Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: LZt9+nIZaSqIDa9JvVaKKmHVe3xEpB+REwL32xpz4FQ=
Subject key identifier: 0C:22:1A:68:31:56:B8:01:4B:4A:2D:DD:41:8F:63:46:B8:62:A4:56
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 0196B710B7400D3183496026F7DB9FC5E21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 1534
Signing time: Fri 09 May 2025 22:00:48 +0000
Manifest this update: Fri 09 May 2025 22:00:48 +0000
Manifest next update: Sat 10 May 2025 22:00:48 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: HwYp8MIk/iWV37Ynkmm1ensccpq57CjAl8qcIuq6Eak=)
2: 6UYJYSp_H1qb-Z1ShFc_cXl87FI.roa (hash: 7Wjn3rvrdmK/H1wlwqE+Z2pd0NQT1fwp/AaKLM/IzPg=)
3: jISWNsTxPdEjjPdMy-Whzlvb0Ac.roa (hash: La/cVhkJ14UaJXVbjX6BzXzgOteVwnmYx6tdmiaM0OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:b7:40:0d:31:83:49:60:26:f7:db:9f:c5:e2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: May 9 22:00:48 2025 GMT
Not After : May 10 22:00:48 2025 GMT
Subject: CN=0c221a683156b8014b4a2ddd418f6346b862a456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:76:68:64:4a:72:83:75:ab:24:f0:54:79:
75:62:8e:cf:15:5c:38:9e:18:c2:f8:9f:cf:30:94:
26:00:fe:9b:78:26:18:58:8f:90:b1:0e:d8:37:52:
21:51:ce:6b:71:2d:60:e7:04:65:56:03:b2:ec:9b:
2e:a1:13:58:d5:fc:2e:71:cd:8d:22:8f:34:00:3a:
75:dd:ab:11:c7:60:f3:bb:36:5e:57:4b:12:e9:39:
84:65:28:16:9d:63:3b:d2:fa:d5:8f:44:b9:51:76:
b0:5d:f7:ef:43:6f:17:dc:f9:5e:15:b3:58:3f:c6:
dc:91:2c:3d:ab:50:ac:97:59:ce:3d:b7:d8:52:02:
7d:79:97:6c:22:e3:b4:8a:b0:26:90:d4:6c:28:bb:
80:f3:41:07:65:a0:22:a5:27:70:a5:7f:63:4c:e7:
33:7a:47:df:e0:78:b9:54:10:57:1a:b3:e5:d7:72:
ac:31:90:97:11:dd:e5:d2:ab:71:99:c7:f1:84:05:
4d:ec:20:92:69:96:a0:4e:f7:99:5b:a9:24:2b:ca:
ca:11:5c:ab:02:71:41:84:52:2d:25:7e:39:78:11:
ad:06:65:82:76:f4:cc:b4:6d:ea:70:52:15:0d:4b:
30:ff:ad:1d:05:92:fc:7e:86:21:57:ba:3b:ec:85:
c6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:22:1A:68:31:56:B8:01:4B:4A:2D:DD:41:8F:63:46:B8:62:A4:56
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:2e:0a:52:f6:6c:dc:e4:e4:f4:9e:86:88:0f:1d:11:69:2b:
30:76:06:4d:59:29:41:71:4b:8c:7d:9a:78:0e:96:fb:c0:6e:
72:d7:92:4b:36:20:73:56:a5:8b:7e:50:1a:51:bf:fb:2e:bd:
5b:e7:b4:cc:19:b9:fb:b0:8c:bd:d8:09:47:f0:14:c2:0f:08:
bd:6b:a7:ca:53:9a:7b:65:38:b5:be:ef:a5:04:48:f5:e0:bd:
73:47:af:80:d0:11:94:d8:bb:26:ac:3e:65:a5:58:36:0a:f2:
85:af:1d:56:92:dc:40:95:8c:14:6c:20:0c:1c:25:a5:d3:30:
86:08:79:f9:45:68:3a:f5:fd:62:cd:26:e4:29:ef:fc:0e:da:
83:d3:be:78:2f:25:de:68:e2:5e:a7:65:5b:41:44:43:7b:35:
ab:2a:d1:c9:e1:79:f2:48:47:97:0a:50:99:6e:8c:4f:07:a3:
aa:aa:c7:35:33:c4:b4:2e:28:f1:cd:12:22:4a:01:3f:a4:9f:
b7:e2:e2:eb:69:b7:8a:2f:fe:70:8c:48:dc:12:d0:d6:6c:90:
e2:44:61:ea:ef:96:49:b5:5c:4c:0a:cc:34:df:1b:56:7c:15:
b7:82:f6:4a:c2:e0:23:31:02:95:67:27:33:62:80:83:57:66:
59:1f:39:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3ELdADTGDSWAm99ufxeIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTI3NTU1YzFhNWM1ZGRmN2Y3YWNjODM5ZmE1NzdhYTdl
ZTdhOWMwHhcNMjUwNTA5MjIwMDQ4WhcNMjUwNTEwMjIwMDQ4WjAzMTEwLwYDVQQD
EygwYzIyMWE2ODMxNTZiODAxNGI0YTJkZGQ0MThmNjM0NmI4NjJhNDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd52aGRKcoN1qyTwVHl1Yo7PFVw4
nhjC+J/PMJQmAP6beCYYWI+QsQ7YN1IhUc5rcS1g5wRlVgOy7JsuoRNY1fwucc2N
Io80ADp13asRx2DzuzZeV0sS6TmEZSgWnWM70vrVj0S5UXawXffvQ28X3PleFbNY
P8bckSw9q1Csl1nOPbfYUgJ9eZdsIuO0irAmkNRsKLuA80EHZaAipSdwpX9jTOcz
ekff4Hi5VBBXGrPl13KsMZCXEd3l0qtxmcfxhAVN7CCSaZagTveZW6kkK8rKEVyr
AnFBhFItJX45eBGtBmWCdvTMtG3qcFIVDUsw/60dBZL8foYhV7o77IXGcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwiGmgxVrgBS0ot3UGPY0a4YqRWMB8GA1UdIwQY
MBaAFOWidVXBpcXd9/esyDn6V3qn7nqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFKMVZjR2x4ZDMzOTZ6SU9mcFhlcWZ1ZXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NkOWEtYzMwZS00ZThhLTg5NGEt
ZmQ3MTY2N2EyYjVmLzEvNWFKMVZjR2x4ZDMzOTZ6SU9mcFhlcWZ1ZXB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xY2NkOWEtYzMwZS00ZThhLTg5NGEtZmQ3MTY2N2EyYjVm
LzEvNWFKMVZjR2x4ZDMzOTZ6SU9mcFhlcWZ1ZXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZy4KUvZs
3OTk9J6GiA8dEWkrMHYGTVkpQXFLjH2aeA6W+8BucteSSzYgc1ali35QGlG/+y69
W+e0zBm5+7CMvdgJR/AUwg8IvWunylOae2U4tb7vpQRI9eC9c0evgNARlNi7Jqw+
ZaVYNgryha8dVpLcQJWMFGwgDBwlpdMwhgh5+UVoOvX9Ys0m5Cnv/A7ag9O+eC8l
3mjiXqdlW0FEQ3s1qyrRyeF58khHlwpQmW6MTwejqqrHNTPEtC4o8c0SIkoBP6Sf
t+Li62m3ii/+cIxI3BLQ1myQ4kRh6u+WSbVcTArMNN8bVnwVt4L2SsLgIzEClWcn
M2KAg1dmWR853w==
-----END CERTIFICATE-----
Generated at Sat May 10 06:42:46 2025 by rpki-client