Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
File: 5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json)
Hash identifier: kFLyrMSLMzDqG2PaqXuK0Iaz8vkrGYdvOOASrytGz6k=
Subject key identifier: 0C:6F:D0:27:35:AF:B2:B6:AB:C4:42:94:92:EF:00:4D:1C:E6:A3:8A
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Certificate issuer: /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial: 019650117B81AB9DFD2CA412931C5E96A8C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
Manifest number: 10E1
Signing time: Sat 19 Apr 2025 22:00:45 +0000
Manifest this update: Sat 19 Apr 2025 22:00:45 +0000
Manifest next update: Sun 20 Apr 2025 22:00:45 +0000
Files and hashes: 1: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: 1+cKdjdsrLMbYiYtXrpnOpr317k+LmyJguBBKex4puI=)
2: Hhlf2TMcsBbO8FDcjvrbEjaLNJk.roa (hash: ZLATPH9bmMVI2zAzUVqtDm2hTynFHZLFVRo0ph7khAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:7b:81:ab:9d:fd:2c:a4:12:93:1c:5e:96:a8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Validity
Not Before: Apr 19 22:00:45 2025 GMT
Not After : Apr 20 22:00:45 2025 GMT
Subject: CN=0c6fd02735afb2b6abc4429492ef004d1ce6a38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:41:46:e1:ba:56:d1:b9:ae:de:a0:be:40:
df:3d:cb:42:c8:04:82:22:1e:f3:2f:a1:b9:d5:50:
e2:11:48:16:5f:0e:55:92:e0:a8:29:a2:95:b6:a8:
82:da:e4:c9:ce:fd:54:c4:02:92:db:08:63:bb:fc:
ac:47:0c:24:ac:ba:b7:1e:55:15:f2:19:62:b4:af:
7d:4a:8d:3c:2e:e2:d9:6f:51:4b:8a:38:dc:ec:7b:
f6:a4:82:37:85:4d:b6:aa:9f:50:2e:44:0b:28:79:
27:b1:e2:d3:b6:3a:6f:f7:bf:f1:7f:56:ec:76:31:
1b:7c:69:4d:c2:bf:35:7e:cd:b5:e9:8f:46:ce:50:
97:2a:cc:49:fb:a4:b7:d7:ad:8f:19:ac:ae:2c:47:
30:bc:e1:7c:d2:da:d6:7f:da:7a:24:4c:70:64:60:
28:e9:66:d2:80:86:61:b8:7e:b1:6f:1b:b3:88:df:
9b:57:ac:74:2c:40:ae:8a:af:10:56:47:07:1b:76:
d5:d1:a4:b0:5d:00:46:81:76:12:87:fb:82:91:33:
2f:3f:e5:09:12:c5:68:01:12:f0:71:c6:ed:47:3d:
94:16:9d:46:3f:fc:83:56:b4:83:8b:d4:86:13:db:
bd:a3:64:f7:d6:30:f5:41:50:57:85:3a:62:39:f3:
e0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6F:D0:27:35:AF:B2:B6:AB:C4:42:94:92:EF:00:4D:1C:E6:A3:8A
X509v3 Authority Key Identifier:
keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c0:c4:85:fe:e5:47:7d:82:25:ad:bb:5f:a8:4a:7f:c1:9b:
5a:d1:db:fa:7d:d2:99:35:00:fd:b5:c2:51:6f:33:30:6f:ba:
dc:20:d4:89:a7:48:21:40:52:7e:20:18:34:7e:e0:4f:19:5e:
b8:c7:5a:26:88:da:30:03:0b:e6:6d:e2:f9:78:61:aa:77:e5:
58:38:4b:3a:7e:22:4d:cd:9c:b4:94:70:bc:2f:11:04:4e:7f:
f2:c2:fc:1c:9c:6e:6d:f9:89:d9:1d:ad:71:1d:4e:ea:90:6e:
aa:d4:a3:74:4a:b3:5d:db:55:3d:46:3a:e6:89:fa:85:84:45:
e6:13:21:11:2d:2e:b6:9e:ff:31:e2:88:d6:3c:90:ad:77:87:
93:d3:01:36:da:5e:6a:99:45:20:7e:d1:6b:65:ed:e2:0f:78:
c9:30:23:8e:5d:c7:ce:f7:67:5b:9e:67:17:d0:a6:f0:b8:cf:
f2:69:58:74:92:08:1e:2c:df:1f:12:30:f4:c5:70:c9:39:49:
9d:a5:b7:0a:ba:c2:3e:4d:67:96:b6:a5:c9:29:7c:6b:77:66:
13:cc:b5:62:de:a3:24:96:2e:9c:d5:1a:c9:49:23:d8:f9:9e:
e2:c2:9f:df:c2:d7:07:97:8a:41:a1:19:df:8d:72:08:3c:44:
ee:78:b7:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQEXuBq539LKQSkxxelqjDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZGIwMzAxZmUyNDYxYzZkZTNmNzE4ZDg0N2NiNWRjN2Mw
MGIyZDIwHhcNMjUwNDE5MjIwMDQ1WhcNMjUwNDIwMjIwMDQ1WjAzMTEwLwYDVQQD
EygwYzZmZDAyNzM1YWZiMmI2YWJjNDQyOTQ5MmVmMDA0ZDFjZTZhMzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjdBRuG6VtG5rt6gvkDfPctCyASC
Ih7zL6G51VDiEUgWXw5VkuCoKaKVtqiC2uTJzv1UxAKS2whju/ysRwwkrLq3HlUV
8hlitK99So08LuLZb1FLijjc7Hv2pII3hU22qp9QLkQLKHknseLTtjpv97/xf1bs
djEbfGlNwr81fs216Y9GzlCXKsxJ+6S3162PGayuLEcwvOF80trWf9p6JExwZGAo
6WbSgIZhuH6xbxuziN+bV6x0LECuiq8QVkcHG3bV0aSwXQBGgXYSh/uCkTMvP+UJ
EsVoARLwccbtRz2UFp1GP/yDVrSDi9SGE9u9o2T31jD1QVBXhTpiOfPgeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxv0Cc1r7K2q8RClJLvAE0c5qOKMB8GA1UdIwQY
MBaAFOTbAwH+JGHG3j9xjYR8tdx8ALLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82ZTY0MDUtZGJlNy00MmIyLTg4N2Mt
ZmZkZWJlYzhmNTA1LzEvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC82ZTY0MDUtZGJlNy00MmIyLTg4N2MtZmZkZWJlYzhmNTA1
LzEvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjsDEhf7l
R32CJa27X6hKf8GbWtHb+n3SmTUA/bXCUW8zMG+63CDUiadIIUBSfiAYNH7gTxle
uMdaJojaMAML5m3i+XhhqnflWDhLOn4iTc2ctJRwvC8RBE5/8sL8HJxubfmJ2R2t
cR1O6pBuqtSjdEqzXdtVPUY65on6hYRF5hMhES0utp7/MeKI1jyQrXeHk9MBNtpe
aplFIH7Ra2Xt4g94yTAjjl3HzvdnW55nF9Cm8LjP8mlYdJIIHizfHxIw9MVwyTlJ
naW3CrrCPk1nlralySl8a3dmE8y1Yt6jJJYunNUayUkj2Pme4sKf38LXB5eKQaEZ
341yCDxE7ni3QQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:46:21 2025 by rpki-client