
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
File: 5J2_PERGjlJBHUhhhWvwvceQY-Q.mft (raw, json)
Hash identifier: 5IWbvy/zntYU23nRX5BHxxAytDUXcbGqqNwMu/fo0t8=
Subject key identifier: 8F:D6:F2:F6:C8:85:20:19:96:FF:8E:05:12:B0:B4:E8:15:B6:42:FE
Authority key identifier: E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
Certificate issuer: /CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Certificate serial: 0197CA27A2B679FA0E5A7DBE07B846742EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
Manifest number: 0D92
Signing time: Wed 02 Jul 2025 08:01:24 +0000
Manifest this update: Wed 02 Jul 2025 08:01:24 +0000
Manifest next update: Thu 03 Jul 2025 08:01:24 +0000
Files and hashes: 1: 5J2_PERGjlJBHUhhhWvwvceQY-Q.crl (hash: 9+1riNxNv8ZvMTSVswQDettdtZm1yQ+9alAyZG+voUc=)
2: 7JvOqf8jCijk_scq8k44QE4ZcJg.roa (hash: Zr9qOX5zC6nd7EBM4UVaMfXBvFyKtR8sioHct77HMic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 08:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:27:a2:b6:79:fa:0e:5a:7d:be:07:b8:46:74:2e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Validity
Not Before: Jul 2 08:01:24 2025 GMT
Not After : Jul 3 08:01:24 2025 GMT
Subject: CN=8fd6f2f6c885201996ff8e0512b0b4e815b642fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:2c:cb:e3:84:be:58:3e:e7:7a:64:94:e4:
96:e2:ce:73:5b:18:33:77:25:18:b4:cf:5e:fd:18:
d4:44:76:05:29:46:07:c7:52:2c:16:cf:17:6b:79:
1d:b5:c5:e9:15:56:c2:ea:63:50:a4:0b:b2:33:4f:
60:63:2b:36:54:bc:52:13:87:92:7e:d9:fd:28:b3:
e9:00:53:5b:e4:dd:e5:92:16:64:9a:d0:89:58:cf:
ad:c7:cd:af:8d:07:0f:7c:11:f8:09:c6:61:74:55:
d0:58:8e:df:63:9c:fb:2c:45:a0:06:4c:81:fd:6b:
27:8e:38:40:fe:cd:d5:78:ae:21:95:60:30:76:30:
66:12:e3:83:f3:6c:c9:03:ff:59:d2:3a:a7:56:74:
81:57:44:1a:62:b0:74:aa:cf:93:76:d8:69:71:92:
8d:d6:27:92:8a:ea:d6:a8:37:99:61:1b:80:a5:11:
c9:c6:5d:3d:d1:1c:3a:09:11:d5:e4:fd:69:90:22:
eb:4b:ce:b8:3b:56:4b:22:1c:6c:79:fb:a1:ee:53:
29:de:7c:5c:2f:3a:9f:e9:3f:9b:36:44:9a:0c:51:
79:b7:fa:e1:c2:ce:99:7b:c4:91:ab:c4:17:d2:2a:
64:b1:3a:b0:12:38:97:11:4f:66:dd:63:c9:f8:7d:
bd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D6:F2:F6:C8:85:20:19:96:FF:8E:05:12:B0:B4:E8:15:B6:42:FE
X509v3 Authority Key Identifier:
keyid:E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:0f:d1:0d:e5:63:c1:13:e8:54:47:60:49:50:c8:27:e7:32:
5e:0d:61:40:3f:f0:68:64:10:cc:f3:a4:87:b9:05:ac:b7:ef:
0e:2e:bd:d3:3e:b0:90:81:50:45:2b:7c:31:27:ec:9e:33:26:
ae:66:76:97:7b:ac:69:a0:5a:91:fc:83:d9:12:c4:1e:8d:d2:
80:9e:f3:d6:5f:dc:97:fb:cf:88:b0:4c:1c:88:21:58:48:0b:
05:e4:ef:41:36:ca:6c:e1:cc:eb:9c:b7:34:7b:05:63:d9:4c:
eb:3c:77:c2:3f:8c:86:4b:41:3b:fe:5e:80:0c:36:e5:c6:47:
bd:6c:74:fd:cb:6a:cd:34:83:95:38:c7:4c:06:87:b6:85:f8:
17:f6:73:de:ec:e9:e4:95:c5:78:61:10:ad:e1:c0:0f:b5:6f:
0c:5d:12:8d:52:27:80:94:25:e0:3c:f7:22:ac:0f:19:e6:b0:
7d:8f:69:a2:cb:55:1d:dd:fe:57:72:31:b8:ca:64:10:65:aa:
c2:f8:ab:a9:d9:3a:1f:15:e1:88:1f:71:a8:a9:31:14:2f:41:
a4:b3:0f:49:b9:9f:85:f3:ea:f5:52:03:03:a1:e8:7b:e2:58:
8d:12:d1:b7:70:c0:08:73:c3:cd:aa:bb:a3:b9:95:cd:d3:78:
2a:fd:db:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKJ6K2efoOWn2+B7hGdC7AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0OWRiZjNjNDQ0NjhlNTI0MTFkNDg2MTg1NmJmMGJkYzc5
MDYzZTQwHhcNMjUwNzAyMDgwMTI0WhcNMjUwNzAzMDgwMTI0WjAzMTEwLwYDVQQD
Eyg4ZmQ2ZjJmNmM4ODUyMDE5OTZmZjhlMDUxMmIwYjRlODE1YjY0MmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugksy+OEvlg+53pklOSW4s5zWxgz
dyUYtM9e/RjURHYFKUYHx1IsFs8Xa3kdtcXpFVbC6mNQpAuyM09gYys2VLxSE4eS
ftn9KLPpAFNb5N3lkhZkmtCJWM+tx82vjQcPfBH4CcZhdFXQWI7fY5z7LEWgBkyB
/WsnjjhA/s3VeK4hlWAwdjBmEuOD82zJA/9Z0jqnVnSBV0QaYrB0qs+TdthpcZKN
1ieSiurWqDeZYRuApRHJxl090Rw6CRHV5P1pkCLrS864O1ZLIhxsefuh7lMp3nxc
Lzqf6T+bNkSaDFF5t/rhws6Ze8SRq8QX0ipksTqwEjiXEU9m3WPJ+H29lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/W8vbIhSAZlv+OBRKwtOgVtkL+MB8GA1UdIwQY
MBaAFOSdvzxERo5SQR1IYYVr8L3HkGPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUoyX1BFUkdqbEpCSFVoaGhXdnd2Y2VRWS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82ZTQ1N2UtMzY2ZC00NDBiLWFmMmMt
NWNhZGJkY2YyMjE1LzEvNUoyX1BFUkdqbEpCSFVoaGhXdnd2Y2VRWS1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS82ZTQ1N2UtMzY2ZC00NDBiLWFmMmMtNWNhZGJkY2YyMjE1
LzEvNUoyX1BFUkdqbEpCSFVoaGhXdnd2Y2VRWS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtQ/RDeVj
wRPoVEdgSVDIJ+cyXg1hQD/waGQQzPOkh7kFrLfvDi690z6wkIFQRSt8MSfsnjMm
rmZ2l3usaaBakfyD2RLEHo3SgJ7z1l/cl/vPiLBMHIghWEgLBeTvQTbKbOHM65y3
NHsFY9lM6zx3wj+MhktBO/5egAw25cZHvWx0/ctqzTSDlTjHTAaHtoX4F/Zz3uzp
5JXFeGEQreHAD7VvDF0SjVIngJQl4Dz3IqwPGeawfY9postVHd3+V3IxuMpkEGWq
wvirqdk6HxXhiB9xqKkxFC9BpLMPSbmfhfPq9VIDA6Hoe+JYjRLRt3DACHPDzaq7
o7mVzdN4Kv3bqg==
-----END CERTIFICATE-----
Generated at Wed Jul 2 14:37:57 2025 by rpki-client