Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
File: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft (raw, json)
Hash identifier: ww1cXUnIUkBOncredytS7/+r7zg+gMHV/0MPTbmvvxU=
Subject key identifier: FB:E6:C5:77:49:00:00:E7:FE:96:01:41:05:3D:4B:01:38:0B:A7:CB
Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Certificate serial: 019628290D67EFE443386648A4DBFF0C3CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
Manifest number: 0957
Signing time: Sat 12 Apr 2025 04:01:41 +0000
Manifest this update: Sat 12 Apr 2025 04:01:41 +0000
Manifest next update: Sun 13 Apr 2025 04:01:41 +0000
Files and hashes: 1: 0fMiJFl550osRSOwJ53RLThidmY.roa (hash: 62Jum/5Ter4OZqqvtTzk7nbCXv0FL6G77xoVhVQlYjw=)
2: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl (hash: 0c+RVRo5jc5NQt8qr/nsjvJBnrD0Mcn2Z4ogSLbzQ40=)
3: L9pi3nyxzTSejNrNKTLFupEkeKc.roa (hash: KRhXEXpB0ZgWCnBzMsYjo3MIerLmYQGo8A6sCf5dI54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 04:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:28:29:0d:67:ef:e4:43:38:66:48:a4:db:ff:0c:3c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Validity
Not Before: Apr 12 04:01:41 2025 GMT
Not After : Apr 13 04:01:41 2025 GMT
Subject: CN=fbe6c577490000e7fe960141053d4b01380ba7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9c:37:ba:6d:b5:b4:8a:6d:81:bd:10:05:6f:
87:2e:0f:56:13:f2:1e:f3:25:b1:d6:70:34:cc:c3:
33:fc:45:74:97:9f:e5:cf:88:a2:36:3d:24:14:3c:
d5:d1:cf:cb:2b:55:bc:a8:6e:55:cb:61:72:50:7e:
b8:82:1a:4b:dd:a3:67:40:a0:37:be:91:64:93:10:
88:8f:02:de:b1:3b:20:e1:21:02:01:08:2f:b3:2a:
3f:87:22:0a:4b:d2:74:85:b5:e1:38:9a:25:6f:a8:
88:0a:7d:98:06:16:0c:2b:42:4b:27:9d:f4:ae:16:
24:02:a0:50:a4:01:c6:ae:c8:65:7c:f6:9f:4c:20:
12:9b:87:39:71:b6:c3:c5:d1:74:e3:b1:a0:e2:e5:
34:80:e8:76:9d:64:dd:eb:41:85:43:28:6f:71:23:
bb:03:fd:d4:9a:d3:75:16:1a:ea:39:ae:0d:48:b2:
43:5e:64:95:0f:ab:93:d0:db:6a:31:71:d7:f5:46:
74:76:86:5d:e3:2c:a2:21:40:67:0f:57:0c:ff:31:
87:20:35:39:88:15:3d:b1:bf:7f:04:1c:f3:90:5d:
d2:7d:62:61:51:23:d5:f7:d4:ac:df:64:50:36:dc:
1a:8c:29:72:5c:49:e9:79:47:77:34:32:65:bc:aa:
d3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E6:C5:77:49:00:00:E7:FE:96:01:41:05:3D:4B:01:38:0B:A7:CB
X509v3 Authority Key Identifier:
keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:45:11:b1:6c:0c:2e:c2:ba:19:fe:74:ed:f6:ea:6a:83:ab:
ea:ab:19:95:4f:76:54:10:2f:9f:81:65:04:0b:68:57:41:12:
b8:eb:04:8a:8c:f3:96:bb:72:f7:da:49:27:05:a5:29:2d:56:
1a:10:b3:6b:25:ca:85:bf:8a:4e:ba:45:ce:47:9e:67:b2:19:
71:aa:5f:1e:64:0e:a8:d8:e9:bc:8b:2b:85:3c:84:5c:ac:e4:
6c:53:b0:7c:20:0a:a2:d6:e6:6c:de:cf:9d:d3:d2:8e:2a:92:
94:51:d7:3c:8a:f4:be:5a:39:de:15:9c:93:57:1e:39:63:60:
9c:98:19:0e:4a:73:7d:ec:c3:3f:4e:25:fa:d5:e1:61:d2:c1:
6b:0b:24:25:96:a2:be:13:d3:1b:60:9b:d8:45:a8:d4:ca:03:
5e:d3:dd:af:95:48:fe:e9:07:73:ac:21:26:39:c0:1a:d9:30:
28:be:ff:d5:95:a5:09:65:40:cd:92:79:b0:5f:89:68:61:b7:
2e:b7:e2:f4:e6:51:35:6e:67:bb:3c:55:25:25:bb:ca:5f:03:
65:f4:e2:41:02:52:8e:76:3e:39:00:f5:9c:27:b7:ae:d6:32:
bf:6f:46:9d:66:2f:a5:12:3c:83:65:ce:ac:70:97:d2:80:f6:
74:d5:45:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYoKQ1n7+RDOGZIpNv/DDylMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YzM0MGVlNWI5ZGFmMWE2ODE4ZjBkZjQwN2ZhNTk3NTg4
NmIxMGYwHhcNMjUwNDEyMDQwMTQxWhcNMjUwNDEzMDQwMTQxWjAzMTEwLwYDVQQD
EyhmYmU2YzU3NzQ5MDAwMGU3ZmU5NjAxNDEwNTNkNGIwMTM4MGJhN2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Jw3um21tIptgb0QBW+HLg9WE/Ie
8yWx1nA0zMMz/EV0l5/lz4iiNj0kFDzV0c/LK1W8qG5Vy2FyUH64ghpL3aNnQKA3
vpFkkxCIjwLesTsg4SECAQgvsyo/hyIKS9J0hbXhOJolb6iICn2YBhYMK0JLJ530
rhYkAqBQpAHGrshlfPafTCASm4c5cbbDxdF047Gg4uU0gOh2nWTd60GFQyhvcSO7
A/3UmtN1FhrqOa4NSLJDXmSVD6uT0NtqMXHX9UZ0doZd4yyiIUBnD1cM/zGHIDU5
iBU9sb9/BBzzkF3SfWJhUSPV99Ss32RQNtwajClyXEnpeUd3NDJlvKrTqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvmxXdJAADn/pYBQQU9SwE4C6fLMB8GA1UdIwQY
MBaAFOXDQO5bna8aaBjw30B/pZdYhrEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kNTEwNGMtZjY0YS00NGNhLWEzN2It
NmUxZjJmNjg1MWNmLzEvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9kNTEwNGMtZjY0YS00NGNhLWEzN2ItNmUxZjJmNjg1MWNm
LzEvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYEURsWwM
LsK6Gf507fbqaoOr6qsZlU92VBAvn4FlBAtoV0ESuOsEiozzlrty99pJJwWlKS1W
GhCzayXKhb+KTrpFzkeeZ7IZcapfHmQOqNjpvIsrhTyEXKzkbFOwfCAKotbmbN7P
ndPSjiqSlFHXPIr0vlo53hWck1ceOWNgnJgZDkpzfezDP04l+tXhYdLBawskJZai
vhPTG2Cb2EWo1MoDXtPdr5VI/ukHc6whJjnAGtkwKL7/1ZWlCWVAzZJ5sF+JaGG3
Lrfi9OZRNW5nuzxVJSW7yl8DZfTiQQJSjnY+OQD1nCe3rtYyv29GnWYvpRI8g2XO
rHCX0oD2dNVFsg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 13:57:01 2025 by rpki-client