Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
File: 5fmtISzWWrTuK46bP4uDPDkA6n0.mft (raw, json)
Hash identifier: qFhcYCp+1KrLeriiEY3kLiwj5WS3pCPOMnigQrkw1GQ=
Subject key identifier: 94:36:B4:AF:7F:63:CB:9B:4F:7E:95:7D:7A:A6:9A:FB:A9:52:A2:C5
Authority key identifier: E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
Certificate issuer: /CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
Certificate serial: 01963F8B9CE4CAB21F49C5970F4FAD274826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
Manifest number: 0835
Signing time: Wed 16 Apr 2025 17:00:36 +0000
Manifest this update: Wed 16 Apr 2025 17:00:36 +0000
Manifest next update: Thu 17 Apr 2025 17:00:36 +0000
Files and hashes: 1: 5SbPyjmIYXelitOmA1AVO3bhm0Q.roa (hash: 1XIxpyYBD9DDRIa0BTpbMKp2ZvPzaojB9NovyRazhxQ=)
2: 5fmtISzWWrTuK46bP4uDPDkA6n0.crl (hash: ZC+gTZN18n8w8DQdcoCbduHGbr2v2uRyY44Fptdno58=)
3: 7HHw1TGIKZGT4OMQXJ2kcRpWokQ.roa (hash: MAqlIYjH1775SsM1oEUQoqGZ7ZtgZ752pYJj6tU1DkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:9c:e4:ca:b2:1f:49:c5:97:0f:4f:ad:27:48:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
Validity
Not Before: Apr 16 17:00:36 2025 GMT
Not After : Apr 17 17:00:36 2025 GMT
Subject: CN=9436b4af7f63cb9b4f7e957d7aa69afba952a2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:8b:83:20:32:a9:03:55:b8:f4:45:93:bf:
90:78:d7:5c:27:51:85:46:a5:64:c7:42:95:8d:81:
89:d9:47:f5:4b:31:31:ab:56:5e:16:62:3f:96:89:
a2:91:d8:f7:28:3d:c2:a9:b6:68:d7:da:d3:6d:49:
26:9b:03:a0:f7:44:e2:3a:a6:4a:f4:d4:af:94:0b:
ff:66:77:b9:8c:0e:c2:ab:66:15:e3:75:16:94:6f:
81:77:8b:b5:3a:b9:0a:d6:7c:8a:e4:31:2e:e3:d1:
bf:c2:45:96:d9:a8:10:7b:20:ec:85:67:fe:e2:fa:
8e:3e:ea:e0:10:47:2b:be:e2:12:7d:f1:0d:f6:1f:
c0:a9:de:62:c1:01:cc:96:37:c8:95:5d:70:ca:1a:
75:dd:f4:92:ef:25:d7:f8:67:f5:53:13:e9:39:9f:
55:c6:21:5f:9f:85:70:41:c5:e5:4a:ad:f5:4d:b0:
f2:b2:c5:3b:fc:69:3b:5c:ec:90:62:b7:42:ac:22:
26:fa:e4:0a:a8:aa:c2:3d:53:e4:bc:b1:b3:39:f7:
5f:e4:96:53:8f:3d:b2:fe:7d:71:c3:02:91:38:04:
c3:b1:53:68:dc:ab:e6:b1:46:fd:2a:8a:e7:11:2a:
e9:aa:45:01:c3:b9:53:a4:58:7c:3f:ac:b5:d2:78:
a3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:36:B4:AF:7F:63:CB:9B:4F:7E:95:7D:7A:A6:9A:FB:A9:52:A2:C5
X509v3 Authority Key Identifier:
keyid:E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:43:cf:8a:51:bb:37:60:56:c9:a9:03:1e:5f:98:73:31:14:
9f:f5:ee:89:d2:08:4d:f2:be:8d:f7:69:77:f6:00:4d:be:04:
85:ca:28:6d:07:fd:5e:43:b7:f0:f2:65:34:03:e5:f6:52:1b:
23:55:bd:fd:83:c2:bf:2f:df:6a:12:d3:50:d2:26:47:05:fa:
01:ad:2f:fa:16:09:00:2b:a5:82:3c:b9:f3:89:9f:5b:63:d7:
d6:e1:c2:96:ee:b5:5b:a6:fa:8b:31:40:22:ad:20:c9:ff:bc:
0e:dc:f2:83:95:8b:2a:23:ad:9c:c7:b0:4a:df:2c:a5:19:75:
93:a3:c5:e2:c5:e4:8a:1a:1f:f4:62:8e:41:17:ad:3e:90:35:
52:6c:a8:70:5a:60:48:a9:82:d4:c1:ea:8c:ed:a6:f3:a5:42:
9f:01:ea:a8:23:53:a3:b7:9c:f5:c2:de:42:a4:ad:de:e0:7d:
ff:6b:d5:c8:58:71:d5:f1:81:7a:9d:62:b7:b6:56:e2:91:65:
4c:17:65:10:58:5f:c9:5e:d2:8d:16:60:00:59:d5:da:2d:46:
b5:3b:32:61:1f:84:6f:59:e3:0c:bd:98:05:3f:b3:be:57:d7:
06:e3:20:58:c1:b7:72:d4:ed:51:32:26:ff:7c:0e:45:ac:bb:
7a:f4:09:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/i5zkyrIfScWXD0+tJ0gmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZjlhZDIxMmNkNjVhYjRlZTJiOGU5YjNmOGI4MzNjMzkw
MGVhN2QwHhcNMjUwNDE2MTcwMDM2WhcNMjUwNDE3MTcwMDM2WjAzMTEwLwYDVQQD
Eyg5NDM2YjRhZjdmNjNjYjliNGY3ZTk1N2Q3YWE2OWFmYmE5NTJhMmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+GLgyAyqQNVuPRFk7+QeNdcJ1GF
RqVkx0KVjYGJ2Uf1SzExq1ZeFmI/lomikdj3KD3CqbZo19rTbUkmmwOg90TiOqZK
9NSvlAv/Zne5jA7Cq2YV43UWlG+Bd4u1OrkK1nyK5DEu49G/wkWW2agQeyDshWf+
4vqOPurgEEcrvuISffEN9h/Aqd5iwQHMljfIlV1wyhp13fSS7yXX+Gf1UxPpOZ9V
xiFfn4VwQcXlSq31TbDyssU7/Gk7XOyQYrdCrCIm+uQKqKrCPVPkvLGzOfdf5JZT
jz2y/n1xwwKROATDsVNo3KvmsUb9KornESrpqkUBw7lTpFh8P6y10nijJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQ2tK9/Y8ubT36VfXqmmvupUqLFMB8GA1UdIwQY
MBaAFOX5rSEs1lq07iuOmz+Lgzw5AOp9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWZtdElTeldXclR1SzQ2YlA0dURQRGtBNm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mODA5MjYtZTlhOS00MWY5LTk1YTAt
OWI4MTNhMjAwMmFhLzEvNWZtdElTeldXclR1SzQ2YlA0dURQRGtBNm4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mODA5MjYtZTlhOS00MWY5LTk1YTAtOWI4MTNhMjAwMmFh
LzEvNWZtdElTeldXclR1SzQ2YlA0dURQRGtBNm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0PPilG7
N2BWyakDHl+YczEUn/XuidIITfK+jfdpd/YATb4EhcoobQf9XkO38PJlNAPl9lIb
I1W9/YPCvy/fahLTUNImRwX6Aa0v+hYJACulgjy584mfW2PX1uHClu61W6b6izFA
Iq0gyf+8Dtzyg5WLKiOtnMewSt8spRl1k6PF4sXkihof9GKOQRetPpA1UmyocFpg
SKmC1MHqjO2m86VCnwHqqCNTo7ec9cLeQqSt3uB9/2vVyFhx1fGBep1it7ZW4pFl
TBdlEFhfyV7SjRZgAFnV2i1GtTsyYR+Eb1njDL2YBT+zvlfXBuMgWMG3ctTtUTIm
/3wORay7evQJbQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 19:22:17 2025 by rpki-client