Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier: EYnu6UVYTtZwrmVVA0xV3N+msN+gRDYd9fZGhp9i76g=
Subject key identifier: F4:9F:A4:85:6E:F8:EE:B0:57:3B:66:53:D5:91:73:5F:C8:C8:BB:8E
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 01964A0F76BE5AF9E202D483B6C55F7B7762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 18:00:49 +0000
Manifest this update: Fri 18 Apr 2025 18:00:49 +0000
Manifest next update: Sat 19 Apr 2025 18:00:49 +0000
Files and hashes: 1: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: LxLjtjyadwk/wzySZQfVVxnz/uI4qYyuZzo+wd9bGSU=)
2: FR3a7fbq59iIo0zAlvy5kzi1iZU.roa (hash: Z35c/JbC3hZCBf85VdNEpndC+c0TUxZMQxPjJSIsAQ0=)
3: suPxSfpNrh7z5_Ta2x6TjwnQ2sY.roa (hash: jrCuL3fpLVTl6VSsAmka/tgQrfuz/laa7SHWrZ9+ExE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:76:be:5a:f9:e2:02:d4:83:b6:c5:5f:7b:77:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Apr 18 18:00:49 2025 GMT
Not After : Apr 19 18:00:49 2025 GMT
Subject: CN=f49fa4856ef8eeb0573b6653d591735fc8c8bb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:fb:f1:ad:3a:9f:23:be:44:94:83:3e:56:
05:e7:94:1b:f2:46:e4:4e:53:52:a0:6c:22:2c:6b:
c5:47:ea:cf:44:3e:b5:ea:b8:e1:90:80:aa:88:81:
4b:f7:a7:b1:68:16:34:59:a2:ed:5c:22:38:f3:16:
b4:92:1c:f5:e7:a8:59:7d:64:65:ce:58:e7:9f:87:
7d:08:7b:86:ad:bd:d8:5b:49:fd:91:07:b8:0f:b8:
30:67:53:16:57:12:be:0b:e3:df:3e:fb:2c:1d:80:
d8:d5:17:f0:6b:12:e8:46:18:e9:2d:70:e2:19:7e:
e8:c7:36:36:ea:12:ce:ff:02:e3:1d:c3:2e:c8:0e:
3b:70:20:a2:b0:c6:b7:aa:85:5a:c3:9c:c1:88:fc:
98:ed:27:9c:10:e9:bc:d8:4d:59:9d:09:41:47:39:
68:a0:55:5d:bf:74:b6:18:d7:e5:cb:9e:0d:90:ec:
a0:1c:fd:f2:51:f8:19:e1:4e:a3:33:2b:1f:b8:da:
f8:0c:ed:02:dd:3c:78:7c:5a:2e:71:05:4f:ce:0e:
23:1c:ad:a5:e1:e5:1d:d9:14:77:41:ed:83:7f:df:
85:4d:a2:5b:1b:66:b9:69:f7:76:08:c7:0a:48:78:
af:a5:e9:e3:a2:1e:96:12:12:ea:29:4c:2a:f7:34:
b3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9F:A4:85:6E:F8:EE:B0:57:3B:66:53:D5:91:73:5F:C8:C8:BB:8E
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:cf:d4:28:6d:aa:28:1c:91:29:65:15:5c:cd:95:d7:72:58:
21:8c:e6:08:6e:fe:03:eb:c3:77:3f:4e:ac:7f:07:6f:ab:fa:
20:80:fd:d3:35:bf:6d:73:6b:49:ef:b1:e2:df:3f:c5:24:cb:
3d:29:82:f6:75:e8:11:5e:e4:07:04:02:f8:04:9c:44:93:4e:
84:2d:5e:5d:1f:8b:80:ee:2b:00:f6:7c:98:e3:43:c9:62:c8:
2f:15:94:d4:df:19:71:03:33:26:25:fa:12:aa:7d:1e:6b:62:
f6:d7:28:d2:c2:21:fe:f4:10:d0:59:ba:67:99:aa:3d:94:1d:
b5:67:cd:16:0f:02:82:57:d5:74:e9:0d:02:44:2a:d8:70:04:
1b:04:97:69:40:ac:bf:4f:bb:a3:aa:18:66:c3:90:62:33:e5:
63:3c:80:68:e9:de:5d:e5:8d:e6:6f:0b:f0:50:57:92:ad:72:
45:7b:32:5b:81:a6:c9:54:f9:f0:87:37:70:2a:53:75:81:65:
7c:07:59:ff:3a:a2:21:97:c5:49:72:5d:5b:80:80:20:e2:8e:
43:13:61:6b:f1:e8:d8:fd:a9:62:30:d4:77:e8:ec:4c:4c:ac:
04:a9:42:91:38:38:24:72:d6:a4:3c:6b:69:49:8f:6a:e9:da:
6b:ec:91:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKD3a+WvniAtSDtsVfe3diMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1M2FkOWI0MzJiYjgzZDE0MWM0ODBkZWU3OGJjMzVmZjQ3
Y2I3MmMwHhcNMjUwNDE4MTgwMDQ5WhcNMjUwNDE5MTgwMDQ5WjAzMTEwLwYDVQQD
EyhmNDlmYTQ4NTZlZjhlZWIwNTczYjY2NTNkNTkxNzM1ZmM4YzhiYjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAH78a06nyO+RJSDPlYF55Qb8kbk
TlNSoGwiLGvFR+rPRD616rjhkICqiIFL96exaBY0WaLtXCI48xa0khz156hZfWRl
zljnn4d9CHuGrb3YW0n9kQe4D7gwZ1MWVxK+C+PfPvssHYDY1RfwaxLoRhjpLXDi
GX7oxzY26hLO/wLjHcMuyA47cCCisMa3qoVaw5zBiPyY7SecEOm82E1ZnQlBRzlo
oFVdv3S2GNfly54NkOygHP3yUfgZ4U6jMysfuNr4DO0C3Tx4fFoucQVPzg4jHK2l
4eUd2RR3Qe2Df9+FTaJbG2a5afd2CMcKSHivpenjoh6WEhLqKUwq9zSzswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSfpIVu+O6wVztmU9WRc1/IyLuOMB8GA1UdIwQY
MBaAFOU62bQyu4PRQcSA3ueLw1/0fLcsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lOGJkMGItZjM2ZC00NWY1LWI5ODUt
MDliYjUyODc1MzFiLzEvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9lOGJkMGItZjM2ZC00NWY1LWI5ODUtMDliYjUyODc1MzFi
LzEvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOM/UKG2q
KByRKWUVXM2V13JYIYzmCG7+A+vDdz9OrH8Hb6v6IID90zW/bXNrSe+x4t8/xSTL
PSmC9nXoEV7kBwQC+AScRJNOhC1eXR+LgO4rAPZ8mONDyWLILxWU1N8ZcQMzJiX6
Eqp9Hmti9tco0sIh/vQQ0Fm6Z5mqPZQdtWfNFg8CglfVdOkNAkQq2HAEGwSXaUCs
v0+7o6oYZsOQYjPlYzyAaOneXeWN5m8L8FBXkq1yRXsyW4GmyVT58Ic3cCpTdYFl
fAdZ/zqiIZfFSXJdW4CAIOKOQxNha/Ho2P2pYjDUd+jsTEysBKlCkTg4JHLWpDxr
aUmPaunaa+yRiw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:20:26 2025 by rpki-client