Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
File: 5XRVuKiwV21vlPfgFPazTVqmxNc.mft (raw, json)
Hash identifier: 19Nr2jT6aZXKuZo2uEiDQie8wf7KvTC15n1dHXYlSSo=
Subject key identifier: AF:3A:5E:E1:23:97:7F:99:82:AB:68:B1:CB:60:D5:E6:F2:31:5E:8D
Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
Certificate issuer: /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Certificate serial: 019512107F66F5CA4E4C5B17B7320B55CF54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
Manifest number: 0110
Signing time: Mon 17 Feb 2025 04:00:25 +0000
Manifest this update: Mon 17 Feb 2025 04:00:25 +0000
Manifest next update: Tue 18 Feb 2025 04:00:25 +0000
Files and hashes: 1: 5XRVuKiwV21vlPfgFPazTVqmxNc.crl (hash: j4CVwtrGcg2aBZadTInSFaBRy72hHET/Y9FN1y0mJ2A=)
2: G1CrAOOUPvyOGO4Vql-2-rT1nVU.roa (hash: CDahFDyxeYD+jrtMUR5mOx6DNugSU2LZoNFW5kfO9s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:7f:66:f5:ca:4e:4c:5b:17:b7:32:0b:55:cf:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Validity
Not Before: Feb 17 04:00:25 2025 GMT
Not After : Feb 18 04:00:25 2025 GMT
Subject: CN=af3a5ee123977f9982ab68b1cb60d5e6f2315e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:65:9d:4b:f0:9a:8d:f2:1f:53:4f:ee:fe:bc:
07:5a:19:e2:0b:72:55:ee:e0:d5:8d:22:fd:50:cd:
25:65:cb:7f:ed:ed:47:99:9f:5c:7b:52:fc:c5:b6:
e0:2c:65:d0:a9:2a:08:8d:06:94:4b:7a:e6:56:41:
15:5e:77:85:de:3c:56:cc:bc:15:95:aa:a0:fe:39:
07:fc:b8:d8:50:24:a5:e3:2c:fa:37:34:ce:a7:39:
e3:24:ce:54:fe:fd:d8:2f:fa:13:a0:23:f0:ea:86:
c9:c7:a4:46:2e:1e:d9:26:f6:53:68:be:3b:a3:d0:
36:23:2c:bc:c4:a4:c0:cb:65:50:5e:52:00:bd:b8:
a6:b7:eb:01:3c:b6:9f:35:89:b1:4e:dd:85:54:b3:
45:cf:f1:2c:a4:85:51:1d:d5:57:2c:38:30:e5:50:
93:10:1f:de:f3:82:26:c6:04:6c:96:f7:6e:b7:ae:
1a:0e:f4:d9:66:23:8b:af:fa:b8:cd:85:fb:eb:c3:
c1:73:32:8d:cf:8f:af:fb:1e:5f:a5:74:67:94:42:
9a:b8:1f:f5:0f:69:22:08:c1:f0:68:09:2d:56:03:
6c:6d:f0:a1:d0:80:68:65:79:1a:df:7a:20:14:c6:
41:d6:3c:58:bf:62:50:fe:ae:a6:91:97:9c:dd:ff:
87:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3A:5E:E1:23:97:7F:99:82:AB:68:B1:CB:60:D5:E6:F2:31:5E:8D
X509v3 Authority Key Identifier:
keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:dc:c9:fc:54:52:9a:5a:e2:f0:07:d7:68:a2:16:cf:5a:98:
7f:6d:29:eb:ac:73:5e:94:2f:2f:47:6f:77:49:44:a8:d2:df:
68:53:62:fe:10:32:f4:4f:51:dc:bf:35:76:03:5f:b9:4c:a0:
54:33:6a:93:5c:4c:ef:d1:fe:ba:94:fa:77:4d:cb:69:02:23:
d4:5c:e7:c3:38:17:93:19:ee:72:25:bb:9b:d1:ad:c2:49:8b:
1d:02:fb:56:7b:60:9c:02:7f:74:46:7f:ee:04:eb:7e:9f:3f:
f5:7d:8b:fe:75:32:95:00:fe:36:62:1f:e2:73:16:a7:e6:9d:
6e:44:55:ef:88:71:69:55:b7:93:ab:18:7c:a2:35:35:01:94:
18:60:4f:0b:6e:7a:71:4a:d2:37:53:53:f5:76:9a:43:39:91:
df:be:03:74:a7:b0:c2:b4:db:31:d7:65:41:26:89:ea:a3:f0:
16:98:7e:fc:0c:35:dd:e2:af:53:74:53:31:06:58:98:6c:86:
e8:a3:3c:6f:cc:e6:70:38:1c:f4:9e:2b:96:dc:17:25:8a:5f:
66:7b:7e:4a:be:20:77:c1:be:2f:2d:18:34:0e:34:4b:49:8c:
9e:4a:5f:f4:28:78:bb:03:a9:e8:15:f0:8d:81:00:cd:d6:17:
0e:6b:a3:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEH9m9cpOTFsXtzILVc9UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzQ1NWI4YThiMDU3NmQ2Zjk0ZjdlMDE0ZjZiMzRkNWFh
NmM0ZDcwHhcNMjUwMjE3MDQwMDI1WhcNMjUwMjE4MDQwMDI1WjAzMTEwLwYDVQQD
EyhhZjNhNWVlMTIzOTc3Zjk5ODJhYjY4YjFjYjYwZDVlNmYyMzE1ZThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGWdS/CajfIfU0/u/rwHWhniC3JV
7uDVjSL9UM0lZct/7e1HmZ9ce1L8xbbgLGXQqSoIjQaUS3rmVkEVXneF3jxWzLwV
laqg/jkH/LjYUCSl4yz6NzTOpznjJM5U/v3YL/oToCPw6obJx6RGLh7ZJvZTaL47
o9A2Iyy8xKTAy2VQXlIAvbimt+sBPLafNYmxTt2FVLNFz/EspIVRHdVXLDgw5VCT
EB/e84ImxgRslvdut64aDvTZZiOLr/q4zYX768PBczKNz4+v+x5fpXRnlEKauB/1
D2kiCMHwaAktVgNsbfCh0IBoZXka33ogFMZB1jxYv2JQ/q6mkZec3f+HPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK86XuEjl3+Zgqtosctg1ebyMV6NMB8GA1UdIwQY
MBaAFOV0VbiosFdtb5T34BT2s01apsTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhSVnVLaXdWMjF2bFBmZ0ZQYXpUVnFteE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kNDk4ZTMtMGVhOS00MzE0LTk4NDkt
MDAyMzNhZTUwYjUyLzEvNVhSVnVLaXdWMjF2bFBmZ0ZQYXpUVnFteE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kNDk4ZTMtMGVhOS00MzE0LTk4NDktMDAyMzNhZTUwYjUy
LzEvNVhSVnVLaXdWMjF2bFBmZ0ZQYXpUVnFteE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhtzJ/FRS
mlri8AfXaKIWz1qYf20p66xzXpQvL0dvd0lEqNLfaFNi/hAy9E9R3L81dgNfuUyg
VDNqk1xM79H+upT6d03LaQIj1FznwzgXkxnuciW7m9GtwkmLHQL7VntgnAJ/dEZ/
7gTrfp8/9X2L/nUylQD+NmIf4nMWp+adbkRV74hxaVW3k6sYfKI1NQGUGGBPC256
cUrSN1NT9XaaQzmR374DdKewwrTbMddlQSaJ6qPwFph+/Aw13eKvU3RTMQZYmGyG
6KM8b8zmcDgc9J4rltwXJYpfZnt+Sr4gd8G+Ly0YNA40S0mMnkpf9Ch4uwOp6BXw
jYEAzdYXDmujrg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:50 2025 by rpki-client