Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
File: 5Neqo9JcL5677HTIMMwM3pMYyPg.mft (raw, json)
Hash identifier: NY8uTjsAGl90n0yMufvxCnwJ26UYJpF6yuEhhlDRHHU=
Subject key identifier: D1:6F:BD:3E:29:03:9A:3D:9A:C8:9D:E6:B2:F2:AB:15:A2:B2:7E:0C
Authority key identifier: E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
Certificate issuer: /CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Certificate serial: 01962F3D3A84CCB9BD2AE6726AAD3E8039F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
Manifest number: 0416
Signing time: Sun 13 Apr 2025 13:01:03 +0000
Manifest this update: Sun 13 Apr 2025 13:01:03 +0000
Manifest next update: Mon 14 Apr 2025 13:01:03 +0000
Files and hashes: 1: 5Neqo9JcL5677HTIMMwM3pMYyPg.crl (hash: RHqDyEP6MKpN51c+jDdnyC1Sl5KS/Nx+r849408FP8U=)
2: iqIlnqBAsCP1vrTJxAKqWbAWks4.roa (hash: vVI7diOsXRvyknJwGK7kF8IRY0rc+wCwnZKiMTGdaGM=)
3: wSUmQHvgicp0DUrp54U8e4B9bSs.roa (hash: 6yxPMXDSw6KRHugvWVrYp4LQxI6BlFDftXD+dNw90ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:3d:3a:84:cc:b9:bd:2a:e6:72:6a:ad:3e:80:39:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Validity
Not Before: Apr 13 13:01:03 2025 GMT
Not After : Apr 14 13:01:03 2025 GMT
Subject: CN=d16fbd3e29039a3d9ac89de6b2f2ab15a2b27e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e6:d3:b2:4b:b2:8c:59:2f:80:4c:87:19:49:
1c:4a:9c:91:a8:bd:f9:48:6d:ca:6c:82:2b:e5:5f:
a3:b6:33:d7:d6:00:9b:08:21:f4:6e:15:cc:72:5d:
f9:c3:76:bb:7d:fa:b1:cb:48:2c:74:79:cb:82:53:
1b:f4:87:0a:2f:23:33:5c:6b:75:99:98:20:6f:2b:
89:2d:7c:40:e8:22:d8:85:42:1f:de:fc:01:e2:7c:
a0:a2:47:28:be:51:e2:01:55:d1:d4:f4:50:06:74:
52:48:5d:19:a6:2d:8c:11:26:7b:60:7b:b5:91:b8:
19:7b:43:ce:b2:6c:c2:7f:6b:fe:06:e0:5c:fd:26:
9e:e0:bb:bd:93:c6:65:e9:b0:3a:7d:c3:44:8a:98:
91:c8:5e:45:04:fa:97:f1:07:e8:e2:51:84:8a:e9:
f3:59:d6:72:bc:ae:50:fb:bb:95:4d:25:0c:6c:39:
c6:38:97:fb:c4:7e:5a:a7:9a:33:82:c5:fb:23:e1:
05:9d:ce:de:8c:a2:29:f6:8c:6c:00:3f:2e:fc:0e:
c9:34:ab:a6:8c:07:9e:84:2d:ee:74:9a:60:77:76:
60:1b:77:f4:78:0d:7b:8e:e6:e8:7b:16:52:a9:a3:
bc:48:b7:be:c9:04:98:52:73:6b:a6:67:4d:f3:75:
b3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6F:BD:3E:29:03:9A:3D:9A:C8:9D:E6:B2:F2:AB:15:A2:B2:7E:0C
X509v3 Authority Key Identifier:
keyid:E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:78:91:4f:6e:02:23:72:c5:2a:93:11:1e:5d:e4:4e:d5:ec:
f3:3f:30:dd:2b:8b:60:af:cd:45:3c:89:1b:29:65:7c:9a:65:
c5:81:1c:2d:b3:89:ae:09:1c:59:cb:a7:2b:50:bc:ec:ba:04:
06:13:8c:72:bb:54:af:63:97:b2:5a:bc:a7:a3:3c:72:86:8d:
3c:66:b8:40:a7:39:23:4a:23:14:de:0a:a0:95:b7:3d:53:a5:
5e:94:0f:34:47:79:ad:ef:55:3e:9a:7f:36:dc:5d:8c:29:b1:
11:76:73:fa:f1:84:d8:3f:71:77:92:ae:cb:1b:e0:0e:39:71:
06:e4:5b:bc:21:74:4e:9a:f9:c7:ef:18:21:54:52:4a:1b:6e:
46:6f:19:33:c7:f2:0b:03:78:95:44:b9:a8:a5:0b:5d:8b:8f:
52:0f:6f:6c:e8:0c:6d:2d:e2:1a:10:2d:47:a9:5b:4e:84:3f:
1d:e2:b3:a4:de:f4:f1:82:fc:9c:79:de:ac:76:c4:df:1f:05:
04:58:5f:03:49:a4:17:06:7e:91:14:b7:f8:40:80:87:41:b8:
a4:72:a3:1c:07:ce:65:7e:1e:e5:8a:bb:65:89:3e:26:c5:de:
c4:6f:57:3f:16:1a:6f:0d:2b:b7:42:e7:5e:8c:00:70:f9:f8:
f6:ac:14:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPTqEzLm9KuZyaq0+gDnzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZDdhYWEzZDI1YzJmOWViYmVjNzRjODMwY2MwY2RlOTMx
OGM4ZjgwHhcNMjUwNDEzMTMwMTAzWhcNMjUwNDE0MTMwMTAzWjAzMTEwLwYDVQQD
EyhkMTZmYmQzZTI5MDM5YTNkOWFjODlkZTZiMmYyYWIxNWEyYjI3ZTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+bTskuyjFkvgEyHGUkcSpyRqL35
SG3KbIIr5V+jtjPX1gCbCCH0bhXMcl35w3a7ffqxy0gsdHnLglMb9IcKLyMzXGt1
mZggbyuJLXxA6CLYhUIf3vwB4nygokcovlHiAVXR1PRQBnRSSF0Zpi2MESZ7YHu1
kbgZe0POsmzCf2v+BuBc/Sae4Lu9k8Zl6bA6fcNEipiRyF5FBPqX8Qfo4lGEiunz
WdZyvK5Q+7uVTSUMbDnGOJf7xH5ap5ozgsX7I+EFnc7ejKIp9oxsAD8u/A7JNKum
jAeehC3udJpgd3ZgG3f0eA17juboexZSqaO8SLe+yQSYUnNrpmdN83WzWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFvvT4pA5o9msid5rLyqxWisn4MMB8GA1UdIwQY
MBaAFOTXqqPSXC+eu+x0yDDMDN6TGMj4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5lcW85SmNMNTY3N0hUSU1Nd00zcE1ZeVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84YjQxNDctZTZlMC00ZDgwLWE5M2Yt
ZWY2M2I4MTZkZDM1LzEvNU5lcW85SmNMNTY3N0hUSU1Nd00zcE1ZeVBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84YjQxNDctZTZlMC00ZDgwLWE5M2YtZWY2M2I4MTZkZDM1
LzEvNU5lcW85SmNMNTY3N0hUSU1Nd00zcE1ZeVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3iRT24C
I3LFKpMRHl3kTtXs8z8w3SuLYK/NRTyJGyllfJplxYEcLbOJrgkcWcunK1C87LoE
BhOMcrtUr2OXslq8p6M8coaNPGa4QKc5I0ojFN4KoJW3PVOlXpQPNEd5re9VPpp/
NtxdjCmxEXZz+vGE2D9xd5KuyxvgDjlxBuRbvCF0Tpr5x+8YIVRSShtuRm8ZM8fy
CwN4lUS5qKULXYuPUg9vbOgMbS3iGhAtR6lbToQ/HeKzpN708YL8nHnerHbE3x8F
BFhfA0mkFwZ+kRS3+ECAh0G4pHKjHAfOZX4e5Yq7ZYk+JsXexG9XPxYabw0rt0Ln
XowAcPn49qwUFA==
-----END CERTIFICATE-----
Generated at Sun Apr 13 20:29:07 2025 by rpki-client