Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
File: 5H78nMPZxL0porvBVVH4LyXPEbo.mft (raw, json)
Hash identifier: OoCwE8ZYwPTNWMKdkr5JCU6mKt2Kjqa8YgQZ7Tsosjc=
Subject key identifier: BC:BF:E2:53:B5:D2:55:5A:F7:AF:50:27:E4:83:80:D4:4B:8F:E1:A3
Authority key identifier: E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
Certificate issuer: /CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Certificate serial: 019646A08E25E430F624E2121253F9B68360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
Manifest number: 0CA9
Signing time: Fri 18 Apr 2025 02:00:49 +0000
Manifest this update: Fri 18 Apr 2025 02:00:49 +0000
Manifest next update: Sat 19 Apr 2025 02:00:49 +0000
Files and hashes: 1: 5H78nMPZxL0porvBVVH4LyXPEbo.crl (hash: 9zbO8zLeUQvjVTTlpPc4fkpBQ81KMOFUmcVl3sLucUU=)
2: SOdbfA4k2rHns_9FeEf2o6kdRPA.roa (hash: UCxkRGVqhqrA5LNMsKBYYs+r3jtWXwOD0Dbnu0MtoW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:a0:8e:25:e4:30:f6:24:e2:12:12:53:f9:b6:83:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Validity
Not Before: Apr 18 02:00:49 2025 GMT
Not After : Apr 19 02:00:49 2025 GMT
Subject: CN=bcbfe253b5d2555af7af5027e48380d44b8fe1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3f:fd:2f:d3:10:36:e9:0b:67:87:1f:5b:ef:
81:14:92:96:ab:8d:f4:b8:87:1e:d5:9e:f8:31:54:
7c:53:df:35:22:e4:9a:26:7a:16:22:47:5a:31:4f:
0a:37:cc:99:4a:8f:1f:aa:46:27:b2:83:9c:27:fa:
80:6f:ac:bf:73:6a:e4:08:2e:2c:46:ef:52:c3:7c:
11:e8:49:33:d2:27:36:ac:a1:e9:6a:4b:fc:de:63:
29:88:e0:5f:9a:a3:bd:c4:85:46:ce:dc:e1:50:9c:
13:99:1a:39:b5:55:9e:49:44:e4:32:10:7a:9f:d2:
e1:ba:2c:93:88:17:c5:74:11:3a:63:73:72:58:f2:
76:05:0e:ca:d0:9a:b3:fb:f5:f7:92:ca:77:ee:ca:
e4:a8:68:c6:d1:76:b2:e0:a1:40:4a:5a:7c:6c:81:
4b:ed:e8:c6:51:5d:b4:4a:0f:2e:17:fb:ff:1e:4e:
26:fb:14:e8:44:82:cb:14:3d:93:dd:38:51:a9:3c:
16:ae:71:72:3d:5c:de:b3:67:07:8d:4e:f1:c2:8d:
df:51:2c:07:22:a7:fa:a0:51:df:33:30:b6:87:65:
5c:19:b1:c0:4d:e1:40:da:14:2a:ac:8a:32:71:f8:
62:26:6d:4d:35:4a:12:97:1f:ff:f2:99:68:88:fa:
1d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BF:E2:53:B5:D2:55:5A:F7:AF:50:27:E4:83:80:D4:4B:8F:E1:A3
X509v3 Authority Key Identifier:
keyid:E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:06:1d:2f:50:a0:eb:11:27:5f:bd:7f:58:bf:c4:7f:fc:b1:
13:5e:d9:f8:e3:65:77:97:2e:fc:9e:42:87:92:42:45:fa:03:
1c:17:c9:1b:9a:90:c4:29:b0:6a:ca:5c:09:11:35:07:a4:80:
f9:1d:9a:11:b2:26:1a:42:a1:a1:ef:0f:6c:a2:0b:84:09:59:
33:31:b5:08:90:26:31:09:0c:24:29:bc:c1:28:15:a9:ae:fb:
ad:0d:0e:ab:4f:b9:03:df:12:de:b5:f3:99:63:0a:5f:65:85:
49:a9:b4:b8:4e:80:1a:08:a2:73:16:8a:0e:02:42:40:61:37:
11:35:16:75:6a:82:c4:73:c1:5d:f0:0c:d0:6a:de:bc:19:84:
4f:4a:ac:c1:27:be:0c:cb:a5:9e:c7:77:36:fb:41:19:60:b8:
ff:90:c3:f6:99:9f:d9:ae:ab:4f:76:80:a7:e6:58:d0:91:a0:
8f:80:9f:38:00:dd:a5:0f:87:c8:c6:56:dd:75:be:8a:ce:51:
b5:5f:8e:1d:65:82:ee:6d:35:6a:63:29:a1:b7:2c:c0:84:c1:
e6:c7:34:ab:ee:4d:0c:97:19:18:44:a9:b4:ad:4d:c2:d9:f5:
db:a6:62:eb:47:cd:14:05:18:c1:24:c7:90:f0:dc:7b:d8:34:
34:47:d4:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZGoI4l5DD2JOISElP5toNgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0N2VmYzljYzNkOWM0YmQyOWEyYmJjMTU1NTFmODJmMjVj
ZjExYmEwHhcNMjUwNDE4MDIwMDQ5WhcNMjUwNDE5MDIwMDQ5WjAzMTEwLwYDVQQD
EyhiY2JmZTI1M2I1ZDI1NTVhZjdhZjUwMjdlNDgzODBkNDRiOGZlMWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz/9L9MQNukLZ4cfW++BFJKWq430
uIce1Z74MVR8U981IuSaJnoWIkdaMU8KN8yZSo8fqkYnsoOcJ/qAb6y/c2rkCC4s
Ru9Sw3wR6Ekz0ic2rKHpakv83mMpiOBfmqO9xIVGztzhUJwTmRo5tVWeSUTkMhB6
n9LhuiyTiBfFdBE6Y3NyWPJ2BQ7K0Jqz+/X3ksp37srkqGjG0Xay4KFASlp8bIFL
7ejGUV20Sg8uF/v/Hk4m+xToRILLFD2T3ThRqTwWrnFyPVzes2cHjU7xwo3fUSwH
Iqf6oFHfMzC2h2VcGbHATeFA2hQqrIoycfhiJm1NNUoSlx//8ploiPodZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLy/4lO10lVa969QJ+SDgNRLj+GjMB8GA1UdIwQY
MBaAFOR+/JzD2cS9KaK7wVVR+C8lzxG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUg3OG5NUFp4TDBwb3J2QlZWSDRMeVhQRWJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yNDgxMzMtODY3MC00MTY3LWExOTUt
NmUyZjU4OGMwYzdlLzEvNUg3OG5NUFp4TDBwb3J2QlZWSDRMeVhQRWJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8yNDgxMzMtODY3MC00MTY3LWExOTUtNmUyZjU4OGMwYzdl
LzEvNUg3OG5NUFp4TDBwb3J2QlZWSDRMeVhQRWJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwYdL1Cg
6xEnX71/WL/Ef/yxE17Z+ONld5cu/J5Ch5JCRfoDHBfJG5qQxCmwaspcCRE1B6SA
+R2aEbImGkKhoe8PbKILhAlZMzG1CJAmMQkMJCm8wSgVqa77rQ0Oq0+5A98S3rXz
mWMKX2WFSam0uE6AGgiicxaKDgJCQGE3ETUWdWqCxHPBXfAM0GrevBmET0qswSe+
DMulnsd3NvtBGWC4/5DD9pmf2a6rT3aAp+ZY0JGgj4CfOADdpQ+HyMZW3XW+is5R
tV+OHWWC7m01amMpobcswITB5sc0q+5NDJcZGESptK1Nwtn126Zi60fNFAUYwSTH
kPDce9g0NEfUog==
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:05:19 2025 by rpki-client