Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
File: 5TmMlveEeBsu3CA8dRxOh5h4X6E.mft (raw, json)
Hash identifier: ++ioUlZp2KbC6dhi1BeGjahfv9n+JkW8WN5Bf7GyJ9c=
Subject key identifier: BD:43:D3:51:0A:E9:1C:C4:0A:56:71:80:13:FC:FF:8C:DF:D1:03:F7
Authority key identifier: E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1
Certificate issuer: /CN=e5398c96f784781b2edc203c751c4e8798785fa1
Certificate serial: 0194C3F619F2BA07CEA8BA26D5B7CC383B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
Manifest number: 4F
Signing time: Sun 02 Feb 2025 00:01:13 +0000
Manifest this update: Sun 02 Feb 2025 00:01:13 +0000
Manifest next update: Mon 03 Feb 2025 00:01:13 +0000
Files and hashes: 1: 4lG6f_Qt9ke663aj3CqWxLBjD4Y.roa (hash: Ce0xfqYvAYGmg5KwQIRuXB3GqTBWuYg+7c4t6KVIetg=)
2: 5TmMlveEeBsu3CA8dRxOh5h4X6E.crl (hash: QKpiEzCY8w3aYKNXDW3BszoxS94TFnoT5bVfgnBuuXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:19:f2:ba:07:ce:a8:ba:26:d5:b7:cc:38:3b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5398c96f784781b2edc203c751c4e8798785fa1
Validity
Not Before: Feb 2 00:01:13 2025 GMT
Not After : Feb 3 00:01:13 2025 GMT
Subject: CN=bd43d3510ae91cc40a56718013fcff8cdfd103f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:cf:9b:eb:40:6f:4b:6b:30:65:05:d3:db:
b4:62:d3:58:2a:a6:a1:b0:83:13:68:9c:f5:01:21:
30:d0:ee:9c:c4:4c:c3:94:6e:62:3d:94:31:1a:8a:
34:67:75:60:23:3f:b8:01:3d:ec:12:5a:75:79:4a:
31:03:6f:84:7a:02:87:56:7d:73:95:93:ac:f9:66:
f4:bc:03:b7:fe:c2:1d:44:72:e3:c9:1c:b9:cf:6e:
be:11:cb:90:70:18:fc:ca:9a:04:c1:fa:7b:29:c0:
70:5a:3c:86:3d:1f:44:4f:1a:b2:4a:93:60:5c:2e:
77:43:65:d9:c1:8c:14:75:ff:2d:e8:62:9c:07:73:
8e:db:20:46:f6:76:50:f6:c0:05:0e:98:4b:de:26:
4c:e1:82:14:64:1f:c3:22:40:68:59:6c:bc:d4:dc:
12:dc:47:ee:94:53:2e:7b:08:91:80:52:fb:2a:a8:
ab:9a:46:54:32:64:ce:30:50:52:6c:92:bd:ce:bb:
26:14:24:67:d8:84:7f:db:21:62:82:55:ff:49:15:
4b:bb:45:d3:ee:bc:e3:c1:69:4b:42:a9:75:54:da:
5e:77:86:fc:1b:80:0b:12:39:5d:9f:89:eb:2f:c5:
ba:71:9d:c3:e4:ad:99:4c:62:d4:2a:a8:68:4f:69:
f6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:43:D3:51:0A:E9:1C:C4:0A:56:71:80:13:FC:FF:8C:DF:D1:03:F7
X509v3 Authority Key Identifier:
keyid:E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:26:53:11:38:ac:b0:5b:0d:31:bb:16:de:31:59:69:a4:c0:
47:30:a5:3a:a2:52:19:46:b4:a3:70:2f:4c:86:4b:23:ff:02:
f8:41:d2:8f:5e:4c:1f:a8:a6:fd:09:17:cd:38:77:c5:08:99:
a0:dc:c8:57:0e:30:f7:9e:d7:24:b5:59:7d:6a:02:ec:b1:f4:
76:8f:53:ca:3e:c9:d2:4a:92:47:fa:00:81:90:a4:f5:87:e5:
15:65:78:f4:ef:66:56:b1:43:9c:b7:bf:db:bf:b6:12:5d:3f:
8a:90:99:22:e5:67:b9:22:9f:9c:b1:81:80:51:b2:ef:de:21:
fc:8c:ca:0d:fa:07:2f:7c:54:28:16:af:dc:f9:a4:7c:ba:5f:
05:48:e4:20:a5:82:8d:db:ef:50:7c:37:09:7d:e1:65:9b:0c:
61:86:e2:14:d2:e6:c6:9e:72:8c:ab:11:59:cc:ee:3b:28:72:
94:3f:94:99:0e:54:e2:03:8d:29:75:3b:af:c1:6a:f6:c6:8c:
74:18:0d:fb:1b:f5:66:1f:cc:32:2d:33:a0:b4:66:0f:29:ea:
99:73:b3:8d:1e:b1:8d:41:df:d5:0e:de:86:41:1a:7a:6a:e2:
fe:6b:0a:48:45:74:53:7e:11:f7:b6:93:91:59:7c:da:6b:8c:
aa:6b:81:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTD9hnyugfOqLom1bfMODt8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1Mzk4Yzk2Zjc4NDc4MWIyZWRjMjAzYzc1MWM0ZTg3OTg3
ODVmYTEwHhcNMjUwMjAyMDAwMTEzWhcNMjUwMjAzMDAwMTEzWjAzMTEwLwYDVQQD
EyhiZDQzZDM1MTBhZTkxY2M0MGE1NjcxODAxM2ZjZmY4Y2RmZDEwM2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyjPm+tAb0trMGUF09u0YtNYKqah
sIMTaJz1ASEw0O6cxEzDlG5iPZQxGoo0Z3VgIz+4AT3sElp1eUoxA2+EegKHVn1z
lZOs+Wb0vAO3/sIdRHLjyRy5z26+EcuQcBj8ypoEwfp7KcBwWjyGPR9ETxqySpNg
XC53Q2XZwYwUdf8t6GKcB3OO2yBG9nZQ9sAFDphL3iZM4YIUZB/DIkBoWWy81NwS
3EfulFMuewiRgFL7KqirmkZUMmTOMFBSbJK9zrsmFCRn2IR/2yFiglX/SRVLu0XT
7rzjwWlLQql1VNped4b8G4ALEjldn4nrL8W6cZ3D5K2ZTGLUKqhoT2n2NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1D01EK6RzEClZxgBP8/4zf0QP3MB8GA1UdIwQY
MBaAFOU5jJb3hHgbLtwgPHUcToeYeF+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVRtTWx2ZUVlQnN1M0NBOGRSeE9oNWg0WDZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS85ZjU0YjUtYTM5YS00ZTYwLThiMWMt
ZDFlNDYwNTE4NDgzLzEvNVRtTWx2ZUVlQnN1M0NBOGRSeE9oNWg0WDZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS85ZjU0YjUtYTM5YS00ZTYwLThiMWMtZDFlNDYwNTE4NDgz
LzEvNVRtTWx2ZUVlQnN1M0NBOGRSeE9oNWg0WDZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyZTETis
sFsNMbsW3jFZaaTARzClOqJSGUa0o3AvTIZLI/8C+EHSj15MH6im/QkXzTh3xQiZ
oNzIVw4w957XJLVZfWoC7LH0do9Tyj7J0kqSR/oAgZCk9YflFWV49O9mVrFDnLe/
27+2El0/ipCZIuVnuSKfnLGBgFGy794h/IzKDfoHL3xUKBav3PmkfLpfBUjkIKWC
jdvvUHw3CX3hZZsMYYbiFNLmxp5yjKsRWczuOyhylD+UmQ5U4gONKXU7r8Fq9saM
dBgN+xv1Zh/MMi0zoLRmDynqmXOzjR6xjUHf1Q7ehkEaemri/msKSEV0U34R97aT
kVl82muMqmuBBQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:49:27 2025 by rpki-client