFx4HD3+cd6+UCuNVcz/g78Vtvfeh4ha4Hf4fuhCAV28fm92AK3iSW+HR
k/LP3/+TILkf08iMxUYnTOL5B6iyxyoXpUYO9H+npEhWoMG+JNoUOGJeKu6e3Bvn
tmyiD2SIgDo6/uyI0/x4lbrCfRdxCKQ48/Hh59Z9dyUN3z4INX15c5LTni5Qhjh2
9k/Yqdjfs6LotviJfT1TQ047LkBTUCzk9yXsOfjj1z1OyXue81CIcgABbZVRbfUJ
dTXDwE71cuPYFQ==
-----END CERTIFICATE-----
Generated at Mon May 12 19:48:35 2025 by rpki-client