Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
File: 5uGvN6YKmYaO-7qggXtJgPGaVPs.mft (raw, json)
Hash identifier: epNMWmWpGigJojtR0v9YQPeaaqheYIsuFMfs6lyguzE=
Subject key identifier: A1:C5:D1:A0:78:65:65:11:7B:57:D1:75:0C:D5:48:A7:EF:5A:32:F6
Authority key identifier: E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB
Certificate issuer: /CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb
Certificate serial: 0197B8212D84C6AC147B1D71912A4A91D183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
Manifest number: 099E
Signing time: Sat 28 Jun 2025 20:01:11 +0000
Manifest this update: Sat 28 Jun 2025 20:01:11 +0000
Manifest next update: Sun 29 Jun 2025 20:01:11 +0000
Files and hashes: 1: 04IK808ti0G_mrePZiLfyMd8LPg.roa (hash: KEsbMkessHVdMEPjooQbuvxux4M4IDtjKN92Pi/27Vo=)
2: 5uGvN6YKmYaO-7qggXtJgPGaVPs.crl (hash: YneG3XMi6gMK+vBo2vLFgA1EbG54HLuvRMipEppzJM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:2d:84:c6:ac:14:7b:1d:71:91:2a:4a:91:d1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb
Validity
Not Before: Jun 28 20:01:11 2025 GMT
Not After : Jun 29 20:01:11 2025 GMT
Subject: CN=a1c5d1a0786565117b57d1750cd548a7ef5a32f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:0c:64:63:bd:7a:ad:c4:1b:a5:32:52:ae:87:
38:26:2e:90:01:7d:68:d9:7c:74:49:83:53:77:0b:
2f:cf:ca:da:58:cb:f0:23:c3:9a:3a:0a:15:f7:9c:
a5:8b:7f:32:a5:02:b8:7d:83:94:a3:d5:ee:87:1a:
50:94:21:3b:b7:c8:aa:24:10:7b:79:b5:2f:ac:e7:
69:a5:8b:12:69:dd:f3:22:5e:67:73:ee:ac:47:9e:
e5:22:3a:8c:7c:f5:56:60:64:40:63:d6:e0:db:5a:
b7:c2:9d:7b:0e:14:9b:38:d5:f6:15:8a:14:0b:90:
74:dc:6e:90:77:66:f6:d7:b2:ed:c1:6b:8b:84:81:
76:89:1e:9d:a7:c5:45:d5:2a:51:cf:e8:7f:db:07:
ce:e8:a1:fa:0f:b6:c9:ec:58:1c:a8:24:23:11:7f:
6c:5b:f4:bf:c2:b2:be:ee:ad:cd:d6:69:e9:8d:19:
c3:2f:50:46:23:32:2d:e7:df:76:ce:4a:3b:1a:5f:
d5:56:66:f5:70:50:77:6a:7d:30:98:0f:b4:fc:32:
b7:61:c9:55:b2:9c:81:7e:74:77:53:1a:34:f2:28:
78:e6:2c:a2:df:e4:df:67:fc:b1:b5:51:e0:9e:9c:
75:49:4b:bc:0d:a8:27:db:1c:f8:3c:db:56:da:f0:
e0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C5:D1:A0:78:65:65:11:7B:57:D1:75:0C:D5:48:A7:EF:5A:32:F6
X509v3 Authority Key Identifier:
keyid:E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:cd:d6:aa:4a:b5:03:61:54:86:48:0f:a3:fb:9d:cd:2f:6f:
eb:d0:5c:17:06:96:0a:78:cb:5b:19:8f:7f:d7:de:f3:93:62:
6c:4d:25:80:3a:91:74:5a:24:cd:b4:43:74:fc:25:31:12:b0:
58:1b:52:63:12:41:62:2d:91:d7:b5:2e:f8:b5:ec:b3:57:6b:
0c:02:7b:27:4d:fe:45:37:d2:10:76:30:0d:7a:b3:19:7d:e2:
db:79:cf:6f:b1:5c:0f:26:ff:7d:20:3e:69:81:77:0e:fb:fe:
6f:9f:65:c9:77:02:de:e4:07:51:42:72:bd:07:fb:e6:52:7a:
cd:2c:ea:ae:30:60:a8:31:56:75:67:6f:c9:14:58:10:5e:a7:
9c:13:a1:aa:9f:1f:08:e8:8e:52:31:ca:f7:a3:17:99:94:37:
bd:2d:b5:61:d1:31:6d:96:ec:6c:39:ac:e8:48:a2:56:ee:74:
91:0b:26:26:f7:45:a5:17:af:77:ef:5c:8e:bc:26:e9:4a:87:
4a:71:7e:46:46:55:7f:9d:e5:fb:4b:21:4f:b6:df:1d:8c:61:
e5:ea:f2:6b:f5:15:8c:03:02:ef:52:ad:11:56:91:6d:7a:8b:
a7:a0:8e:d9:f7:8c:70:09:1b:eb:1c:74:1e:41:7a:21:dc:35:
73:f8:2b:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IS2ExqwUex1xkSpKkdGDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZTFhZjM3YTYwYTk5ODY4ZWZiYmFhMDgxN2I0OTgwZjE5
YTU0ZmIwHhcNMjUwNjI4MjAwMTExWhcNMjUwNjI5MjAwMTExWjAzMTEwLwYDVQQD
EyhhMWM1ZDFhMDc4NjU2NTExN2I1N2QxNzUwY2Q1NDhhN2VmNWEzMmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9QxkY716rcQbpTJSroc4Ji6QAX1o
2Xx0SYNTdwsvz8raWMvwI8OaOgoV95yli38ypQK4fYOUo9XuhxpQlCE7t8iqJBB7
ebUvrOdppYsSad3zIl5nc+6sR57lIjqMfPVWYGRAY9bg21q3wp17DhSbONX2FYoU
C5B03G6Qd2b217LtwWuLhIF2iR6dp8VF1SpRz+h/2wfO6KH6D7bJ7FgcqCQjEX9s
W/S/wrK+7q3N1mnpjRnDL1BGIzIt5992zko7Gl/VVmb1cFB3an0wmA+0/DK3YclV
spyBfnR3Uxo08ih45iyi3+TfZ/yxtVHgnpx1SUu8Dagn2xz4PNtW2vDgvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHF0aB4ZWURe1fRdQzVSKfvWjL2MB8GA1UdIwQY
MBaAFObhrzemCpmGjvu6oIF7SYDxmlT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXVHdk42WUttWWFPLTdxZ2dYdEpnUEdhVlBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lNjU4MGItYmZmNy00MWU4LWIzMTQt
MTQwNDViNjRhZTI5LzEvNXVHdk42WUttWWFPLTdxZ2dYdEpnUEdhVlBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lNjU4MGItYmZmNy00MWU4LWIzMTQtMTQwNDViNjRhZTI5
LzEvNXVHdk42WUttWWFPLTdxZ2dYdEpnUEdhVlBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY83Wqkq1
A2FUhkgPo/udzS9v69BcFwaWCnjLWxmPf9fe85NibE0lgDqRdFokzbRDdPwlMRKw
WBtSYxJBYi2R17Uu+LXss1drDAJ7J03+RTfSEHYwDXqzGX3i23nPb7FcDyb/fSA+
aYF3Dvv+b59lyXcC3uQHUUJyvQf75lJ6zSzqrjBgqDFWdWdvyRRYEF6nnBOhqp8f
COiOUjHK96MXmZQ3vS21YdExbZbsbDms6EiiVu50kQsmJvdFpRevd+9cjrwm6UqH
SnF+RkZVf53l+0shT7bfHYxh5erya/UVjAMC71KtEVaRbXqLp6CO2feMcAkb6xx0
HkF6Idw1c/gr9g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:30:43 2025 by rpki-client