Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft
File: 5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft (raw, json)
Hash identifier: yryObK89JNteA/kJ8mDz+OzsS6+JcHK85mxEIlX4SvM=
Subject key identifier: 7C:1D:5B:D3:F7:AB:A5:9C:A4:5C:F6:54:C9:3D:3D:1F:D6:70:52:2F
Authority key identifier: E4:CD:6E:61:C1:4E:83:91:00:5A:81:7B:27:22:F7:C4:A8:1E:B9:93
Certificate issuer: /CN=e4cd6e61c14e8391005a817b2722f7c4a81eb993
Certificate serial: 019655A582DB1011400B8FB4B4D9BE4E8B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft
Manifest number: 07B5
Signing time: Mon 21 Apr 2025 00:00:32 +0000
Manifest this update: Mon 21 Apr 2025 00:00:32 +0000
Manifest next update: Tue 22 Apr 2025 00:00:32 +0000
Files and hashes: 1: 5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl (hash: sEDQOQM4ImD9SaeG4nriZk3OHAprzKT7SfFNKq32l84=)
2: Z7tQiCmevXD05xhhWf2mTkgkUN0.roa (hash: e4eRc/9etXdLQc98J86F+SCZdwTiYGCjapydGCTFyeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:82:db:10:11:40:0b:8f:b4:b4:d9:be:4e:8b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4cd6e61c14e8391005a817b2722f7c4a81eb993
Validity
Not Before: Apr 21 00:00:32 2025 GMT
Not After : Apr 22 00:00:32 2025 GMT
Subject: CN=7c1d5bd3f7aba59ca45cf654c93d3d1fd670522f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:20:02:f1:95:61:89:62:0b:4b:d5:58:c9:90:
e8:04:00:47:ac:c9:29:b0:a3:be:a7:f5:97:08:49:
44:27:17:9d:5d:70:6d:27:ae:19:f6:d1:10:e4:81:
d2:80:f7:0c:02:bf:c9:bd:37:c2:f4:03:76:fb:a5:
57:c7:92:5f:52:6a:67:8e:86:39:c2:13:c9:98:82:
81:ce:97:72:a8:35:83:18:5e:e2:b8:c9:7e:b7:a3:
df:96:9d:af:85:a9:a2:3a:9c:c5:b6:96:40:e1:c5:
ee:34:bd:20:43:fb:21:65:c1:e4:d3:5b:30:4c:58:
0b:9e:0a:28:c5:f7:fc:96:92:eb:77:02:03:85:74:
47:04:4e:80:64:23:4c:08:0c:84:95:17:bd:0b:59:
35:5c:12:db:84:aa:09:d8:98:35:1e:ac:72:4e:29:
c2:5a:39:2f:60:1e:57:1f:19:0e:bb:aa:6e:8d:fb:
6b:11:24:14:88:b2:ae:ce:a2:a7:4a:2e:59:3e:ca:
11:ea:53:78:cc:e9:0e:0d:ef:85:6c:a6:b3:76:f4:
1a:3e:a3:51:57:75:61:fd:48:f6:e8:b9:9d:54:2b:
0b:fc:0c:cd:04:4e:cb:42:cc:84:97:a6:6d:cf:44:
96:b5:f7:c7:3a:3c:1a:f8:4b:78:d2:0a:d0:de:91:
c4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1D:5B:D3:F7:AB:A5:9C:A4:5C:F6:54:C9:3D:3D:1F:D6:70:52:2F
X509v3 Authority Key Identifier:
keyid:E4:CD:6E:61:C1:4E:83:91:00:5A:81:7B:27:22:F7:C4:A8:1E:B9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ec:f5:38:03:c1:dc:f1:c6:ca:68:94:6f:c2:9f:80:1f:f3:
20:26:e1:be:dd:a0:c3:b5:4c:92:f1:d9:e0:f6:65:bf:db:85:
88:cc:f4:6a:79:40:f6:b8:a8:e1:61:51:e5:0b:d9:d2:a4:3c:
96:5a:8f:f0:63:8d:2a:8c:e5:89:0a:23:1d:84:a5:00:03:90:
fa:18:9f:ad:5a:7d:4d:f0:ba:4d:24:9d:75:12:32:13:39:93:
dd:e8:57:5c:83:da:66:48:32:2e:1e:3c:c4:8d:f9:61:d0:e7:
5a:28:e2:85:f5:09:bc:3a:30:cc:ce:a1:12:f8:be:c3:f4:ae:
02:8a:d8:39:91:a4:85:86:c3:3d:83:19:80:96:ed:95:b3:16:
55:77:21:86:28:4d:4a:66:ca:98:da:df:e7:93:91:a4:f3:3c:
66:3a:43:5a:46:85:18:6f:57:88:6d:43:b4:af:9e:ea:74:58:
fa:7b:c8:15:91:91:45:ce:d7:aa:fd:c8:cf:8d:d7:57:df:da:
91:a6:8a:2c:82:67:d9:07:b3:50:79:a2:d2:10:54:2a:22:fd:
40:6a:4d:83:34:f1:a6:72:41:6d:43:a4:d2:22:0d:f2:b2:81:
0d:1c:b0:49:2f:f5:d9:ee:9d:3f:df:59:64:bc:8a:aa:57:ab:
c4:c4:ad:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVpYLbEBFAC4+0tNm+TotcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0Y2Q2ZTYxYzE0ZTgzOTEwMDVhODE3YjI3MjJmN2M0YTgx
ZWI5OTMwHhcNMjUwNDIxMDAwMDMyWhcNMjUwNDIyMDAwMDMyWjAzMTEwLwYDVQQD
Eyg3YzFkNWJkM2Y3YWJhNTljYTQ1Y2Y2NTRjOTNkM2QxZmQ2NzA1MjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCAC8ZVhiWILS9VYyZDoBABHrMkp
sKO+p/WXCElEJxedXXBtJ64Z9tEQ5IHSgPcMAr/JvTfC9AN2+6VXx5JfUmpnjoY5
whPJmIKBzpdyqDWDGF7iuMl+t6Pflp2vhamiOpzFtpZA4cXuNL0gQ/shZcHk01sw
TFgLngooxff8lpLrdwIDhXRHBE6AZCNMCAyElRe9C1k1XBLbhKoJ2Jg1HqxyTinC
WjkvYB5XHxkOu6pujftrESQUiLKuzqKnSi5ZPsoR6lN4zOkODe+FbKazdvQaPqNR
V3Vh/Uj26LmdVCsL/AzNBE7LQsyEl6Ztz0SWtffHOjwa+Et40grQ3pHEawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwdW9P3q6WcpFz2VMk9PR/WcFIvMB8GA1UdIwQY
MBaAFOTNbmHBToORAFqBeyci98SoHrmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU0xdVljRk9nNUVBV29GN0p5TDN4S2dldVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kYTQwY2YtOTgzNi00ODJiLWI3YTYt
YzVhZDE2YTU1YzVmLzEvNU0xdVljRk9nNUVBV29GN0p5TDN4S2dldVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kYTQwY2YtOTgzNi00ODJiLWI3YTYtYzVhZDE2YTU1YzVm
LzEvNU0xdVljRk9nNUVBV29GN0p5TDN4S2dldVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKuz1OAPB
3PHGymiUb8KfgB/zICbhvt2gw7VMkvHZ4PZlv9uFiMz0anlA9rio4WFR5QvZ0qQ8
llqP8GONKozliQojHYSlAAOQ+hifrVp9TfC6TSSddRIyEzmT3ehXXIPaZkgyLh48
xI35YdDnWijihfUJvDowzM6hEvi+w/SuAorYOZGkhYbDPYMZgJbtlbMWVXchhihN
SmbKmNrf55ORpPM8ZjpDWkaFGG9XiG1DtK+e6nRY+nvIFZGRRc7Xqv3Iz43XV9/a
kaaKLIJn2QezUHmi0hBUKiL9QGpNgzTxpnJBbUOk0iIN8rKBDRywSS/12e6dP99Z
ZLyKqlerxMStlw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:38 2025 by rpki-client