Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
File: 5-QyokmU5XnrJJmh9vNMZSEY40Q.mft (raw, json)
Hash identifier: bJefK77AiW8pHkL8KMc58bpfIl5NW47vKX6gjOMYW8g=
Subject key identifier: FE:C9:93:36:38:BF:9B:57:05:C0:0F:73:44:FE:54:5C:FE:AD:45:E0
Authority key identifier: E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
Certificate issuer: /CN=e7e432a24994e579eb2499a1f6f34c652118e344
Certificate serial: 01964D7EDC4B7E159C7220D899ACCCE99C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
Manifest number: 148D
Signing time: Sat 19 Apr 2025 10:01:21 +0000
Manifest this update: Sat 19 Apr 2025 10:01:21 +0000
Manifest next update: Sun 20 Apr 2025 10:01:21 +0000
Files and hashes: 1: 1ap-zhjP2xlpcyvljzd4At-hRqs.roa (hash: vy++CPahIzqV0ojk71CI64hyqugiBwjMnM2TKCrxcDM=)
2: 5-QyokmU5XnrJJmh9vNMZSEY40Q.crl (hash: 1vq+yS6SA3TvUn1C0nyopFCbccO+xqD65DgyJPalR2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:dc:4b:7e:15:9c:72:20:d8:99:ac:cc:e9:9c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e432a24994e579eb2499a1f6f34c652118e344
Validity
Not Before: Apr 19 10:01:21 2025 GMT
Not After : Apr 20 10:01:21 2025 GMT
Subject: CN=fec9933638bf9b5705c00f7344fe545cfead45e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:f9:01:33:31:f1:d0:2f:ec:8e:2d:88:1f:
eb:39:a3:7e:9c:0e:bd:f7:c1:2a:dd:61:94:bb:90:
21:7b:a7:7d:b8:0b:70:1d:63:19:d9:4f:f6:b9:20:
07:67:58:d4:96:b7:e0:ca:41:92:36:61:86:83:f9:
ab:1d:bd:0b:eb:7e:af:dd:40:aa:a3:7f:af:7e:4f:
ef:c2:61:08:3f:f0:a2:1c:b5:76:8a:bf:eb:78:c8:
24:bd:7f:00:4c:cf:c1:2f:25:ce:d3:bc:65:5e:15:
a4:44:2c:50:82:6e:84:d8:9e:be:5e:c3:5d:22:a7:
39:0c:bf:1e:d1:9d:2b:b5:d3:cf:3b:37:af:2f:b4:
0b:4f:19:41:79:26:a4:3a:a9:20:35:3f:08:0a:38:
48:d7:47:67:7a:a0:39:e6:24:8a:fc:38:80:88:0f:
98:99:59:94:b8:c0:8f:21:14:a2:95:d9:e7:e6:fd:
12:9f:4f:85:bb:5d:59:18:09:65:ff:ef:92:d0:9b:
1e:2a:5f:4c:b1:b4:ae:1c:65:7d:3c:f0:1b:12:bd:
2b:5c:f4:97:85:38:b2:6a:b7:3b:0e:b3:2f:e3:86:
77:55:8b:9b:b7:11:52:6c:b6:78:72:a2:4d:8d:7d:
cd:40:e1:90:6b:db:19:aa:33:d8:45:50:1f:91:b2:
58:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C9:93:36:38:BF:9B:57:05:C0:0F:73:44:FE:54:5C:FE:AD:45:E0
X509v3 Authority Key Identifier:
keyid:E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:85:d0:ee:fc:a9:ad:e4:ef:d9:07:6c:1c:80:70:b6:7c:7a:
a1:71:8e:8c:10:ed:e1:f3:6c:64:56:55:94:66:44:a2:9d:25:
d7:56:68:49:0f:e4:ff:86:21:d6:72:b0:f5:5a:c9:24:0e:46:
14:7a:da:8f:d3:9a:33:17:de:87:f8:ca:a1:f5:92:c2:f2:06:
1f:e7:74:42:bf:7c:f6:6b:4b:36:87:6e:d2:22:89:52:b7:5a:
0b:b4:f8:1b:02:b7:32:79:03:03:12:6a:8e:34:2d:cd:e8:f9:
04:07:16:8e:50:9e:67:38:d4:c7:7e:72:15:40:a3:64:59:d6:
e2:a3:04:89:e8:5e:04:0e:5e:74:cc:21:8d:49:33:c7:12:5f:
cd:e0:3f:83:40:dc:af:82:f9:e1:d3:a7:71:5c:06:45:64:8e:
6c:b3:9b:1b:33:93:a5:8c:a2:6b:da:9c:7a:57:66:ea:e2:c0:
f7:f9:75:19:9a:c8:b0:7b:dc:43:44:01:1d:c4:c6:a7:e3:c4:
09:a2:90:4e:f0:07:8b:e2:44:7f:bf:a4:20:a4:00:1f:a0:d9:
35:4d:cd:db:02:56:9a:ca:9c:da:fe:9e:4e:13:f7:21:43:dd:
b4:d7:4f:15:9e:63:f5:c1:bc:50:5b:30:74:1e:8f:79:1d:0b:
96:76:91:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNftxLfhWcciDYmazM6ZxHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZTQzMmEyNDk5NGU1NzllYjI0OTlhMWY2ZjM0YzY1MjEx
OGUzNDQwHhcNMjUwNDE5MTAwMTIxWhcNMjUwNDIwMTAwMTIxWjAzMTEwLwYDVQQD
EyhmZWM5OTMzNjM4YmY5YjU3MDVjMDBmNzM0NGZlNTQ1Y2ZlYWQ0NWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTL5ATMx8dAv7I4tiB/rOaN+nA69
98Eq3WGUu5Ahe6d9uAtwHWMZ2U/2uSAHZ1jUlrfgykGSNmGGg/mrHb0L636v3UCq
o3+vfk/vwmEIP/CiHLV2ir/reMgkvX8ATM/BLyXO07xlXhWkRCxQgm6E2J6+XsNd
Iqc5DL8e0Z0rtdPPOzevL7QLTxlBeSakOqkgNT8ICjhI10dneqA55iSK/DiAiA+Y
mVmUuMCPIRSildnn5v0Sn0+Fu11ZGAll/++S0JseKl9MsbSuHGV9PPAbEr0rXPSX
hTiyarc7DrMv44Z3VYubtxFSbLZ4cqJNjX3NQOGQa9sZqjPYRVAfkbJYBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7JkzY4v5tXBcAPc0T+VFz+rUXgMB8GA1UdIwQY
MBaAFOfkMqJJlOV56ySZofbzTGUhGONEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wNjNlYmUtNjdmMC00MGU5LWJiZmYt
YTQwOWNhMzdhM2VhLzEvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wNjNlYmUtNjdmMC00MGU5LWJiZmYtYTQwOWNhMzdhM2Vh
LzEvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4XQ7vyp
reTv2QdsHIBwtnx6oXGOjBDt4fNsZFZVlGZEop0l11ZoSQ/k/4Yh1nKw9VrJJA5G
FHraj9OaMxfeh/jKofWSwvIGH+d0Qr989mtLNodu0iKJUrdaC7T4GwK3MnkDAxJq
jjQtzej5BAcWjlCeZzjUx35yFUCjZFnW4qMEieheBA5edMwhjUkzxxJfzeA/g0Dc
r4L54dOncVwGRWSObLObGzOTpYyia9qceldm6uLA9/l1GZrIsHvcQ0QBHcTGp+PE
CaKQTvAHi+JEf7+kIKQAH6DZNU3N2wJWmsqc2v6eThP3IUPdtNdPFZ5j9cG8UFsw
dB6PeR0LlnaRjg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:40:32 2025 by rpki-client