Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
File: 5cePoZk9RRL-JDa4ztqL_JKdZX0.mft (raw, json)
Hash identifier: 5FS4uqK83D5cx4vtloeUR8xjNYNppIRHd1NDUEQjFxI=
Subject key identifier: 90:73:DB:DC:9E:60:40:0A:14:20:8B:ED:34:42:88:69:E3:BA:04:AA
Authority key identifier: E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
Certificate issuer: /CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Certificate serial: 01964FA38FDC5918CCB33F6452650D5EC58C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
Manifest number: 083B
Signing time: Sat 19 Apr 2025 20:00:41 +0000
Manifest this update: Sat 19 Apr 2025 20:00:41 +0000
Manifest next update: Sun 20 Apr 2025 20:00:41 +0000
Files and hashes: 1: 5cePoZk9RRL-JDa4ztqL_JKdZX0.crl (hash: SlPlgzsZPG8J3xHFmRkxgxNGfW1byuf7QfrUp9s08FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:8f:dc:59:18:cc:b3:3f:64:52:65:0d:5e:c5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Validity
Not Before: Apr 19 20:00:41 2025 GMT
Not After : Apr 20 20:00:41 2025 GMT
Subject: CN=9073dbdc9e60400a14208bed34428869e3ba04aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:58:44:63:a0:d7:3b:13:b8:58:5a:66:86:
7f:94:7b:24:62:1a:38:9f:25:0c:e5:b3:c1:32:f2:
2d:82:50:7a:9b:0d:7c:c5:b3:f6:d0:47:9b:c6:e8:
08:7d:7b:1f:b3:d9:19:29:ef:d2:9d:6c:f3:07:66:
7f:3f:21:8e:78:0c:f6:18:33:b2:c1:1b:c2:d8:9d:
05:8e:1b:74:e2:02:44:0e:bd:d0:61:49:b0:f7:0d:
c1:9e:2b:b3:f1:be:91:ff:5a:eb:7f:dc:e4:7d:41:
6a:73:36:1c:43:84:af:7f:75:98:bf:e0:81:ca:b9:
97:dc:ee:c4:4a:b8:48:da:d6:66:a3:1a:0f:5b:b5:
2f:30:84:80:9b:42:93:fb:c6:16:e5:1e:29:ea:00:
e4:f2:8d:19:cb:73:6c:32:dc:03:54:9c:f3:be:23:
31:cd:e3:87:a3:84:7b:2e:5f:d6:0d:e7:88:04:55:
3d:44:31:ec:e9:a1:f6:d2:db:76:86:1d:91:ec:ca:
1d:37:06:14:4e:e6:5a:b7:8d:4d:65:af:cc:bb:33:
45:68:6c:0a:66:d4:5c:ad:21:6a:ba:fe:c5:e2:9b:
06:55:e3:32:7a:4b:52:81:b9:b7:2f:d9:29:9a:28:
d2:77:88:b6:9a:ad:78:d1:52:3d:4c:e5:49:2b:d3:
c7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:73:DB:DC:9E:60:40:0A:14:20:8B:ED:34:42:88:69:E3:BA:04:AA
X509v3 Authority Key Identifier:
keyid:E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fe:f2:fb:ad:4a:d7:1e:2f:4c:f7:50:35:00:50:0d:82:4b:
43:40:12:ca:60:42:92:26:58:33:f1:7b:eb:b8:87:81:68:21:
d2:aa:e6:9b:65:e4:03:3a:29:3f:28:89:eb:fe:e1:0c:64:90:
eb:40:95:f4:f7:84:d8:fa:ef:28:d1:40:9e:83:4d:32:6f:f2:
5a:4a:3e:cd:59:14:53:db:a1:c9:e3:f6:f3:a9:e8:98:b7:28:
cc:44:f5:21:35:55:10:3d:0e:16:c5:a3:a1:b1:44:75:df:f1:
d5:ce:cf:af:b4:9e:7b:ea:0c:ef:bf:66:9e:0e:8a:ca:c3:60:
b5:4d:e5:9e:2a:53:2d:9d:45:08:17:25:be:2f:ed:f4:21:36:
35:6a:d9:2d:b7:ce:95:56:4b:96:d9:ba:b6:c7:e1:2d:05:ce:
b3:83:6c:a5:7c:a3:67:a0:3e:e5:e6:f4:a5:38:9d:65:09:a4:
cf:18:dd:e4:15:8d:1a:20:ba:ec:3c:01:2e:26:d8:e2:b7:f5:
71:7e:56:da:ee:73:2a:9d:8e:2e:50:2f:6c:da:35:5e:d7:78:
f8:0c:ea:88:f9:b6:de:db:05:ea:52:6d:36:a0:4b:eb:b2:2e:
7b:a8:1e:70:4d:ae:18:3c:85:e1:51:9f:71:67:30:5e:0d:84:
d3:71:f3:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPo4/cWRjMsz9kUmUNXsWMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1Yzc4ZmExOTkzZDQ1MTJmZTI0MzZiOGNlZGE4YmZjOTI5
ZDY1N2QwHhcNMjUwNDE5MjAwMDQxWhcNMjUwNDIwMjAwMDQxWjAzMTEwLwYDVQQD
Eyg5MDczZGJkYzllNjA0MDBhMTQyMDhiZWQzNDQyODg2OWUzYmEwNGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsxYRGOg1zsTuFhaZoZ/lHskYho4
nyUM5bPBMvItglB6mw18xbP20EebxugIfXsfs9kZKe/SnWzzB2Z/PyGOeAz2GDOy
wRvC2J0Fjht04gJEDr3QYUmw9w3Bniuz8b6R/1rrf9zkfUFqczYcQ4Svf3WYv+CB
yrmX3O7ESrhI2tZmoxoPW7UvMISAm0KT+8YW5R4p6gDk8o0Zy3NsMtwDVJzzviMx
zeOHo4R7Ll/WDeeIBFU9RDHs6aH20tt2hh2R7ModNwYUTuZat41NZa/MuzNFaGwK
ZtRcrSFquv7F4psGVeMyektSgbm3L9kpmijSd4i2mq140VI9TOVJK9PH5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBz29yeYEAKFCCL7TRCiGnjugSqMB8GA1UdIwQY
MBaAFOXHj6GZPUUS/iQ2uM7ai/ySnWV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWNlUG9aazlSUkwtSkRhNHp0cUxfSktkWlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81YmIxZDAtNjM0ZS00NmZjLWE3NWEt
MGM5YWE2Njk2YjQ5LzEvNWNlUG9aazlSUkwtSkRhNHp0cUxfSktkWlgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy81YmIxZDAtNjM0ZS00NmZjLWE3NWEtMGM5YWE2Njk2YjQ5
LzEvNWNlUG9aazlSUkwtSkRhNHp0cUxfSktkWlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/7y+61K
1x4vTPdQNQBQDYJLQ0ASymBCkiZYM/F767iHgWgh0qrmm2XkAzopPyiJ6/7hDGSQ
60CV9PeE2PrvKNFAnoNNMm/yWko+zVkUU9uhyeP286nomLcozET1ITVVED0OFsWj
obFEdd/x1c7Pr7See+oM779mng6KysNgtU3lnipTLZ1FCBclvi/t9CE2NWrZLbfO
lVZLltm6tsfhLQXOs4NspXyjZ6A+5eb0pTidZQmkzxjd5BWNGiC67DwBLibY4rf1
cX5W2u5zKp2OLlAvbNo1Xtd4+AzqiPm23tsF6lJtNqBL67Iue6gecE2uGDyF4VGf
cWcwXg2E03HzHg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:11:55 2025 by rpki-client