Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
File: 5c4xqiBddBAUR-_9bDE1GGFGRTo.mft (raw, json)
Hash identifier: tRRWUD+GC7qA8LBf4NKLSPh/hD3rVV29yq09piH5xoM=
Subject key identifier: 44:85:F6:A7:3D:E1:D1:FD:F9:D6:F1:8F:05:34:86:6B:93:13:21:DD
Authority key identifier: E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
Certificate issuer: /CN=e5ce31aa205d74101447effd6c3135186146453a
Certificate serial: 0196488E88A5C08DD46203B7B0F61F1903F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
Manifest number: 14F5
Signing time: Fri 18 Apr 2025 11:00:22 +0000
Manifest this update: Fri 18 Apr 2025 11:00:22 +0000
Manifest next update: Sat 19 Apr 2025 11:00:22 +0000
Files and hashes: 1: 1prUVz0HPmxrICK89MLWQGvd_os.roa (hash: nYOxG6xI/OF/g1onNafntFHFC9rtfVRgZj8b/z6tXRg=)
2: 5c4xqiBddBAUR-_9bDE1GGFGRTo.crl (hash: CTffCYTC2jG2nIsVt4dlsnTX1EeFwj298RT18knPDZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:8e:88:a5:c0:8d:d4:62:03:b7:b0:f6:1f:19:03:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5ce31aa205d74101447effd6c3135186146453a
Validity
Not Before: Apr 18 11:00:22 2025 GMT
Not After : Apr 19 11:00:22 2025 GMT
Subject: CN=4485f6a73de1d1fdf9d6f18f0534866b931321dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5c:a5:0a:e4:e9:94:44:e4:55:c3:a2:c5:e2:
f6:95:85:96:68:6a:7a:70:aa:84:af:21:ca:0e:58:
8b:18:9c:d5:42:f3:58:22:cc:72:d5:a1:7a:4a:d4:
1a:22:5e:13:2c:02:97:bd:40:92:49:6d:05:a5:c6:
15:dc:a3:3a:53:3a:c4:2c:6f:69:29:be:38:7c:3a:
e5:d6:7e:79:75:12:9e:45:6b:fa:5e:26:07:d9:f6:
ef:38:ba:82:35:96:32:d4:e3:4d:c9:ec:cb:af:c4:
05:3b:54:3b:3f:8d:37:05:d2:84:3f:1a:9c:5d:57:
67:1d:03:46:ed:cd:05:af:da:be:0e:7e:f2:85:04:
2a:bd:2d:45:44:58:86:41:2c:db:58:b3:c8:89:59:
57:02:f3:b5:d0:93:14:9b:31:c4:83:8e:d8:05:ff:
40:c6:33:4a:4a:a6:e9:31:74:26:78:0b:f3:bd:10:
60:66:52:16:bc:30:d2:ee:66:b7:bd:9e:77:c5:72:
46:79:d9:44:3f:77:47:ca:26:b0:a1:18:52:c2:82:
ba:40:f5:22:32:d5:e4:64:c1:37:07:cb:38:ea:8d:
aa:bf:8c:d2:db:99:bb:71:38:b5:b0:af:7a:cc:3d:
1b:55:4d:a2:78:76:8e:fd:5d:2c:49:9e:7e:d1:d9:
be:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:85:F6:A7:3D:E1:D1:FD:F9:D6:F1:8F:05:34:86:6B:93:13:21:DD
X509v3 Authority Key Identifier:
keyid:E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:18:05:2c:df:1c:a5:fa:40:b1:a5:d0:7c:a1:bc:3b:ae:de:
64:ee:14:fe:49:fa:80:98:9b:26:75:c0:fa:5a:2e:fb:9a:69:
19:95:00:f0:8e:d8:60:cf:d6:cf:69:5c:a7:43:8a:c7:24:a9:
19:1a:a0:28:d9:4b:77:ea:98:c9:d8:a4:50:00:e7:cb:e7:e1:
e4:bc:af:06:45:f3:ef:78:de:1d:76:37:14:24:f9:4d:e8:be:
b8:5f:1b:3d:93:18:2f:cf:60:28:f9:3e:02:d8:82:0c:50:98:
28:a5:24:1d:c1:f5:a0:bf:57:e3:19:02:e7:60:8a:a2:f9:2e:
94:26:d3:6a:bf:1b:34:50:36:4c:6d:5e:39:f1:71:d9:e5:46:
ff:61:8f:e5:56:45:e6:db:d2:fd:75:b5:76:34:b7:51:8f:94:
96:e7:78:76:67:33:e6:0a:b9:84:1f:c4:28:eb:e0:6d:9a:98:
e9:9c:da:27:8d:b4:d9:da:8e:34:11:fe:30:ef:82:3a:97:bd:
66:b6:e2:bb:f5:04:8a:55:68:92:e7:3e:8a:31:92:5d:38:20:
fc:11:73:3c:0b:5e:33:72:d8:10:54:fe:aa:b8:1d:22:cf:95:
59:0d:b7:3b:be:43:31:6b:ec:74:b5:61:ee:f5:d0:46:de:b5:
8a:02:29:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZIjoilwI3UYgO3sPYfGQP3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1Y2UzMWFhMjA1ZDc0MTAxNDQ3ZWZmZDZjMzEzNTE4NjE0
NjQ1M2EwHhcNMjUwNDE4MTEwMDIyWhcNMjUwNDE5MTEwMDIyWjAzMTEwLwYDVQQD
Eyg0NDg1ZjZhNzNkZTFkMWZkZjlkNmYxOGYwNTM0ODY2YjkzMTMyMWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFylCuTplETkVcOixeL2lYWWaGp6
cKqEryHKDliLGJzVQvNYIsxy1aF6StQaIl4TLAKXvUCSSW0FpcYV3KM6UzrELG9p
Kb44fDrl1n55dRKeRWv6XiYH2fbvOLqCNZYy1ONNyezLr8QFO1Q7P403BdKEPxqc
XVdnHQNG7c0Fr9q+Dn7yhQQqvS1FRFiGQSzbWLPIiVlXAvO10JMUmzHEg47YBf9A
xjNKSqbpMXQmeAvzvRBgZlIWvDDS7ma3vZ53xXJGedlEP3dHyiawoRhSwoK6QPUi
MtXkZME3B8s46o2qv4zS25m7cTi1sK96zD0bVU2ieHaO/V0sSZ5+0dm+HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESF9qc94dH9+dbxjwU0hmuTEyHdMB8GA1UdIwQY
MBaAFOXOMaogXXQQFEfv/WwxNRhhRkU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84Yzg1MjQtN2Y4NS00MzEzLThlZDIt
YmY4NjZkYTc0N2FmLzEvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC84Yzg1MjQtN2Y4NS00MzEzLThlZDItYmY4NjZkYTc0N2Fm
LzEvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhgFLN8c
pfpAsaXQfKG8O67eZO4U/kn6gJibJnXA+lou+5ppGZUA8I7YYM/Wz2lcp0OKxySp
GRqgKNlLd+qYydikUADny+fh5LyvBkXz73jeHXY3FCT5Tei+uF8bPZMYL89gKPk+
AtiCDFCYKKUkHcH1oL9X4xkC52CKovkulCbTar8bNFA2TG1eOfFx2eVG/2GP5VZF
5tvS/XW1djS3UY+Ulud4dmcz5gq5hB/EKOvgbZqY6ZzaJ4202dqONBH+MO+COpe9
Zrbiu/UEilVokuc+ijGSXTgg/BFzPAteM3LYEFT+qrgdIs+VWQ23O75DMWvsdLVh
7vXQRt61igIpsQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 19:05:55 2025 by rpki-client