Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
File: 5ag7QLP019MfszaNr6yhGZpEmJI.mft (raw, json)
Hash identifier: ajkAZO4dF9Xg2aUvE93Lvs6T8hxbtH/XoCvCUncY1AA=
Subject key identifier: 2F:06:70:54:1A:B1:9A:69:E2:56:3A:B1:27:2D:49:3E:94:50:67:2C
Authority key identifier: E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
Certificate issuer: /CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Certificate serial: 019638ADB27C92D70AF1963D4DBAFCD67E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
Manifest number: 0502
Signing time: Tue 15 Apr 2025 09:00:29 +0000
Manifest this update: Tue 15 Apr 2025 09:00:29 +0000
Manifest next update: Wed 16 Apr 2025 09:00:29 +0000
Files and hashes: 1: 5ag7QLP019MfszaNr6yhGZpEmJI.crl (hash: p33B+X/0UPhH2mLdB+CeIV+73YWCllIQcDafxqAEiU0=)
2: dFZMO2VP4AqySbEQh3NK_Is5BKQ.roa (hash: ROKbXrppvP4A8pHGDyWRJNx07Y7g4bd+83JBnGx3icI=)
3: g6-XvIXV3Eql3Coxvc-nq6Kly9Y.roa (hash: 2JhAFiPl0wmw6ysVFMQAoRoFcSMoEuXFJFM5vnLJ2+M=)
4: h1oyUSQHfCUnNhv3GPjMusMqBOQ.roa (hash: zVnvi6OzjNH5JWYjXPv16C0I43oqAW042jfOToOeKNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:ad:b2:7c:92:d7:0a:f1:96:3d:4d:ba:fc:d6:7e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Validity
Not Before: Apr 15 09:00:29 2025 GMT
Not After : Apr 16 09:00:29 2025 GMT
Subject: CN=2f0670541ab19a69e2563ab1272d493e9450672c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:69:23:e3:5c:da:bf:5a:6a:a7:63:43:15:
92:9e:c5:d5:99:7c:c9:a5:57:0b:57:8a:38:55:a6:
51:1a:9e:8a:6a:bc:ee:ea:8a:e2:0e:f9:16:77:af:
a7:83:ea:58:40:b4:ca:bb:63:38:d4:25:e2:2d:2a:
e3:3d:22:70:4e:8f:fc:30:e2:55:01:b4:28:65:5b:
53:45:52:b1:c9:2f:e0:2a:05:06:ba:46:b0:0c:77:
74:26:16:9d:09:0e:57:ee:95:b5:03:31:e2:33:28:
6f:92:1c:7c:4c:ff:64:4f:c3:5d:17:9f:2e:4f:b8:
c2:68:1f:47:6c:90:4f:fc:19:e4:02:29:34:b9:fa:
b5:61:f2:b6:63:74:4d:5d:cd:5a:c8:84:9a:14:6e:
4c:4b:35:79:46:39:6d:03:a4:4e:a6:6b:24:d9:56:
e8:93:f2:66:81:b5:28:99:84:b6:b8:d2:a8:23:65:
9b:93:95:c0:49:84:ee:ac:c5:4f:2e:36:7a:b1:ed:
84:30:09:1f:14:27:ed:89:af:0a:62:42:77:ff:91:
e5:2b:c8:ac:98:1f:87:99:c9:8c:8a:d9:32:60:fa:
24:95:d3:6f:f6:04:ee:b9:13:e2:3c:fb:3c:1e:1a:
18:59:e0:52:00:5d:c3:35:d9:d4:0f:49:89:8b:8c:
1b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:06:70:54:1A:B1:9A:69:E2:56:3A:B1:27:2D:49:3E:94:50:67:2C
X509v3 Authority Key Identifier:
keyid:E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:75:42:cd:05:17:21:81:b2:35:6f:6b:93:89:dd:72:75:1f:
ab:9d:ee:fb:f3:d6:6e:97:ef:89:1e:bc:5b:25:f7:fd:3d:48:
35:b5:58:3e:9e:bd:4d:49:bb:a3:2c:15:67:4a:b7:72:4b:6d:
0c:3c:fa:44:79:73:a2:d8:28:ce:c1:57:bd:71:7a:b8:32:74:
2b:97:3b:e1:65:d5:4d:ee:03:7e:4e:75:90:a1:df:d2:9e:73:
af:cc:33:67:a4:62:7a:8e:34:2e:42:6a:b1:a9:7f:ac:eb:7f:
09:b5:e3:05:a8:35:20:d1:bc:3b:93:4f:db:b3:4f:8a:57:32:
c8:b7:74:b7:75:72:b1:30:98:6e:31:48:0c:ef:0d:ad:9e:11:
10:8d:06:b8:c5:55:63:b6:59:55:69:db:e1:44:6c:fe:92:df:
b2:8d:64:91:95:b0:34:2d:14:64:d4:98:7f:2c:dd:a3:2f:32:
ed:80:d7:3f:38:87:d9:c8:34:d2:f6:52:df:d2:2c:fe:53:12:
c7:1c:ed:dc:59:d1:94:3e:2e:65:a0:8a:42:1b:70:f4:82:34:
8c:c6:7c:93:e0:65:50:ad:83:b5:8e:ef:e8:53:5d:46:d1:f4:
e7:50:6d:72:cd:54:47:40:ce:0f:90:59:8a:fb:8c:ac:c0:ff:
d5:6a:2c:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY4rbJ8ktcK8ZY9Tbr81n4SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTgzYjQwYjNmNGQ3ZDMxZmIzMzY4ZGFmYWNhMTE5OWE0
NDk4OTIwHhcNMjUwNDE1MDkwMDI5WhcNMjUwNDE2MDkwMDI5WjAzMTEwLwYDVQQD
EygyZjA2NzA1NDFhYjE5YTY5ZTI1NjNhYjEyNzJkNDkzZTk0NTA2NzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi5pI+Nc2r9aaqdjQxWSnsXVmXzJ
pVcLV4o4VaZRGp6Karzu6oriDvkWd6+ng+pYQLTKu2M41CXiLSrjPSJwTo/8MOJV
AbQoZVtTRVKxyS/gKgUGukawDHd0JhadCQ5X7pW1AzHiMyhvkhx8TP9kT8NdF58u
T7jCaB9HbJBP/BnkAik0ufq1YfK2Y3RNXc1ayISaFG5MSzV5RjltA6ROpmsk2Vbo
k/JmgbUomYS2uNKoI2Wbk5XASYTurMVPLjZ6se2EMAkfFCftia8KYkJ3/5HlK8is
mB+HmcmMitkyYPokldNv9gTuuRPiPPs8HhoYWeBSAF3DNdnUD0mJi4wbCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8GcFQasZpp4lY6sSctST6UUGcsMB8GA1UdIwQY
MBaAFOWoO0Cz9NfTH7M2ja+soRmaRJiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFnN1FMUDAxOU1mc3phTnI2eWhHWnBFbUpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yNGNhYjQtMDEyNS00MzgzLTg1ZmEt
M2QzODg2MDZkYTEyLzEvNWFnN1FMUDAxOU1mc3phTnI2eWhHWnBFbUpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8yNGNhYjQtMDEyNS00MzgzLTg1ZmEtM2QzODg2MDZkYTEy
LzEvNWFnN1FMUDAxOU1mc3phTnI2eWhHWnBFbUpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHVCzQUX
IYGyNW9rk4ndcnUfq53u+/PWbpfviR68WyX3/T1INbVYPp69TUm7oywVZ0q3cktt
DDz6RHlzotgozsFXvXF6uDJ0K5c74WXVTe4Dfk51kKHf0p5zr8wzZ6Rieo40LkJq
sal/rOt/CbXjBag1ING8O5NP27NPilcyyLd0t3VysTCYbjFIDO8NrZ4REI0GuMVV
Y7ZZVWnb4URs/pLfso1kkZWwNC0UZNSYfyzdoy8y7YDXPziH2cg00vZS39Is/lMS
xxzt3FnRlD4uZaCKQhtw9II0jMZ8k+BlUK2DtY7v6FNdRtH051Btcs1UR0DOD5BZ
ivuMrMD/1Wos7g==
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:45:31 2025 by rpki-client