Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: ROcdwLLCj6Lr3ql9mmFA4Yxzfz+tuJb2EiYzho5yFlM=
Subject key identifier: 91:E5:9D:3A:45:24:07:D9:BB:C5:20:BA:E6:B0:A8:76:94:B2:94:85
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 0197B70EB9495EF0D7C5F5369AD6CD0E3D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 0648
Signing time: Sat 28 Jun 2025 15:01:24 +0000
Manifest this update: Sat 28 Jun 2025 15:01:24 +0000
Manifest next update: Sun 29 Jun 2025 15:01:24 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: cla7pQjwyRYoihXDJLfs4JwVoxSdktRvWK8mj8S2Aec=)
2: FUn2t9ppYu0Wn0pkoCRZ-HiUy7U.roa (hash: IgKhBAHaInAK8D+wEDHgOoVh2qEqWhDFRzWVOdnNaSE=)
3: H4hpUNA2nrrRur4Tk2W8HjJVqu4.roa (hash: oa7awxP7blKcpEGQ8hgbpBoX6kUOq34Ta41x1XECaFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b9:49:5e:f0:d7:c5:f5:36:9a:d6:cd:0e:3d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Jun 28 15:01:24 2025 GMT
Not After : Jun 29 15:01:24 2025 GMT
Subject: CN=91e59d3a452407d9bbc520bae6b0a87694b29485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:f8:b3:1c:0f:ce:fe:94:d3:82:bd:ef:18:
ab:cf:15:0a:45:c5:b3:85:6c:2e:21:49:9c:5d:7e:
1a:cd:6d:ce:db:d6:6e:17:2a:4e:40:a4:78:39:82:
73:8f:fe:bb:56:79:bf:88:d3:cb:10:77:67:3a:e7:
f9:45:20:1d:bb:5b:12:a1:3a:ef:5c:16:d6:ec:fe:
c2:87:81:46:70:2d:1d:97:e6:5b:10:7d:b8:4e:ef:
39:ab:95:97:b1:12:0d:32:4a:87:1f:eb:88:29:c7:
f5:57:93:80:ee:cd:f3:79:5a:ec:91:22:a6:39:ee:
5f:f3:f1:71:49:4d:d0:4b:e1:4e:0a:c5:76:de:07:
b0:7b:55:63:96:03:e6:ed:34:25:31:ea:8e:7f:d3:
47:a3:43:6e:a2:3b:15:7e:fd:91:36:21:99:8a:17:
9e:dd:75:f4:0b:e2:4a:31:f8:85:08:d9:61:52:c7:
b6:0a:b4:9e:fb:f7:5f:27:5e:95:aa:36:a8:dc:ed:
e6:60:5d:43:26:00:74:b7:e6:8b:5e:4d:b2:1c:98:
0e:29:20:61:ac:af:68:1e:55:76:15:27:fb:39:58:
2f:cc:e4:27:99:3d:fe:c7:99:d2:70:aa:f2:27:82:
ee:76:75:d8:3a:71:92:5a:10:54:e6:a0:fc:e7:cf:
a6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E5:9D:3A:45:24:07:D9:BB:C5:20:BA:E6:B0:A8:76:94:B2:94:85
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5b:3c:74:e5:32:dd:7b:12:f9:6c:07:17:a6:c6:15:d6:83:
f6:58:c9:e6:f4:e4:80:0d:f2:7e:8a:87:35:6d:04:69:58:6e:
b4:e1:65:4a:f9:79:65:dd:a4:1e:a9:87:15:ed:d1:dc:78:64:
17:e4:af:f6:c1:1d:f0:c3:9d:9b:e7:90:10:01:fb:3a:53:47:
29:97:65:0d:a6:70:8b:71:13:28:f0:4b:43:4c:d9:4f:6a:2d:
67:ce:00:69:f3:b7:a6:09:45:a5:5c:38:e4:06:b3:58:09:bf:
84:45:e6:96:2b:c0:82:97:3e:c4:af:ac:07:8e:a1:c2:4b:e8:
c1:98:28:42:57:13:39:db:1c:42:14:67:0c:5e:38:11:a5:ce:
4b:f8:9a:f9:ba:ec:95:75:f8:f8:c9:cd:a0:f6:82:bf:c9:88:
8a:6b:f9:06:d6:e1:77:c0:c6:f9:63:b1:a5:6d:a2:16:33:a9:
0b:51:fd:97:ba:65:19:63:88:c8:92:3a:1c:ad:c5:9e:2d:9c:
69:f9:36:dd:61:6d:83:b9:c1:70:ca:8e:d9:f2:a1:95:54:b7:
91:eb:fa:ba:1c:83:9a:82:1f:fd:a9:48:ef:98:26:ad:e5:46:
5f:5c:6b:16:09:87:c5:55:b4:57:8d:85:64:b1:da:2a:fd:b9:
66:88:8f:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DrlJXvDXxfU2mtbNDj1NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0M2JhYWZjNjRiMzNlNDNkYjc4ZGM3YWVkNjA1ZWY3MDQw
NmQ5YWYwHhcNMjUwNjI4MTUwMTI0WhcNMjUwNjI5MTUwMTI0WjAzMTEwLwYDVQQD
Eyg5MWU1OWQzYTQ1MjQwN2Q5YmJjNTIwYmFlNmIwYTg3Njk0YjI5NDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoj4sxwPzv6U04K97xirzxUKRcWz
hWwuIUmcXX4azW3O29ZuFypOQKR4OYJzj/67Vnm/iNPLEHdnOuf5RSAdu1sSoTrv
XBbW7P7Ch4FGcC0dl+ZbEH24Tu85q5WXsRINMkqHH+uIKcf1V5OA7s3zeVrskSKm
Oe5f8/FxSU3QS+FOCsV23gewe1VjlgPm7TQlMeqOf9NHo0NuojsVfv2RNiGZihee
3XX0C+JKMfiFCNlhUse2CrSe+/dfJ16Vqjao3O3mYF1DJgB0t+aLXk2yHJgOKSBh
rK9oHlV2FSf7OVgvzOQnmT3+x5nScKryJ4LudnXYOnGSWhBU5qD858+m/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHlnTpFJAfZu8UguuawqHaUspSFMB8GA1UdIwQY
MBaAFOQ7qvxksz5D23jceu1gXvcEBtmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTIt
ZTY4MTJkYWI2OTk5LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTItZTY4MTJkYWI2OTk5
LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFs8dOUy
3XsS+WwHF6bGFdaD9ljJ5vTkgA3yfoqHNW0EaVhutOFlSvl5Zd2kHqmHFe3R3Hhk
F+Sv9sEd8MOdm+eQEAH7OlNHKZdlDaZwi3ETKPBLQ0zZT2otZ84AafO3pglFpVw4
5AazWAm/hEXmlivAgpc+xK+sB46hwkvowZgoQlcTOdscQhRnDF44EaXOS/ia+brs
lXX4+MnNoPaCv8mIimv5Btbhd8DG+WOxpW2iFjOpC1H9l7plGWOIyJI6HK3Fni2c
afk23WFtg7nBcMqO2fKhlVS3kev6uhyDmoIf/alI75gmreVGX1xrFgmHxVW0V42F
ZLHaKv25ZoiP4w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:18 2025 by rpki-client