Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
File: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json)
Hash identifier: UyNoOXzKqqLnLEAXQEZrhAqHGclzaaVu5rDCPamFRPI=
Subject key identifier: A1:FC:FA:D2:D2:BE:94:D6:6F:BC:15:CF:68:1A:03:A3:33:E8:DF:26
Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Certificate issuer: /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Certificate serial: 019650B625EB854BBDDF8C00AFD8D6552738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
Manifest number: 0A1E
Signing time: Sun 20 Apr 2025 01:00:36 +0000
Manifest this update: Sun 20 Apr 2025 01:00:36 +0000
Manifest next update: Mon 21 Apr 2025 01:00:36 +0000
Files and hashes: 1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: 0zA9R2zpU/x/4hU/SpQM8Clvt+Ywt1pXKeWbbOb2L38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:25:eb:85:4b:bd:df:8c:00:af:d8:d6:55:27:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Validity
Not Before: Apr 20 01:00:36 2025 GMT
Not After : Apr 21 01:00:36 2025 GMT
Subject: CN=a1fcfad2d2be94d66fbc15cf681a03a333e8df26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0f:f0:e8:b6:a3:53:78:50:da:71:9e:55:1c:
d9:72:6b:18:ba:de:cf:35:f6:ec:5c:fb:b9:bf:cc:
aa:76:32:98:f4:f4:88:39:c6:0a:fa:91:bb:59:42:
d4:43:01:7c:e0:68:d0:1d:67:92:4f:de:7d:36:c9:
d9:ad:92:a3:85:a0:3f:90:5c:a9:0c:8a:98:e7:13:
c3:27:75:83:80:e9:9e:d4:9e:d4:4e:11:a5:69:5a:
17:9d:a1:05:b1:ff:ee:ca:4c:37:c9:67:5a:4b:3c:
2c:21:fd:17:d7:e9:ad:7d:35:09:d5:ac:3a:66:12:
42:07:d3:5f:88:27:14:57:96:02:1c:74:1a:14:ec:
27:5f:ce:a6:11:0c:4c:f2:8c:fd:55:1a:9d:c1:49:
2b:91:b9:e6:e6:59:65:22:00:74:43:73:25:a1:69:
8b:c2:fb:d4:41:17:84:70:d6:8d:88:78:04:e5:0f:
34:fb:bd:4f:88:a7:4d:6b:51:fb:66:ce:51:82:0f:
0d:94:92:f4:78:3d:03:6c:6f:6d:d0:4f:cb:9e:29:
72:d9:2e:43:8a:67:4f:cb:6a:93:49:01:20:32:81:
13:86:be:3f:f4:a7:a9:1a:89:c5:ef:5c:62:3d:a1:
b7:61:9b:30:f2:a7:5e:4d:1a:02:7a:e2:fb:fc:17:
4d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FC:FA:D2:D2:BE:94:D6:6F:BC:15:CF:68:1A:03:A3:33:E8:DF:26
X509v3 Authority Key Identifier:
keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:81:78:7d:ae:61:8f:af:8e:41:00:03:95:6d:b4:44:f9:0f:
6f:8a:e5:42:5e:41:dd:61:74:28:9a:71:4e:f8:9b:7d:59:24:
77:67:03:4f:64:84:2e:4b:aa:d9:d2:53:38:bf:fa:c8:db:46:
bb:80:e2:f4:b5:4d:0c:23:9a:d0:41:4d:06:5d:89:95:40:d7:
5d:f9:99:fb:6b:01:e0:b7:b4:a3:bc:28:73:90:b1:24:a3:42:
e0:25:1e:9c:f0:48:94:f8:58:b7:c4:c9:cd:50:78:14:dc:30:
df:62:2e:b6:52:9b:d8:ec:43:6c:40:8b:6d:6d:f8:ad:3d:d4:
25:0a:79:d5:71:46:0b:50:ea:00:21:e4:13:ee:f8:06:df:de:
0c:3a:68:8e:de:d4:cd:3f:07:ba:99:56:77:4e:f4:30:55:7e:
c4:ef:4c:82:57:c1:09:69:e8:60:27:98:ea:0c:16:c9:7c:80:
f3:64:77:79:cf:ae:ea:27:23:b2:33:e8:40:0b:7e:27:b2:82:
31:4f:a1:96:6a:f3:09:88:42:da:8e:b8:fd:74:a4:8c:7c:8b:
10:8d:20:3d:c2:cc:86:fc:4d:2b:cd:97:4e:c5:e4:9d:24:ba:
30:e2:9c:9b:02:ca:32:ae:89:2d:28:f5:15:4f:09:15:74:5c:
53:88:2f:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQtiXrhUu934wAr9jWVSc4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MWQ3MTdmYjJkNDM3ZDQxMWQ4NzFhZjdiOWZiY2IwMWU4
OWY5NmMwHhcNMjUwNDIwMDEwMDM2WhcNMjUwNDIxMDEwMDM2WjAzMTEwLwYDVQQD
EyhhMWZjZmFkMmQyYmU5NGQ2NmZiYzE1Y2Y2ODFhMDNhMzMzZThkZjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug/w6LajU3hQ2nGeVRzZcmsYut7P
NfbsXPu5v8yqdjKY9PSIOcYK+pG7WULUQwF84GjQHWeST959NsnZrZKjhaA/kFyp
DIqY5xPDJ3WDgOme1J7UThGlaVoXnaEFsf/uykw3yWdaSzwsIf0X1+mtfTUJ1aw6
ZhJCB9NfiCcUV5YCHHQaFOwnX86mEQxM8oz9VRqdwUkrkbnm5lllIgB0Q3MloWmL
wvvUQReEcNaNiHgE5Q80+71PiKdNa1H7Zs5Rgg8NlJL0eD0DbG9t0E/Lnily2S5D
imdPy2qTSQEgMoEThr4/9KepGonF71xiPaG3YZsw8qdeTRoCeuL7/BdNEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKH8+tLSvpTWb7wVz2gaA6Mz6N8mMB8GA1UdIwQY
MBaAFOUdcX+y1DfUEdhxr3ufvLAeiflsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVIxeGY3TFVOOVFSMkhHdmU1LThzQjZKLVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xMmVkNjUtNDE1Yi00OGZiLWEzZDkt
MzE0ZDVlMmI2NmNhLzEvNVIxeGY3TFVOOVFSMkhHdmU1LThzQjZKLVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8xMmVkNjUtNDE1Yi00OGZiLWEzZDktMzE0ZDVlMmI2NmNh
LzEvNVIxeGY3TFVOOVFSMkhHdmU1LThzQjZKLVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4F4fa5h
j6+OQQADlW20RPkPb4rlQl5B3WF0KJpxTvibfVkkd2cDT2SELkuq2dJTOL/6yNtG
u4Di9LVNDCOa0EFNBl2JlUDXXfmZ+2sB4Le0o7woc5CxJKNC4CUenPBIlPhYt8TJ
zVB4FNww32IutlKb2OxDbECLbW34rT3UJQp51XFGC1DqACHkE+74Bt/eDDpojt7U
zT8HuplWd070MFV+xO9MglfBCWnoYCeY6gwWyXyA82R3ec+u6icjsjPoQAt+J7KC
MU+hlmrzCYhC2o64/XSkjHyLEI0gPcLMhvxNK82XTsXknSS6MOKcmwLKMq6JLSj1
FU8JFXRcU4gvRQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:20 2025 by rpki-client