Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
File: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft (raw, json)
Hash identifier: I1onYVq7LQ6Nkjvqi8zbXszWMzT4ZyR+fr8BCNFTupk=
Subject key identifier: E5:F3:3F:1B:A7:28:F7:85:E6:53:D5:82:2D:A0:82:C9:2C:CA:27:E2
Authority key identifier: E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
Certificate issuer: /CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Certificate serial: 0196515AE910E7A613637CB1BB8199DBA075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 04:00:34 +0000
Manifest this update: Sun 20 Apr 2025 04:00:34 +0000
Manifest next update: Mon 21 Apr 2025 04:00:34 +0000
Files and hashes: 1: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl (hash: r1ZsYpy4pOECYxlzrssXw5lxlS0rQV+LCK0idDUqkyk=)
2: JN_wI5WUBHJd5ainOqfE_dFkzKI.roa (hash: Qg99ezuBzQl9b8N0K6IHfY7xyiyA9XJB6h6HAFx4kIY=)
3: ZFu4lqiYHSirnX-2qpigJJIGgUY.roa (hash: CjUjCiBLDugMPp8rVEARJ3kaatRRwCnXYdU38UIlE5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5a:e9:10:e7:a6:13:63:7c:b1:bb:81:99:db:a0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Validity
Not Before: Apr 20 04:00:34 2025 GMT
Not After : Apr 21 04:00:34 2025 GMT
Subject: CN=e5f33f1ba728f785e653d5822da082c92cca27e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:ad:27:2b:89:48:14:5d:5c:b3:d0:3e:84:
f9:66:5a:7e:a0:3a:5c:f9:b7:60:7c:83:05:f0:12:
db:ed:f5:82:2d:2b:34:84:80:c7:30:55:18:ec:a1:
2f:87:0f:01:1d:0e:c0:43:43:ee:5d:04:24:24:28:
7d:57:94:36:85:8c:d4:54:fa:22:d5:0e:c3:da:1c:
ba:cb:20:be:0f:f1:a7:27:ee:86:e2:d8:aa:4c:50:
f9:e7:73:4b:f5:d9:b2:02:d5:e5:07:2e:68:a4:f6:
0f:03:5b:08:0f:b1:43:d0:ce:34:b2:48:57:55:52:
c7:b4:e9:3a:9f:e5:0f:ce:19:90:3d:01:e0:32:00:
56:fa:4c:a0:f9:1a:9b:89:91:3e:23:6a:e7:98:51:
b5:17:35:10:96:de:5b:85:2d:15:62:59:1a:60:ec:
8d:77:ba:c8:fc:ed:f8:02:83:8b:09:9c:ed:99:9c:
b3:66:c4:ba:66:ca:a5:4d:f9:64:3a:f8:55:52:c2:
f9:42:eb:84:54:54:68:d5:6f:d5:16:ba:b6:71:2a:
72:f6:55:cf:6a:3c:43:48:c0:7e:fe:05:06:8f:0f:
ee:9c:ba:d3:bf:94:41:1c:66:9e:7c:8a:98:72:41:
19:21:82:fa:10:65:ac:ef:62:5f:8d:c7:b0:0f:fe:
c8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F3:3F:1B:A7:28:F7:85:E6:53:D5:82:2D:A0:82:C9:2C:CA:27:E2
X509v3 Authority Key Identifier:
keyid:E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:32:5a:60:8d:46:dd:f9:4f:d4:99:7c:69:48:2f:e3:92:a0:
82:f7:2f:fc:71:1b:0b:1a:39:c2:35:58:29:f0:b3:8b:f2:f9:
ab:85:1c:ab:5f:8d:51:bc:ff:38:2e:79:d1:61:c7:76:2a:cd:
2b:ad:90:35:bd:94:7b:e7:6c:3c:0d:20:6d:29:af:6c:fc:44:
cb:97:51:9b:dd:e6:53:fa:65:fd:1d:49:a5:f6:b6:04:5c:d8:
e2:c4:75:d8:6d:f0:05:f2:7c:ef:c7:d7:48:05:bc:51:80:9f:
ee:3b:1d:14:b3:a1:d1:9f:f0:e6:30:35:c6:22:af:77:95:c0:
ca:6f:c2:45:da:8a:6d:a1:35:33:a6:00:12:fe:47:fb:be:c3:
cd:a8:52:7b:84:2d:b4:55:cc:34:25:61:71:4d:10:7d:6e:56:
7d:9d:c4:37:97:b8:75:4e:69:04:55:67:f0:74:00:c0:e7:6f:
90:70:3f:89:80:02:2b:03:4e:8c:dd:05:64:36:26:b6:74:96:
67:0f:f6:8b:d5:5f:2a:77:4a:19:0d:62:51:f0:19:6e:ac:f0:
bb:e3:93:b2:45:67:e6:19:be:ec:71:7a:f3:a7:d9:d6:c6:27:
14:18:04:f3:0f:2d:e9:6c:05:56:65:d4:d6:dc:05:5a:0b:72:
1d:67:a9:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRWukQ56YTY3yxu4GZ26B1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3M2NmOTQzM2ViODBmZTkwMjcwODQ1MjlhMjU0MTJkZGZl
NWJkMDEwHhcNMjUwNDIwMDQwMDM0WhcNMjUwNDIxMDQwMDM0WjAzMTEwLwYDVQQD
EyhlNWYzM2YxYmE3MjhmNzg1ZTY1M2Q1ODIyZGEwODJjOTJjY2EyN2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWutJyuJSBRdXLPQPoT5Zlp+oDpc
+bdgfIMF8BLb7fWCLSs0hIDHMFUY7KEvhw8BHQ7AQ0PuXQQkJCh9V5Q2hYzUVPoi
1Q7D2hy6yyC+D/GnJ+6G4tiqTFD553NL9dmyAtXlBy5opPYPA1sID7FD0M40skhX
VVLHtOk6n+UPzhmQPQHgMgBW+kyg+RqbiZE+I2rnmFG1FzUQlt5bhS0VYlkaYOyN
d7rI/O34AoOLCZztmZyzZsS6ZsqlTflkOvhVUsL5QuuEVFRo1W/VFrq2cSpy9lXP
ajxDSMB+/gUGjw/unLrTv5RBHGaefIqYckEZIYL6EGWs72JfjcewD/7IMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXzPxunKPeF5lPVgi2ggsksyifiMB8GA1UdIwQY
MBaAFOc8+UM+uA/pAnCEUpolQS3f5b0BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXp6NVF6NjRELWtDY0lSU21pVkJMZF9sdlFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni84MTdjMTQtYjgwMC00YzE1LWE4OWUt
NzA0ZjI2MzM4OWUyLzEvNXp6NVF6NjRELWtDY0lSU21pVkJMZF9sdlFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni84MTdjMTQtYjgwMC00YzE1LWE4OWUtNzA0ZjI2MzM4OWUy
LzEvNXp6NVF6NjRELWtDY0lSU21pVkJMZF9sdlFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyDJaYI1G
3flP1Jl8aUgv45Kggvcv/HEbCxo5wjVYKfCzi/L5q4Ucq1+NUbz/OC550WHHdirN
K62QNb2Ue+dsPA0gbSmvbPxEy5dRm93mU/pl/R1Jpfa2BFzY4sR12G3wBfJ878fX
SAW8UYCf7jsdFLOh0Z/w5jA1xiKvd5XAym/CRdqKbaE1M6YAEv5H+77DzahSe4Qt
tFXMNCVhcU0QfW5WfZ3EN5e4dU5pBFVn8HQAwOdvkHA/iYACKwNOjN0FZDYmtnSW
Zw/2i9VfKndKGQ1iUfAZbqzwu+OTskVn5hm+7HF686fZ1sYnFBgE8w8t6WwFVmXU
1twFWgtyHWep/A==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:54:50 2025 by rpki-client