Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
File: C5NMNrdzAIhlucn7D9SGaTlaxzA.mft (raw, json)
Hash identifier: 1HqbRuhqxqVK6flcqO4dqgRZ79EeWJkA/DbuLCz3VRs=
Subject key identifier: 1E:B0:31:1F:3E:23:85:DF:B3:B9:7C:9E:14:25:C9:5B:97:75:13:B5
Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730
Certificate serial: 01964F6D5991D6ED015E088228E584B8AD06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 19:01:28 +0000
Manifest this update: Sat 19 Apr 2025 19:01:28 +0000
Manifest next update: Sun 20 Apr 2025 19:01:28 +0000
Files and hashes: 1: C5NMNrdzAIhlucn7D9SGaTlaxzA.crl (hash: Hg8W30NO33yZ2DiHlPF0zsjzhndovifupbNqmt01Jac=)
2: Gx6kPcyxpQCfjzDOqvTPIqfhzSo.roa (hash: cyozRe1tjffBQUtfs/kFeEbNNq7a/YhvaL4ybQ6y3bs=)
3: KDMQDMSKvzkVFCIuQ1vi5IKxFqc.roa (hash: W1z4PN9ehAB8VlW2fAtV3SogXVKZbFhw7EL82DUKuEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:59:91:d6:ed:01:5e:08:82:28:e5:84:b8:ad:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730
Validity
Not Before: Apr 19 19:01:28 2025 GMT
Not After : Apr 20 19:01:28 2025 GMT
Subject: CN=1eb0311f3e2385dfb3b97c9e1425c95b977513b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:56:2e:3a:b2:5e:c5:65:29:0a:ac:c5:c3:ee:
b8:03:6a:0d:2d:81:04:57:ab:50:87:db:51:ab:fb:
8a:f1:57:6d:25:d1:d6:05:b5:aa:51:aa:68:82:63:
d3:92:6c:cc:ec:67:31:3f:6c:35:79:8b:1c:73:0b:
2c:ae:2f:f3:29:ad:d3:ce:70:38:e6:d8:19:e5:7a:
bd:48:8a:e3:af:c9:bd:f4:9b:97:da:f1:f1:29:88:
a5:f9:d4:36:a1:83:e0:41:e0:72:78:95:60:ec:9a:
32:d9:01:06:8c:7b:16:0d:e6:38:25:b7:4b:49:f6:
8b:ee:4a:62:60:b9:4f:7d:16:60:66:b6:6c:13:91:
b1:2e:ed:51:cf:c8:2c:1a:1a:43:17:23:8c:2b:b8:
b6:7b:0c:c5:45:c6:cd:3d:8c:88:72:82:52:c1:60:
30:05:19:74:92:ed:73:a8:ef:b4:ad:d2:92:40:de:
89:44:5a:96:65:6e:ff:08:cb:ad:f1:71:d3:73:88:
bf:68:35:44:75:ac:da:cc:25:2d:64:4e:9a:70:04:
74:3f:c4:e5:fd:ec:42:ec:fb:14:4a:d0:81:40:ad:
13:f2:57:8c:28:0a:ba:9b:61:80:93:3e:f9:e3:08:
8f:54:cf:bf:9b:2b:d8:a9:be:ed:81:ec:17:c5:27:
b3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B0:31:1F:3E:23:85:DF:B3:B9:7C:9E:14:25:C9:5B:97:75:13:B5
X509v3 Authority Key Identifier:
keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a0:14:cf:e5:52:71:ce:ec:0c:56:b7:8a:b6:95:f8:2f:13:
6e:05:65:59:80:d5:7f:b3:9f:3d:96:1f:e6:06:d9:d4:d2:f3:
a3:f0:e6:0a:f5:32:3a:f2:e9:7d:19:65:2d:f2:e5:a5:c3:8e:
70:18:68:2d:32:c8:9d:a3:72:0e:48:86:20:6a:f6:42:3e:0f:
be:71:76:13:5a:06:8b:ca:d8:17:41:8b:02:9a:16:b4:fb:e9:
c5:1f:ab:61:20:d9:20:90:17:fb:7b:f3:70:4e:23:59:d9:4e:
40:ba:15:6f:0f:c6:ac:79:f1:ae:3e:67:df:91:dd:53:1b:6a:
5c:97:e3:78:41:3b:8d:e4:11:ac:57:0c:4b:a6:ab:46:fc:e1:
aa:20:d0:29:94:81:e7:d6:52:25:16:56:0c:5c:80:ac:00:12:
99:68:29:2b:8d:ad:d2:54:ab:7f:28:76:75:7a:5a:53:26:3c:
ad:7d:12:ad:7c:30:1e:d0:78:e3:b0:7f:c2:c9:bf:3b:a1:de:
7c:2e:d9:5d:e9:7a:35:eb:4d:a8:7f:02:b2:05:44:24:a8:8d:
16:d8:57:1b:32:62:80:d9:02:88:58:7f:67:6e:2e:2f:8a:2c:
6f:7a:03:3a:86:5c:0b:c9:5a:2d:ac:fb:df:5a:ad:4d:34:fd:
69:1d:a7:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbVmR1u0BXgiCKOWEuK0GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOTM0YzM2Yjc3MzAwODg2NWI5YzlmYjBmZDQ4NjY5Mzk1
YWM3MzAwHhcNMjUwNDE5MTkwMTI4WhcNMjUwNDIwMTkwMTI4WjAzMTEwLwYDVQQD
EygxZWIwMzExZjNlMjM4NWRmYjNiOTdjOWUxNDI1Yzk1Yjk3NzUxM2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FYuOrJexWUpCqzFw+64A2oNLYEE
V6tQh9tRq/uK8VdtJdHWBbWqUapogmPTkmzM7GcxP2w1eYsccwssri/zKa3TznA4
5tgZ5Xq9SIrjr8m99JuX2vHxKYil+dQ2oYPgQeByeJVg7Joy2QEGjHsWDeY4JbdL
SfaL7kpiYLlPfRZgZrZsE5GxLu1Rz8gsGhpDFyOMK7i2ewzFRcbNPYyIcoJSwWAw
BRl0ku1zqO+0rdKSQN6JRFqWZW7/CMut8XHTc4i/aDVEdazazCUtZE6acAR0P8Tl
/exC7PsUStCBQK0T8leMKAq6m2GAkz754wiPVM+/myvYqb7tgewXxSezSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6wMR8+I4Xfs7l8nhQlyVuXdRO1MB8GA1UdIwQY
MBaAFAuTTDa3cwCIZbnJ+w/Uhmk5WscwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzVOTU5yZHpBSWhsdWNuN0Q5U0dhVGxheHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kZWNiN2QtMDM4OC00ZTNjLThkYjQt
YTMwMmY1MWQzODJjLzEvQzVOTU5yZHpBSWhsdWNuN0Q5U0dhVGxheHpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9kZWNiN2QtMDM4OC00ZTNjLThkYjQtYTMwMmY1MWQzODJj
LzEvQzVOTU5yZHpBSWhsdWNuN0Q5U0dhVGxheHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeaAUz+VS
cc7sDFa3iraV+C8TbgVlWYDVf7OfPZYf5gbZ1NLzo/DmCvUyOvLpfRllLfLlpcOO
cBhoLTLInaNyDkiGIGr2Qj4PvnF2E1oGi8rYF0GLApoWtPvpxR+rYSDZIJAX+3vz
cE4jWdlOQLoVbw/GrHnxrj5n35HdUxtqXJfjeEE7jeQRrFcMS6arRvzhqiDQKZSB
59ZSJRZWDFyArAASmWgpK42t0lSrfyh2dXpaUyY8rX0SrXwwHtB447B/wsm/O6He
fC7ZXel6NetNqH8CsgVEJKiNFthXGzJigNkCiFh/Z24uL4osb3oDOoZcC8laLaz7
31qtTTT9aR2nBA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:15:09 2025 by rpki-client