Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
File: 5KnudPLZhMiKs7ma5x0LfHuvgVA.mft (raw, json)
Hash identifier: KiZtr4XOeyi1PrRKHYxxOWBh2PigxO2Lf+t1hak9ExI=
Subject key identifier: E3:48:3C:EF:86:BC:F1:B1:B3:7F:E6:AF:D4:72:78:8E:72:A5:5F:6A
Authority key identifier: E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
Certificate issuer: /CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Certificate serial: 01965CF17C70AB8C025BD86C02AC5C1BBE51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
Manifest number: 1504
Signing time: Tue 22 Apr 2025 10:00:51 +0000
Manifest this update: Tue 22 Apr 2025 10:00:51 +0000
Manifest next update: Wed 23 Apr 2025 10:00:51 +0000
Files and hashes: 1: 1kmQygnKJuFomMWscO7_tmV5MPY.roa (hash: 1R7F/hqJ/U8XRXU5qTBNp/iBMwQ2HNOAJ68qC4TlDwI=)
2: 5KnudPLZhMiKs7ma5x0LfHuvgVA.crl (hash: YY48v26gjbBkykuC6Jbb6dv1mNZ8GHF1HQJHt/4VXhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:7c:70:ab:8c:02:5b:d8:6c:02:ac:5c:1b:be:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Validity
Not Before: Apr 22 10:00:51 2025 GMT
Not After : Apr 23 10:00:51 2025 GMT
Subject: CN=e3483cef86bcf1b1b37fe6afd472788e72a55f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:e2:82:f4:0e:ac:2f:39:4c:38:54:29:c6:
6f:f5:ef:a5:90:b3:8f:79:7f:fd:00:63:41:0e:f3:
26:96:75:f4:03:7f:25:9b:71:ad:f9:c4:69:f3:19:
e3:73:3c:97:eb:d1:37:cb:34:a9:54:00:25:95:94:
1a:b5:2e:12:63:57:c2:f7:8b:5e:0b:0b:bf:e4:15:
3c:0d:2d:77:b7:fb:f8:35:33:33:5e:39:82:06:63:
cc:28:38:0f:ab:65:d1:31:1f:43:42:4b:0d:98:95:
71:55:de:b5:c1:4e:b7:8d:77:88:51:4c:65:eb:5b:
88:eb:a1:eb:35:35:ee:ee:fd:c1:59:52:c0:fd:5a:
c8:7e:d6:6e:8b:3f:17:81:ea:a5:a9:37:b8:a3:44:
c4:ff:07:71:ae:89:aa:4c:50:6f:96:51:44:77:82:
b7:75:14:bf:1c:6f:55:37:50:19:bb:cc:74:73:7a:
63:60:ea:a3:ad:1a:dc:57:2f:13:25:9f:35:cc:4c:
7b:e1:48:80:e3:de:48:74:05:31:23:ce:31:45:50:
fd:f5:9a:fb:3e:85:6a:b3:c0:ba:c4:2d:a6:16:b5:
c3:2f:6c:f0:6a:4f:27:c5:75:9d:eb:39:e9:36:ed:
9e:f4:00:a0:66:f4:88:95:5e:26:6a:93:b3:bd:f7:
35:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:48:3C:EF:86:BC:F1:B1:B3:7F:E6:AF:D4:72:78:8E:72:A5:5F:6A
X509v3 Authority Key Identifier:
keyid:E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:35:d7:ef:73:fe:7a:e1:a1:74:f8:f5:39:92:e5:e4:17:4a:
1d:c9:b3:6a:8f:bd:4c:4e:e2:29:9f:e3:26:d1:73:e0:1f:9b:
a1:68:c0:59:c7:62:be:77:bf:df:21:37:46:ad:5b:25:3a:8b:
9c:c1:d5:28:c4:e4:26:e8:1b:c1:63:5d:ec:62:06:67:fe:fd:
e1:64:20:99:91:8e:b2:d0:86:69:bf:6c:93:4a:44:f2:38:c6:
0c:fe:d4:4c:84:f9:f7:b3:1b:36:99:0e:0c:23:1a:f1:d6:9a:
d9:00:ee:90:c3:0d:dd:c3:c2:bd:38:be:42:f1:07:12:4a:c5:
54:4b:7c:32:8b:9b:de:0e:63:24:1e:a4:06:50:5e:14:00:66:
4d:ea:6e:79:48:d5:02:74:da:c1:6b:4f:a3:41:97:f0:38:20:
ee:78:e6:5b:7b:24:79:93:0e:06:38:0f:a3:91:ed:48:47:77:
48:78:f7:d0:f1:8c:6d:42:3f:17:b8:d9:17:79:b6:c8:7b:05:
39:d0:34:71:9d:4d:1e:e0:b7:34:d0:1b:6c:ac:01:4e:f0:de:
ad:28:22:ba:09:fe:9b:58:34:fc:94:fa:b1:80:34:04:be:58:
50:8c:76:b6:9d:ee:88:8f:a6:65:75:b3:6b:fc:14:70:e7:c8:
37:a9:37:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZc8Xxwq4wCW9hsAqxcG75RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTllZTc0ZjJkOTg0Yzg4YWIzYjk5YWU3MWQwYjdjN2Jh
ZjgxNTAwHhcNMjUwNDIyMTAwMDUxWhcNMjUwNDIzMTAwMDUxWjAzMTEwLwYDVQQD
EyhlMzQ4M2NlZjg2YmNmMWIxYjM3ZmU2YWZkNDcyNzg4ZTcyYTU1ZjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbfigvQOrC85TDhUKcZv9e+lkLOP
eX/9AGNBDvMmlnX0A38lm3Gt+cRp8xnjczyX69E3yzSpVAAllZQatS4SY1fC94te
Cwu/5BU8DS13t/v4NTMzXjmCBmPMKDgPq2XRMR9DQksNmJVxVd61wU63jXeIUUxl
61uI66HrNTXu7v3BWVLA/VrIftZuiz8XgeqlqTe4o0TE/wdxromqTFBvllFEd4K3
dRS/HG9VN1AZu8x0c3pjYOqjrRrcVy8TJZ81zEx74UiA495IdAUxI84xRVD99Zr7
PoVqs8C6xC2mFrXDL2zwak8nxXWd6znpNu2e9ACgZvSIlV4mapOzvfc1bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONIPO+GvPGxs3/mr9RyeI5ypV9qMB8GA1UdIwQY
MBaAFOSp7nTy2YTIirO5mucdC3x7r4FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtudWRQTFpoTWlLczdtYTV4MExmSHV2Z1ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lYWRjOTUtZGFhZi00Nzc2LTliZTgt
ZDJjMGJlNDQ4NTYxLzEvNUtudWRQTFpoTWlLczdtYTV4MExmSHV2Z1ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9lYWRjOTUtZGFhZi00Nzc2LTliZTgtZDJjMGJlNDQ4NTYx
LzEvNUtudWRQTFpoTWlLczdtYTV4MExmSHV2Z1ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTXX73P+
euGhdPj1OZLl5BdKHcmzao+9TE7iKZ/jJtFz4B+boWjAWcdivne/3yE3Rq1bJTqL
nMHVKMTkJugbwWNd7GIGZ/794WQgmZGOstCGab9sk0pE8jjGDP7UTIT597MbNpkO
DCMa8daa2QDukMMN3cPCvTi+QvEHEkrFVEt8Moub3g5jJB6kBlBeFABmTepueUjV
AnTawWtPo0GX8Dgg7njmW3skeZMOBjgPo5HtSEd3SHj30PGMbUI/F7jZF3m2yHsF
OdA0cZ1NHuC3NNAbbKwBTvDerSgiugn+m1g0/JT6sYA0BL5YUIx2tp3uiI+mZXWz
a/wUcOfIN6k3bg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 15:34:20 2025 by rpki-client