Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
File: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft (raw, json)
Hash identifier: P5najdkEy8IdYTGo4lgwXXQwGTtC23fw+WjxNXFMrJo=
Subject key identifier: D4:16:C5:21:A4:71:07:A3:DA:48:32:D2:03:8E:E0:BC:A2:F1:7D:F6
Authority key identifier: E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67
Certificate issuer: /CN=e505d93497f19d2563066b409200969711f28c67
Certificate serial: 01958B84C1D5EED393D81C51A2448FDEE375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
Manifest number: 0C34
Signing time: Wed 12 Mar 2025 18:01:28 +0000
Manifest this update: Wed 12 Mar 2025 18:01:28 +0000
Manifest next update: Thu 13 Mar 2025 18:01:28 +0000
Files and hashes: 1: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl (hash: kh/4FIa8HWspV+vLH923g/WWQ2sysdhqIIf7dkcb4pg=)
2: TeyiHHpQzPXntQ9zcodgsnssabQ.roa (hash: 99RzEV6KxbBUQmEGjwYOg/0KALhFJ98CPqecVaZd8t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:c1:d5:ee:d3:93:d8:1c:51:a2:44:8f:de:e3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e505d93497f19d2563066b409200969711f28c67
Validity
Not Before: Mar 12 18:01:28 2025 GMT
Not After : Mar 13 18:01:28 2025 GMT
Subject: CN=d416c521a47107a3da4832d2038ee0bca2f17df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:44:07:4f:40:0e:5f:d3:18:70:13:f9:9c:
0a:62:12:79:b7:ea:7d:78:0e:d9:46:03:4f:c5:1c:
21:46:45:c4:30:97:41:57:d0:ce:75:81:90:69:3f:
74:d6:71:96:9b:fb:53:db:cc:4f:34:d8:fa:cb:7b:
0c:30:44:58:57:a5:fc:69:44:c6:09:b8:f6:66:b6:
d0:de:0c:ec:06:6f:83:ab:85:64:bc:57:36:e2:fe:
fe:37:70:64:85:20:ef:ea:11:35:d0:f1:2f:eb:54:
68:ca:35:68:be:e1:0d:34:fd:33:73:47:f2:da:38:
d1:58:1f:a6:7e:8a:11:7e:82:36:74:2e:bd:70:f5:
7e:78:61:62:f9:8f:29:f9:74:3b:3e:10:2f:c8:47:
cb:e9:bc:ff:43:c8:c3:07:f0:8b:e9:aa:25:dc:2c:
3f:d6:1d:01:ca:a5:3f:71:80:06:14:ee:08:0e:bb:
e6:98:a4:f6:eb:14:84:01:f4:38:1e:74:74:62:00:
4f:62:68:28:6a:44:b8:63:2e:dc:5b:99:10:cd:d7:
86:c3:c6:a8:ef:7b:22:d5:88:4e:cf:3c:6e:9f:d9:
2c:49:7b:f7:2b:b0:a5:01:2a:2b:b2:ec:8b:bb:26:
5c:8c:6d:7f:39:9f:52:6f:14:25:e0:fd:0b:41:b5:
7e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:16:C5:21:A4:71:07:A3:DA:48:32:D2:03:8E:E0:BC:A2:F1:7D:F6
X509v3 Authority Key Identifier:
keyid:E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:44:d8:9c:fa:4e:af:9f:53:4e:1d:08:4e:db:fc:99:e0:31:
d1:13:c6:58:e7:57:ce:42:38:09:f8:19:32:80:97:dd:c0:09:
05:d6:75:78:25:d6:da:f8:ff:24:c0:09:27:01:4d:31:98:8b:
34:c0:d9:7e:36:28:e0:e8:e2:37:8e:98:c2:17:82:48:0c:00:
80:b7:e0:2f:73:51:e9:ff:10:e2:dd:99:30:fb:b6:50:74:6b:
3e:d0:14:0b:a1:3a:d0:f7:cd:49:0e:2b:ce:c6:5f:d3:d6:24:
81:e0:7f:75:8c:a3:95:89:70:ab:bb:0e:a1:ae:0c:2f:bd:04:
9a:c8:ec:0d:1c:0e:2f:eb:36:2e:36:5a:28:5d:c5:07:67:3d:
f1:39:0d:50:48:22:16:1d:49:99:ac:d3:2c:bf:6f:02:bc:db:
90:82:74:c8:19:23:f6:1c:33:e3:c7:3a:e0:0d:f4:a8:3f:17:
07:2b:52:46:be:c9:9f:28:4d:0f:fb:4f:06:0a:f2:07:d3:6f:
4f:df:99:47:67:a2:f0:46:c1:ba:2f:7d:5f:3e:8b:1c:72:d5:
0e:c5:f0:62:8b:ba:5b:51:f7:43:d0:41:02:ba:f5:82:51:9f:
79:22:a6:b9:dc:1e:3d:84:05:67:68:b9:74:81:48:34:d7:4d:
ad:b2:47:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLhMHV7tOT2BxRokSP3uN1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MDVkOTM0OTdmMTlkMjU2MzA2NmI0MDkyMDA5Njk3MTFm
MjhjNjcwHhcNMjUwMzEyMTgwMTI4WhcNMjUwMzEzMTgwMTI4WjAzMTEwLwYDVQQD
EyhkNDE2YzUyMWE0NzEwN2EzZGE0ODMyZDIwMzhlZTBiY2EyZjE3ZGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk1EB09ADl/TGHAT+ZwKYhJ5t+p9
eA7ZRgNPxRwhRkXEMJdBV9DOdYGQaT901nGWm/tT28xPNNj6y3sMMERYV6X8aUTG
Cbj2ZrbQ3gzsBm+Dq4VkvFc24v7+N3BkhSDv6hE10PEv61RoyjVovuENNP0zc0fy
2jjRWB+mfooRfoI2dC69cPV+eGFi+Y8p+XQ7PhAvyEfL6bz/Q8jDB/CL6aol3Cw/
1h0ByqU/cYAGFO4IDrvmmKT26xSEAfQ4HnR0YgBPYmgoakS4Yy7cW5kQzdeGw8ao
73si1YhOzzxun9ksSXv3K7ClASorsuyLuyZcjG1/OZ9SbxQl4P0LQbV+UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQWxSGkcQej2kgy0gOO4Lyi8X32MB8GA1UdIwQY
MBaAFOUF2TSX8Z0lYwZrQJIAlpcR8oxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVFYWk5KZnhuU1ZqQm10QWtnQ1dseEh5akdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NDBlNTMtYzRhNi00ZjUyLTgxMWUt
NmFmYzRlYzYzY2YwLzEvNVFYWk5KZnhuU1ZqQm10QWtnQ1dseEh5akdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC81NDBlNTMtYzRhNi00ZjUyLTgxMWUtNmFmYzRlYzYzY2Yw
LzEvNVFYWk5KZnhuU1ZqQm10QWtnQ1dseEh5akdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF0TYnPpO
r59TTh0ITtv8meAx0RPGWOdXzkI4CfgZMoCX3cAJBdZ1eCXW2vj/JMAJJwFNMZiL
NMDZfjYo4OjiN46YwheCSAwAgLfgL3NR6f8Q4t2ZMPu2UHRrPtAUC6E60PfNSQ4r
zsZf09YkgeB/dYyjlYlwq7sOoa4ML70EmsjsDRwOL+s2LjZaKF3FB2c98TkNUEgi
Fh1JmazTLL9vArzbkIJ0yBkj9hwz48c64A30qD8XBytSRr7JnyhND/tPBgryB9Nv
T9+ZR2ei8EbBui99Xz6LHHLVDsXwYou6W1H3Q9BBArr1glGfeSKmudwePYQFZ2i5
dIFINNdNrbJHRQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:49 2025 by rpki-client