Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
File: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft (raw, json)
Hash identifier: NY58kwLqd+J/9CX33qII8dlsX2cZMAsva5VaMd9FcoY=
Subject key identifier: A8:CF:59:AF:9C:27:CD:A5:9D:5E:37:53:83:32:1B:BA:B7:FF:FB:82
Authority key identifier: E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
Certificate issuer: /CN=e58ff73925a23692847ed92bc66613fd47068dcf
Certificate serial: 0196534A437789961BC33AC187DDC937A202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
Manifest number: 01CB
Signing time: Sun 20 Apr 2025 13:01:37 +0000
Manifest this update: Sun 20 Apr 2025 13:01:37 +0000
Manifest next update: Mon 21 Apr 2025 13:01:37 +0000
Files and hashes: 1: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl (hash: xALbRmacIrMIVyWRBUbIAlPxMbjtVkDou/Z4PeBTGUo=)
2: LyUeFaQumjkEXGwuTN3adk_CmUQ.roa (hash: 1oee/niCKCFU/8iZhol3JSIxvOFh3whzL0NQ6+tUdxg=)
3: ldrAy5A_M0tg2d0BXg7t_q2mTmY.roa (hash: PzgoMs0khlbRVil+vbEFVoeQZaszoG+3sW3UoJkJrfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:4a:43:77:89:96:1b:c3:3a:c1:87:dd:c9:37:a2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58ff73925a23692847ed92bc66613fd47068dcf
Validity
Not Before: Apr 20 13:01:37 2025 GMT
Not After : Apr 21 13:01:37 2025 GMT
Subject: CN=a8cf59af9c27cda59d5e375383321bbab7fffb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0c:b3:e1:cb:b9:85:d1:d1:e7:f0:9d:e2:3a:
54:96:b0:b0:84:43:1a:3d:af:af:c3:dc:af:2b:79:
9d:d8:f5:3e:9b:53:8f:e6:4d:21:c9:2d:a5:93:6f:
7f:5d:b1:35:cd:60:00:98:d3:f9:05:b5:82:09:fb:
f2:e3:32:d2:cf:1b:e5:c6:07:c8:06:30:e2:36:d6:
61:54:39:f8:3b:1d:11:b2:12:de:3d:ed:19:b1:eb:
c7:f4:f1:ab:76:b9:3e:4a:38:69:7e:e5:7d:d3:5a:
b9:1f:ed:b1:e9:a3:dc:af:aa:a2:9c:d9:c4:32:f8:
47:8b:c9:99:ab:1e:e9:d6:77:f3:f9:24:05:a6:e0:
02:e8:1a:a6:ad:03:2e:59:6c:03:ee:7e:69:29:2c:
2d:3e:23:c1:0e:24:a2:51:1a:e0:81:88:a7:a1:0a:
1d:82:91:b8:2f:5e:80:10:0c:f9:e8:70:81:f7:49:
f9:44:0e:54:d2:7d:e8:dd:8b:c2:d7:f9:fc:f3:cf:
4b:ca:47:97:6e:f1:1c:29:50:a0:c1:20:3c:01:3d:
fa:ae:f8:29:32:31:de:44:c9:60:84:d8:c9:f8:01:
e3:d4:d5:3d:5f:b9:ac:13:c7:c9:ba:73:3a:fa:a0:
df:e4:dd:bf:c7:cd:77:92:d9:d5:ba:bc:ee:bf:e1:
7e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CF:59:AF:9C:27:CD:A5:9D:5E:37:53:83:32:1B:BA:B7:FF:FB:82
X509v3 Authority Key Identifier:
keyid:E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:82:ae:06:a7:c4:4c:28:fd:de:f3:61:fc:a4:dd:16:45:91:
a9:26:d0:45:d1:29:d8:8d:a6:b3:6b:57:e0:93:f9:5c:ea:77:
d6:c9:ab:24:a5:26:40:3f:8c:d9:6f:d9:41:c4:f8:e7:94:0f:
a0:10:1f:a1:54:25:69:6b:28:a8:cf:88:13:2a:41:86:e6:ee:
f5:2e:e5:d7:0f:bb:5c:8f:86:b6:14:87:6c:ef:39:f8:39:1b:
41:16:be:79:65:1e:a4:8e:1d:5d:43:d8:61:de:54:94:4c:50:
e6:14:db:40:0a:18:e3:ab:6b:a8:a9:3f:83:f8:23:bb:e3:d1:
75:00:c2:cd:8e:34:7f:f2:fb:c2:e8:56:fb:e0:29:0b:c4:be:
ba:23:76:79:c0:a1:ae:e7:46:17:8b:e8:be:fa:95:15:99:3a:
80:10:e0:a4:98:de:ff:12:65:c5:47:02:3b:22:ad:b8:ad:6e:
34:84:d4:32:57:b1:dc:e7:98:f9:dd:30:59:60:2b:c1:d7:d7:
8a:39:72:f6:ce:22:7a:98:97:59:35:c1:e9:ca:76:5d:91:94:
d2:94:ce:b2:6f:c4:20:a5:b9:dc:21:81:ae:83:90:9b:75:9d:
ee:fd:d1:10:f4:57:e2:26:ab:15:f8:61:07:36:95:93:56:f8:
43:c3:15:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTSkN3iZYbwzrBh93JN6ICMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1OGZmNzM5MjVhMjM2OTI4NDdlZDkyYmM2NjYxM2ZkNDcw
NjhkY2YwHhcNMjUwNDIwMTMwMTM3WhcNMjUwNDIxMTMwMTM3WjAzMTEwLwYDVQQD
EyhhOGNmNTlhZjljMjdjZGE1OWQ1ZTM3NTM4MzMyMWJiYWI3ZmZmYjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ayz4cu5hdHR5/Cd4jpUlrCwhEMa
Pa+vw9yvK3md2PU+m1OP5k0hyS2lk29/XbE1zWAAmNP5BbWCCfvy4zLSzxvlxgfI
BjDiNtZhVDn4Ox0RshLePe0ZsevH9PGrdrk+SjhpfuV901q5H+2x6aPcr6qinNnE
MvhHi8mZqx7p1nfz+SQFpuAC6BqmrQMuWWwD7n5pKSwtPiPBDiSiURrggYinoQod
gpG4L16AEAz56HCB90n5RA5U0n3o3YvC1/n8889LykeXbvEcKVCgwSA8AT36rvgp
MjHeRMlghNjJ+AHj1NU9X7msE8fJunM6+qDf5N2/x813ktnVurzuv+F+cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjPWa+cJ82lnV43U4MyG7q3//uCMB8GA1UdIwQY
MBaAFOWP9zklojaShH7ZK8ZmE/1HBo3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlfM09TV2lOcEtFZnRrcnhtWVRfVWNHamM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80MGYxYmItZTg2OC00NzljLWE1MTUt
N2I0N2I1YmE2YWVkLzEvNVlfM09TV2lOcEtFZnRrcnhtWVRfVWNHamM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi80MGYxYmItZTg2OC00NzljLWE1MTUtN2I0N2I1YmE2YWVk
LzEvNVlfM09TV2lOcEtFZnRrcnhtWVRfVWNHamM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIKuBqfE
TCj93vNh/KTdFkWRqSbQRdEp2I2ms2tX4JP5XOp31smrJKUmQD+M2W/ZQcT455QP
oBAfoVQlaWsoqM+IEypBhubu9S7l1w+7XI+GthSHbO85+DkbQRa+eWUepI4dXUPY
Yd5UlExQ5hTbQAoY46trqKk/g/gju+PRdQDCzY40f/L7wuhW++ApC8S+uiN2ecCh
rudGF4vovvqVFZk6gBDgpJje/xJlxUcCOyKtuK1uNITUMlex3OeY+d0wWWArwdfX
ijly9s4iepiXWTXB6cp2XZGU0pTOsm/EIKW53CGBroOQm3Wd7v3REPRX4iarFfhh
BzaVk1b4Q8MVVA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:17:06 2025 by rpki-client