Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier: pz+iElVkvnghiF1ixvOhUH96c7CY8c1TDl12W8ofWOY=
Subject key identifier: 19:92:22:C3:1D:21:B0:1D:7F:9D:24:64:29:79:80:4F:F3:6D:A2:65
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 0196BB92B66A310156CF8BA034BD6EE98D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number: 153D
Signing time: Sat 10 May 2025 19:01:16 +0000
Manifest this update: Sat 10 May 2025 19:01:16 +0000
Manifest next update: Sun 11 May 2025 19:01:16 +0000
Files and hashes: 1: 0wgL08QR2Tg8DD4ym9yl2cWgk4Y.roa (hash: qV9D4m0x0M6TJ4fUI73uoZNgwejKGUBXdkrfKOtrD44=)
2: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: Kak6ucUpX3PBxc7AJYT+yUT5UbqQREMaspVvVU2d+GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:b6:6a:31:01:56:cf:8b:a0:34:bd:6e:e9:8d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: May 10 19:01:16 2025 GMT
Not After : May 11 19:01:16 2025 GMT
Subject: CN=199222c31d21b01d7f9d24642979804ff36da265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:0e:1f:4a:00:5f:d7:12:25:b8:99:a4:23:
d1:83:95:60:47:dc:22:4b:b2:63:b4:66:13:ed:1c:
c1:0e:27:3e:22:ce:9b:f8:39:a7:ba:a2:f2:1b:3c:
01:86:f3:d2:5f:05:e9:6f:44:ab:ec:b9:0b:11:5c:
18:76:a9:2b:ee:ed:0e:d7:80:13:ae:fc:6a:9e:fa:
22:0a:e7:ed:26:3e:64:ef:1c:32:58:85:25:78:81:
72:cc:23:ca:54:59:91:b6:6c:36:18:53:1d:d3:ac:
43:85:66:90:48:0f:0d:b4:52:09:99:ea:ac:0d:f8:
7a:d7:5e:ad:aa:9e:00:33:73:36:94:d8:ff:97:d9:
02:6d:0b:f5:a1:12:c7:b6:01:3f:99:e8:ee:22:b7:
bd:70:62:bd:77:3d:1b:0d:35:fd:d4:e1:49:81:dc:
42:45:83:47:0a:92:f6:7b:01:86:4c:e3:1f:e6:05:
bf:58:66:4b:dd:0b:33:d0:8c:83:a1:e0:9d:49:ed:
3c:c3:38:60:01:c5:74:8c:29:7b:c8:a0:b4:a0:c2:
08:b6:81:1c:c5:64:e6:1e:fb:ef:d5:a3:61:3c:c4:
52:bb:2a:71:67:44:82:5a:42:1a:1a:ba:62:61:4d:
9f:6b:ec:45:c5:5b:dc:65:76:69:1f:2e:83:cf:af:
13:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:92:22:C3:1D:21:B0:1D:7F:9D:24:64:29:79:80:4F:F3:6D:A2:65
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ae:55:8e:c1:28:a3:e8:ff:2d:24:c6:65:d4:f6:81:87:5d:
ee:b3:06:34:e9:65:c3:0b:4c:bb:a6:ed:86:47:02:21:b7:59:
5b:9e:93:4e:79:98:a3:84:dc:dd:e4:82:03:18:24:16:5c:ad:
fd:37:9e:b4:84:8f:27:93:6e:71:f6:ac:ed:59:cb:53:ea:27:
8f:1a:3c:5e:ec:35:85:d7:88:d6:07:05:44:fb:c7:a4:02:b6:
69:a4:09:9e:ef:eb:cb:11:5a:f6:7c:5c:7f:c2:4a:a2:d2:8b:
35:5c:8c:99:63:64:d7:1c:07:bf:45:f2:d2:8d:cb:7e:21:20:
65:9b:f7:6b:e7:61:a8:d0:a0:87:dd:17:38:87:49:a6:d3:8b:
d3:6b:19:31:e3:81:54:cc:57:4c:96:d8:d8:e3:2d:9d:46:0a:
a0:bb:4c:77:b9:f1:98:13:92:d0:8c:1b:18:4a:79:56:1a:10:
de:78:c7:b8:c4:62:40:8a:e2:b6:80:10:29:3b:93:75:1e:56:
2f:d5:41:26:ed:0c:b4:bb:f4:a8:e4:c7:24:04:9e:7b:09:51:
74:63:c5:ea:07:74:1e:4a:99:f0:da:33:97:a8:50:93:38:ca:
ab:af:84:e4:13:8f:49:67:6b:d6:55:82:10:7d:08:d6:e1:ad:
82:c1:3e:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7krZqMQFWz4ugNL1u6Y0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNWU0ZWY1NTE2Nzk5ZmZlMGJiMWI4MzkzMTdkYmQzNTVi
YjdhOWIwHhcNMjUwNTEwMTkwMTE2WhcNMjUwNTExMTkwMTE2WjAzMTEwLwYDVQQD
EygxOTkyMjJjMzFkMjFiMDFkN2Y5ZDI0NjQyOTc5ODA0ZmYzNmRhMjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHgOH0oAX9cSJbiZpCPRg5VgR9wi
S7JjtGYT7RzBDic+Is6b+DmnuqLyGzwBhvPSXwXpb0Sr7LkLEVwYdqkr7u0O14AT
rvxqnvoiCuftJj5k7xwyWIUleIFyzCPKVFmRtmw2GFMd06xDhWaQSA8NtFIJmeqs
Dfh6116tqp4AM3M2lNj/l9kCbQv1oRLHtgE/mejuIre9cGK9dz0bDTX91OFJgdxC
RYNHCpL2ewGGTOMf5gW/WGZL3Qsz0IyDoeCdSe08wzhgAcV0jCl7yKC0oMIItoEc
xWTmHvvv1aNhPMRSuypxZ0SCWkIaGrpiYU2fa+xFxVvcZXZpHy6Dz68TpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmSIsMdIbAdf50kZCl5gE/zbaJlMB8GA1UdIwQY
MBaAFGxeTvVRZ5n/4Lsbg5MX29NVu3qbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUt
MWJlNzUzZmFkMWJmLzEvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUtMWJlNzUzZmFkMWJm
LzEvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKq5VjsEo
o+j/LSTGZdT2gYdd7rMGNOllwwtMu6bthkcCIbdZW56TTnmYo4Tc3eSCAxgkFlyt
/TeetISPJ5Nucfas7VnLU+onjxo8Xuw1hdeI1gcFRPvHpAK2aaQJnu/ryxFa9nxc
f8JKotKLNVyMmWNk1xwHv0Xy0o3LfiEgZZv3a+dhqNCgh90XOIdJptOL02sZMeOB
VMxXTJbY2OMtnUYKoLtMd7nxmBOS0IwbGEp5VhoQ3njHuMRiQIritoAQKTuTdR5W
L9VBJu0MtLv0qOTHJASeewlRdGPF6gd0HkqZ8Nozl6hQkzjKq6+E5BOPSWdr1lWC
EH0I1uGtgsE+ZA==
-----END CERTIFICATE-----
Generated at Sat May 10 21:49:18 2025 by rpki-client