Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
File: p5TNL5F05CFpMaEF2yYayqOTinw.mft (raw, json)
Hash identifier: LjzAaA6ztPnao8DINSSQ2tLYAmXJVkIr3+g605fKh3w=
Subject key identifier: F8:8F:24:6B:1F:86:94:E5:B2:A4:DC:81:0F:00:92:9B:56:E3:9C:3F
Authority key identifier: A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
Certificate issuer: /CN=a794cd2f9174e4216931a105db261acaa3938a7c
Certificate serial: 019656136E5737FC1259527D14FDF8F2B1C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
Manifest number: 1218
Signing time: Mon 21 Apr 2025 02:00:36 +0000
Manifest this update: Mon 21 Apr 2025 02:00:36 +0000
Manifest next update: Tue 22 Apr 2025 02:00:36 +0000
Files and hashes: 1: LIOiMNle0vsipx0T1V6aKGTU24U.roa (hash: 1KJvdL1wmyRojBeJyRsEQwf+KBGdNnm/q4xYqP+PnmE=)
2: p5TNL5F05CFpMaEF2yYayqOTinw.crl (hash: C43Ho2SBg9oBcMhNfit/12qFnnd3iMOnTmK20FewcQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:6e:57:37:fc:12:59:52:7d:14:fd:f8:f2:b1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a794cd2f9174e4216931a105db261acaa3938a7c
Validity
Not Before: Apr 21 02:00:36 2025 GMT
Not After : Apr 22 02:00:36 2025 GMT
Subject: CN=f88f246b1f8694e5b2a4dc810f00929b56e39c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:44:30:aa:1f:59:b3:04:b5:e5:b8:72:c4:bf:
fe:1c:98:94:9d:ce:6c:d4:56:04:b8:bc:36:1c:82:
18:32:65:7e:90:b2:d2:98:f9:eb:e6:13:96:60:16:
25:b8:04:1c:0f:cb:77:bb:5d:a4:a7:aa:de:b9:21:
b3:ec:75:21:62:e4:1a:79:19:1d:0a:39:93:a2:4c:
f1:5c:f7:bb:b9:20:6d:27:94:fd:45:f1:18:27:39:
8c:b6:d5:cd:bc:47:66:2a:e1:d2:e6:66:3c:34:9b:
36:8e:18:c3:8f:82:da:22:34:e8:7b:c1:f2:58:ae:
cf:85:1c:c5:8c:d4:d9:a5:74:d0:f3:99:e8:dc:0d:
c4:ab:61:df:5c:79:78:66:9e:1b:13:f3:52:ba:47:
ac:60:76:60:7b:b3:b4:8a:ae:f5:e7:94:f4:69:5b:
af:b9:e7:62:96:4b:70:af:89:b5:22:ad:75:13:db:
87:8d:0a:80:7a:a2:af:d6:41:2f:48:a1:0b:c5:82:
0b:e6:4f:eb:3f:dc:f3:6a:40:f1:f6:cb:3d:0e:a9:
f8:77:6a:f2:7d:8a:b9:0f:c9:4a:ac:76:b7:a2:66:
84:a7:86:ab:8b:85:b0:eb:a2:28:01:e0:cc:c8:d0:
15:b1:19:55:6d:da:cf:58:20:73:c0:96:a5:93:d8:
93:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8F:24:6B:1F:86:94:E5:B2:A4:DC:81:0F:00:92:9B:56:E3:9C:3F
X509v3 Authority Key Identifier:
keyid:A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:30:33:7d:62:54:a6:25:5c:85:9e:27:09:50:d6:a8:d1:d9:
0e:fb:d7:9b:b8:03:8f:7e:5f:90:42:e0:ec:35:0a:bb:95:29:
79:58:1b:71:f4:64:2d:eb:ad:d6:06:a8:4e:a6:3e:f4:d5:d1:
68:78:b8:0f:cd:f1:94:fd:52:59:66:77:6c:a6:e4:f9:a3:e0:
aa:d4:48:df:9c:ff:c2:ac:04:71:80:09:52:52:d1:c7:bb:08:
7e:ae:4f:89:88:12:30:42:41:00:cb:e2:60:62:14:06:80:0f:
de:55:4b:f5:59:e3:e7:ac:68:fd:92:44:78:2c:52:4a:b4:ab:
77:51:2e:e8:b2:af:4b:8b:8a:b7:91:7a:b7:f7:4c:63:40:7d:
6c:75:4b:8f:30:6c:9b:34:d7:60:00:1b:04:06:ea:6a:87:10:
fa:4b:f0:5d:f6:3f:57:a3:41:a8:25:82:5a:2d:bb:4c:e0:7c:
4b:ad:fd:9c:28:04:ba:c7:0a:b5:88:58:21:b1:93:c0:de:a0:
7d:81:66:23:d6:82:aa:44:92:5f:a4:ad:c6:60:51:00:45:b0:
fe:49:ab:63:57:0d:95:de:ea:5c:64:7f:a9:f7:c3:af:29:09:
24:c7:41:1b:23:02:e5:3d:b7:b1:a3:ff:bc:0a:cc:b9:3e:b4:
c0:f6:06:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWE25XN/wSWVJ9FP348rHBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3OTRjZDJmOTE3NGU0MjE2OTMxYTEwNWRiMjYxYWNhYTM5
MzhhN2MwHhcNMjUwNDIxMDIwMDM2WhcNMjUwNDIyMDIwMDM2WjAzMTEwLwYDVQQD
EyhmODhmMjQ2YjFmODY5NGU1YjJhNGRjODEwZjAwOTI5YjU2ZTM5YzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EQwqh9ZswS15bhyxL/+HJiUnc5s
1FYEuLw2HIIYMmV+kLLSmPnr5hOWYBYluAQcD8t3u12kp6reuSGz7HUhYuQaeRkd
CjmTokzxXPe7uSBtJ5T9RfEYJzmMttXNvEdmKuHS5mY8NJs2jhjDj4LaIjToe8Hy
WK7PhRzFjNTZpXTQ85no3A3Eq2HfXHl4Zp4bE/NSukesYHZge7O0iq7155T0aVuv
uedilktwr4m1Iq11E9uHjQqAeqKv1kEvSKELxYIL5k/rP9zzakDx9ss9Dqn4d2ry
fYq5D8lKrHa3omaEp4ari4Ww66IoAeDMyNAVsRlVbdrPWCBzwJalk9iTqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiPJGsfhpTlsqTcgQ8AkptW45w/MB8GA1UdIwQY
MBaAFKeUzS+RdOQhaTGhBdsmGsqjk4p8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDVUTkw1RjA1Q0ZwTWFFRjJ5WWF5cU9UaW53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kYmQxMjctNGIxMi00ZjE4LThkZGUt
YTM1ODVhMDVlYTJiLzEvcDVUTkw1RjA1Q0ZwTWFFRjJ5WWF5cU9UaW53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kYmQxMjctNGIxMi00ZjE4LThkZGUtYTM1ODVhMDVlYTJi
LzEvcDVUTkw1RjA1Q0ZwTWFFRjJ5WWF5cU9UaW53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTAzfWJU
piVchZ4nCVDWqNHZDvvXm7gDj35fkELg7DUKu5UpeVgbcfRkLeut1gaoTqY+9NXR
aHi4D83xlP1SWWZ3bKbk+aPgqtRI35z/wqwEcYAJUlLRx7sIfq5PiYgSMEJBAMvi
YGIUBoAP3lVL9Vnj56xo/ZJEeCxSSrSrd1Eu6LKvS4uKt5F6t/dMY0B9bHVLjzBs
mzTXYAAbBAbqaocQ+kvwXfY/V6NBqCWCWi27TOB8S639nCgEuscKtYhYIbGTwN6g
fYFmI9aCqkSSX6StxmBRAEWw/kmrY1cNld7qXGR/qffDrykJJMdBGyMC5T23saP/
vArMuT60wPYGmg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:42 2025 by rpki-client