Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
File: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft (raw, json)
Hash identifier: t/bGaABOfLZu1r7llaEP9GRH4CfEsiRJ1bsPzLVEsjg=
Subject key identifier: 55:E4:29:07:C6:EE:B0:EB:9F:CE:19:E9:D1:F3:EE:FB:95:10:40:E6
Authority key identifier: E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
Certificate issuer: /CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Certificate serial: 01958BF2AE4D9B5AC5C95CF286363CEF3870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
Manifest number: 0FEE
Signing time: Wed 12 Mar 2025 20:01:32 +0000
Manifest this update: Wed 12 Mar 2025 20:01:32 +0000
Manifest next update: Thu 13 Mar 2025 20:01:32 +0000
Files and hashes: 1: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl (hash: T+5e1MeNwkUcfDtVumbY5XHVeSeLFKU7UJMC941HAhs=)
2: n3Rb7e4leVAV_P84v_-RNrezbUU.roa (hash: nU0WMWHhxMdmntA6B1n8DiXNUPiYR3E/XJsxM+pnKTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:ae:4d:9b:5a:c5:c9:5c:f2:86:36:3c:ef:38:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Validity
Not Before: Mar 12 20:01:32 2025 GMT
Not After : Mar 13 20:01:32 2025 GMT
Subject: CN=55e42907c6eeb0eb9fce19e9d1f3eefb951040e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:38:8e:8f:cb:2e:1a:9a:64:03:28:57:1c:
df:09:0c:b8:c4:a9:f7:c2:9d:6a:94:7c:bc:7f:21:
f1:d2:56:27:2f:cf:42:bb:b0:fe:ad:04:8a:97:b4:
9e:d2:20:26:5c:89:16:54:f8:2d:c4:50:b9:82:c0:
34:4f:dd:05:7c:fa:8f:5b:0b:f6:4d:76:95:34:dc:
75:76:21:52:3a:1d:b2:ce:34:3b:3b:22:b0:16:3d:
6d:ba:df:89:50:35:f8:0e:8a:1d:26:a5:21:69:d1:
ec:0c:82:70:62:09:91:e9:9e:98:80:84:96:80:07:
3f:6e:58:ec:3c:e1:01:20:17:04:51:e4:ff:72:70:
6e:da:69:4b:fb:6e:fc:07:32:90:6c:b7:fd:1c:54:
93:35:01:82:7f:9e:68:b9:e9:14:6d:56:83:fb:5a:
9a:72:13:6a:a1:e5:bd:52:1f:ad:fe:0f:30:63:36:
f8:ec:bb:32:5d:ae:e2:ba:de:da:88:b8:1f:48:78:
a1:57:c5:8e:ec:95:23:bf:9d:34:ca:8e:14:b6:5f:
6c:03:73:dd:a9:ac:20:3c:12:69:95:d5:38:1f:2a:
75:b6:de:57:ae:11:8d:07:23:a8:c8:0b:22:2c:34:
f4:d0:d2:71:88:77:83:0d:6a:7c:36:93:50:a0:47:
be:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E4:29:07:C6:EE:B0:EB:9F:CE:19:E9:D1:F3:EE:FB:95:10:40:E6
X509v3 Authority Key Identifier:
keyid:E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d5:97:dd:14:68:94:24:9f:85:4f:bb:5a:21:b6:36:52:fd:
13:7f:09:32:b8:b2:b3:c9:49:99:0d:8a:9d:1a:96:91:a8:3c:
eb:d0:51:a3:71:81:21:55:39:e6:46:57:7b:51:a5:d5:00:47:
b6:ef:41:79:40:72:78:3a:d3:98:9f:3a:bf:c9:f1:af:40:f7:
e4:76:bd:fd:d6:da:5a:39:c4:93:61:23:9c:ab:f6:8f:19:2a:
db:f6:a4:b1:5b:6f:f2:bf:0d:79:59:d2:9b:3b:f0:fe:05:ec:
2f:71:81:e7:45:eb:64:15:e1:46:27:6e:52:3e:38:ee:01:47:
29:6a:28:cb:6c:ad:7d:6e:ec:dd:88:01:c0:f7:49:74:15:84:
b4:4f:91:16:d4:d6:68:71:95:ee:b3:74:ea:f4:95:64:08:29:
41:b5:8b:eb:fb:fb:ea:89:9b:57:d2:27:03:f3:e0:8f:92:cd:
da:77:f1:a4:f1:f7:f0:bb:e5:39:04:0f:17:bb:2c:85:47:1c:
0b:b2:34:d6:17:7b:31:db:e3:34:b3:ad:27:5c:02:ca:da:4c:
bd:35:3d:c8:61:08:59:5b:4e:84:82:09:a2:6f:cc:47:1a:fe:
68:57:ac:08:a1:30:a7:a3:30:e5:45:30:b9:ee:c6:00:0c:53:
9e:d7:e9:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWL8q5Nm1rFyVzyhjY87zhwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MjAyYTNmYzFhOGU4NWM5ZGZkMmQ2NWQzMTlhODBkZDFm
YjkxN2QwHhcNMjUwMzEyMjAwMTMyWhcNMjUwMzEzMjAwMTMyWjAzMTEwLwYDVQQD
Eyg1NWU0MjkwN2M2ZWViMGViOWZjZTE5ZTlkMWYzZWVmYjk1MTA0MGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw84jo/LLhqaZAMoVxzfCQy4xKn3
wp1qlHy8fyHx0lYnL89Cu7D+rQSKl7Se0iAmXIkWVPgtxFC5gsA0T90FfPqPWwv2
TXaVNNx1diFSOh2yzjQ7OyKwFj1tut+JUDX4DoodJqUhadHsDIJwYgmR6Z6YgISW
gAc/bljsPOEBIBcEUeT/cnBu2mlL+278BzKQbLf9HFSTNQGCf55ouekUbVaD+1qa
chNqoeW9Uh+t/g8wYzb47LsyXa7iut7aiLgfSHihV8WO7JUjv500yo4Utl9sA3Pd
qawgPBJpldU4Hyp1tt5XrhGNByOoyAsiLDT00NJxiHeDDWp8NpNQoEe+CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXkKQfG7rDrn84Z6dHz7vuVEEDmMB8GA1UdIwQY
MBaAFOQgKj/BqOhcnf0tZdMZqA3R+5F9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUNBcVA4R282RnlkX1MxbDB4bW9EZEg3a1gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8wY2Y3YjktOTM4Zi00YzE3LThlYzct
ZDE4ZDFlYTU2OGY1LzEvNUNBcVA4R282RnlkX1MxbDB4bW9EZEg3a1gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8wY2Y3YjktOTM4Zi00YzE3LThlYzctZDE4ZDFlYTU2OGY1
LzEvNUNBcVA4R282RnlkX1MxbDB4bW9EZEg3a1gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9WX3RRo
lCSfhU+7WiG2NlL9E38JMriys8lJmQ2KnRqWkag869BRo3GBIVU55kZXe1Gl1QBH
tu9BeUByeDrTmJ86v8nxr0D35Ha9/dbaWjnEk2EjnKv2jxkq2/aksVtv8r8NeVnS
mzvw/gXsL3GB50XrZBXhRiduUj447gFHKWooy2ytfW7s3YgBwPdJdBWEtE+RFtTW
aHGV7rN06vSVZAgpQbWL6/v76ombV9InA/Pgj5LN2nfxpPH38LvlOQQPF7sshUcc
C7I01hd7MdvjNLOtJ1wCytpMvTU9yGEIWVtOhIIJom/MRxr+aFesCKEwp6Mw5UUw
ue7GAAxTntfp8A==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:16 2025 by rpki-client