Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
File: 5GZIM5avs3fl43nRYVveD9TZ7Uc.mft (raw, json)
Hash identifier: ffLOBu4OQwsC0TtwyIWBv/SZsMQRorb6iZZoLgBPktk=
Subject key identifier: 56:E4:B0:F4:E6:DF:47:56:70:CC:5C:E1:DE:C1:DE:DF:7B:38:9F:9C
Authority key identifier: E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
Certificate issuer: /CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Certificate serial: 019655A63D32556ED443EFACEDB31B60CD35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
Manifest number: 0BF5
Signing time: Mon 21 Apr 2025 00:01:20 +0000
Manifest this update: Mon 21 Apr 2025 00:01:20 +0000
Manifest next update: Tue 22 Apr 2025 00:01:20 +0000
Files and hashes: 1: 5GZIM5avs3fl43nRYVveD9TZ7Uc.crl (hash: V7wyebqhrAOx0HxoHzg0OuLtNCjmk60f4lt6uE89fM0=)
2: Btqt9dHmfyCgZm5YxFkx4BjR-Dc.roa (hash: O8dRjpLSf+cl4rOTaaTPD9tud0oWl3levwWO3JGp7jw=)
3: TLd_ZXXp2Q2UgInwhLKUEKhwDUc.roa (hash: IaRGq7PGoes/uNGrRRu/Qh4aGHDMpqDn5kGzUSwYnj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:3d:32:55:6e:d4:43:ef:ac:ed:b3:1b:60:cd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Validity
Not Before: Apr 21 00:01:20 2025 GMT
Not After : Apr 22 00:01:20 2025 GMT
Subject: CN=56e4b0f4e6df475670cc5ce1dec1dedf7b389f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3a:b7:d7:83:a4:33:3e:3b:e2:4e:b8:80:a5:
f7:ce:a8:a6:82:cd:e1:bb:9d:1f:06:2a:7c:ac:28:
c0:b6:61:27:f8:97:55:c8:b2:5c:68:c4:a3:05:60:
b4:18:b9:7b:04:dc:70:9d:66:d5:2b:66:f9:65:6b:
bd:ee:df:9a:0f:ce:a8:bf:63:bc:34:0d:94:1e:de:
09:0a:ca:f3:03:ee:86:73:18:a6:86:68:c1:dc:01:
f5:aa:2a:b4:b8:54:e3:31:21:e3:49:48:c7:1e:16:
f5:d8:e6:24:34:93:f8:40:6a:fc:42:72:9b:0e:c2:
e5:fb:ed:ca:eb:f3:42:f3:f2:52:d9:07:b4:d5:bf:
d7:0c:9b:5b:ed:73:0d:b5:3d:1a:79:cd:b5:bb:8f:
c8:4e:bf:fc:92:c9:d8:0e:69:08:ad:6d:30:c7:5f:
b2:ef:f7:e3:b6:bc:42:49:1b:71:bc:cb:3e:ec:09:
2f:db:e6:ea:da:a5:a1:20:12:e1:89:74:29:a4:50:
03:5d:b0:16:1a:fb:26:30:7d:bc:fd:4e:1a:51:c0:
ba:a3:33:ef:32:86:ee:d1:aa:4f:34:ac:29:57:f2:
89:79:00:1d:28:0c:8f:9a:0e:b9:fa:68:8f:f9:41:
ef:d5:8e:2e:0c:df:de:40:ca:e5:48:ae:3c:4b:ee:
be:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E4:B0:F4:E6:DF:47:56:70:CC:5C:E1:DE:C1:DE:DF:7B:38:9F:9C
X509v3 Authority Key Identifier:
keyid:E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:50:58:04:08:e6:e2:fe:f2:95:38:b6:35:6b:85:06:4d:98:
60:a4:50:ca:21:11:60:5b:fc:1e:96:bc:62:50:a4:e6:be:7c:
8b:f3:f0:b5:92:27:7f:0c:81:fd:c3:1c:a8:b6:34:f4:b5:d6:
db:b7:a0:93:22:ea:a1:cc:50:02:2e:2a:1a:ea:b9:b6:92:50:
f6:eb:ac:9f:1b:ce:43:e2:b0:f8:58:64:bf:03:05:dd:05:cf:
35:b1:2e:f4:92:6a:30:da:1e:a0:86:5d:98:a4:b8:de:68:80:
98:a4:1e:b1:b3:c2:1a:df:6e:3e:74:ce:37:e8:96:c4:4f:ca:
90:82:dc:b5:99:bc:28:2e:48:08:1b:1c:c8:01:00:50:17:68:
d4:85:f5:bc:35:b5:b6:cb:44:37:cf:13:42:12:d5:fa:07:ba:
0e:eb:6e:d2:08:f5:52:56:8d:07:8f:5e:b8:56:49:c3:af:f9:
be:15:16:2c:80:2b:83:82:78:a2:b9:05:f6:20:af:e1:27:d9:
fe:b2:96:6f:72:44:ae:d2:09:4f:68:85:13:ef:34:ee:02:95:
68:f7:ae:f3:5a:fb:e1:1d:e8:46:5d:5b:9d:ef:af:bf:6e:e2:
5b:2d:a3:27:fc:80:69:a8:dc:03:5e:fc:56:43:4e:45:ea:05:
8b:d6:f3:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVpj0yVW7UQ++s7bMbYM01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NjY0ODMzOTZhZmIzNzdlNWUzNzlkMTYxNWJkZTBmZDRk
OWVkNDcwHhcNMjUwNDIxMDAwMTIwWhcNMjUwNDIyMDAwMTIwWjAzMTEwLwYDVQQD
Eyg1NmU0YjBmNGU2ZGY0NzU2NzBjYzVjZTFkZWMxZGVkZjdiMzg5ZjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzq314OkMz474k64gKX3zqimgs3h
u50fBip8rCjAtmEn+JdVyLJcaMSjBWC0GLl7BNxwnWbVK2b5ZWu97t+aD86ov2O8
NA2UHt4JCsrzA+6GcximhmjB3AH1qiq0uFTjMSHjSUjHHhb12OYkNJP4QGr8QnKb
DsLl++3K6/NC8/JS2Qe01b/XDJtb7XMNtT0aec21u4/ITr/8ksnYDmkIrW0wx1+y
7/fjtrxCSRtxvMs+7Akv2+bq2qWhIBLhiXQppFADXbAWGvsmMH28/U4aUcC6ozPv
Mobu0apPNKwpV/KJeQAdKAyPmg65+miP+UHv1Y4uDN/eQMrlSK48S+6+jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbksPTm30dWcMxc4d7B3t97OJ+cMB8GA1UdIwQY
MBaAFORmSDOWr7N35eN50WFb3g/U2e1HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUdaSU01YXZzM2ZsNDNuUllWdmVEOVRaN1VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xOGI1YmItOGU0MS00ZTg4LWJkYmUt
MzQxYzYzNjE0MjgwLzEvNUdaSU01YXZzM2ZsNDNuUllWdmVEOVRaN1VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8xOGI1YmItOGU0MS00ZTg4LWJkYmUtMzQxYzYzNjE0Mjgw
LzEvNUdaSU01YXZzM2ZsNDNuUllWdmVEOVRaN1VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlBYBAjm
4v7ylTi2NWuFBk2YYKRQyiERYFv8Hpa8YlCk5r58i/PwtZInfwyB/cMcqLY09LXW
27egkyLqocxQAi4qGuq5tpJQ9uusnxvOQ+Kw+FhkvwMF3QXPNbEu9JJqMNoeoIZd
mKS43miAmKQesbPCGt9uPnTON+iWxE/KkILctZm8KC5ICBscyAEAUBdo1IX1vDW1
tstEN88TQhLV+ge6Dutu0gj1UlaNB49euFZJw6/5vhUWLIArg4J4orkF9iCv4SfZ
/rKWb3JErtIJT2iFE+807gKVaPeu81r74R3oRl1bne+vv27iWy2jJ/yAaajcA178
VkNOReoFi9bzzA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:08:07 2025 by rpki-client