Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
File: 5YBpdIdI6a69e-QFh9gUDv3lW2s.mft (raw, json)
Hash identifier: sQ8hAONI3+H7++HAKH0nUZKs/NFNTL4bvsBtrUOXU9A=
Subject key identifier: 8F:01:7D:4D:51:A4:C6:06:7E:C5:EE:F8:63:8A:40:A2:C4:6C:50:16
Authority key identifier: E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
Certificate issuer: /CN=e58069748748e9aebd7be40587d8140efde55b6b
Certificate serial: 019642C3878188FC59DF49663EC9ADDC3367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
Manifest number: 1486
Signing time: Thu 17 Apr 2025 08:00:32 +0000
Manifest this update: Thu 17 Apr 2025 08:00:32 +0000
Manifest next update: Fri 18 Apr 2025 08:00:32 +0000
Files and hashes: 1: 5YBpdIdI6a69e-QFh9gUDv3lW2s.crl (hash: XnxnfHfgl7p2VYZ/D5IyyCYgR+UQXXZgEs5t5YoKg4w=)
2: vmkVgb9N_5wAEFtAOAjwuSdx1Xs.roa (hash: To73D5BDmwWuULrYV7q3UmXkLh1DadkYNkNoo+AcLqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:c3:87:81:88:fc:59:df:49:66:3e:c9:ad:dc:33:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58069748748e9aebd7be40587d8140efde55b6b
Validity
Not Before: Apr 17 08:00:32 2025 GMT
Not After : Apr 18 08:00:32 2025 GMT
Subject: CN=8f017d4d51a4c6067ec5eef8638a40a2c46c5016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:8f:f7:c6:1d:f7:a6:11:5d:82:4d:9b:3f:
bb:71:6e:30:8c:53:1e:75:5f:a0:50:73:c5:a4:b9:
21:1f:30:6f:31:10:68:bb:63:49:34:e2:ad:0f:a2:
55:63:34:e3:6a:37:e6:65:ae:4a:c3:b0:68:d8:3d:
40:da:c7:88:c5:e0:c6:50:5f:89:79:00:40:03:7f:
b5:8d:d0:25:9e:72:ed:6c:62:ce:23:e4:c3:e8:71:
92:b5:62:1d:29:3b:fd:02:25:c2:30:66:df:b7:da:
be:9d:d6:cf:33:bd:4b:72:19:48:f7:84:1c:5b:0b:
26:cb:5f:91:89:d6:30:31:a4:e4:d2:c9:30:37:37:
8b:ca:7e:d1:c5:2c:c2:23:86:cd:28:32:23:19:41:
57:51:ca:9e:1a:c5:b2:f2:52:10:0f:94:d5:34:70:
92:7f:70:16:25:21:4b:6a:28:21:8c:1f:72:2c:7f:
0f:c6:cd:f6:3c:67:00:96:63:0f:5e:bf:bf:83:32:
d6:13:7e:4a:9f:75:90:9a:b3:e2:2a:81:d2:71:09:
aa:d8:bc:74:5a:ec:34:8a:cc:a2:a4:17:cc:66:9e:
4d:93:43:9a:20:4c:fe:2c:9f:e6:9a:a4:e9:20:48:
1d:cf:ff:25:ac:91:9a:8b:ba:a1:e6:04:2e:b5:92:
e9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:01:7D:4D:51:A4:C6:06:7E:C5:EE:F8:63:8A:40:A2:C4:6C:50:16
X509v3 Authority Key Identifier:
keyid:E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:13:58:81:d0:98:bd:8d:1f:c4:4e:05:72:a2:64:f4:ac:8a:
d9:11:c7:e7:5a:c4:31:ae:a5:ca:b7:21:25:2a:d8:75:12:d5:
d0:88:6b:55:bf:1f:9b:dc:4d:bb:8f:b3:be:4a:a9:c4:3d:72:
22:7b:5d:9c:d9:41:1f:68:43:65:15:53:b2:08:ac:1c:e8:62:
59:21:9c:ea:a3:c0:38:ce:6b:95:d6:f8:b5:56:b4:80:29:b7:
fc:0f:11:46:16:68:f5:3b:c7:23:3f:4e:40:9b:dc:c9:06:cf:
e4:93:18:87:b5:1d:be:83:d9:86:5e:15:04:ec:35:df:39:df:
c7:46:96:06:7c:b0:8b:f5:ff:1a:0e:42:7e:3d:b2:57:21:a9:
dc:fc:05:29:09:b8:1b:52:05:83:5f:88:83:bf:3a:5a:2f:7b:
93:d0:df:b6:19:f5:65:c1:7f:98:38:44:e2:7d:9d:6e:8c:ec:
a4:97:89:42:14:0d:03:c1:49:40:c7:69:b8:75:14:27:af:8e:
a8:59:08:38:26:f0:15:17:41:6d:4f:d8:3c:35:14:62:c0:31:
a8:b6:94:b4:a9:0c:08:2e:fd:af:24:29:b5:53:52:21:44:b6:
d6:96:1c:91:02:13:a8:88:87:ca:d9:d4:e9:f4:3a:c9:fb:ae:
0d:70:37:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZCw4eBiPxZ30lmPsmt3DNnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ODA2OTc0ODc0OGU5YWViZDdiZTQwNTg3ZDgxNDBlZmRl
NTViNmIwHhcNMjUwNDE3MDgwMDMyWhcNMjUwNDE4MDgwMDMyWjAzMTEwLwYDVQQD
Eyg4ZjAxN2Q0ZDUxYTRjNjA2N2VjNWVlZjg2MzhhNDBhMmM0NmM1MDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufeP98Yd96YRXYJNmz+7cW4wjFMe
dV+gUHPFpLkhHzBvMRBou2NJNOKtD6JVYzTjajfmZa5Kw7Bo2D1A2seIxeDGUF+J
eQBAA3+1jdAlnnLtbGLOI+TD6HGStWIdKTv9AiXCMGbft9q+ndbPM71LchlI94Qc
Wwsmy1+RidYwMaTk0skwNzeLyn7RxSzCI4bNKDIjGUFXUcqeGsWy8lIQD5TVNHCS
f3AWJSFLaighjB9yLH8Pxs32PGcAlmMPXr+/gzLWE35Kn3WQmrPiKoHScQmq2Lx0
Wuw0isyipBfMZp5Nk0OaIEz+LJ/mmqTpIEgdz/8lrJGai7qh5gQutZLpwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8BfU1RpMYGfsXu+GOKQKLEbFAWMB8GA1UdIwQY
MBaAFOWAaXSHSOmuvXvkBYfYFA795VtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlCcGRJZEk2YTY5ZS1RRmg5Z1VEdjNsVzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84ZWZkODAtN2RiMy00ZTUyLWFkNzYt
MGY4OTZlYmNhNGY4LzEvNVlCcGRJZEk2YTY5ZS1RRmg5Z1VEdjNsVzJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84ZWZkODAtN2RiMy00ZTUyLWFkNzYtMGY4OTZlYmNhNGY4
LzEvNVlCcGRJZEk2YTY5ZS1RRmg5Z1VEdjNsVzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhNYgdCY
vY0fxE4FcqJk9KyK2RHH51rEMa6lyrchJSrYdRLV0IhrVb8fm9xNu4+zvkqpxD1y
IntdnNlBH2hDZRVTsgisHOhiWSGc6qPAOM5rldb4tVa0gCm3/A8RRhZo9TvHIz9O
QJvcyQbP5JMYh7UdvoPZhl4VBOw13znfx0aWBnywi/X/Gg5Cfj2yVyGp3PwFKQm4
G1IFg1+Ig786Wi97k9Dfthn1ZcF/mDhE4n2dbozspJeJQhQNA8FJQMdpuHUUJ6+O
qFkIOCbwFRdBbU/YPDUUYsAxqLaUtKkMCC79ryQptVNSIUS21pYckQITqIiHytnU
6fQ6yfuuDXA35w==
-----END CERTIFICATE-----
Generated at Thu Apr 17 14:41:07 2025 by rpki-client