Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
File: 5LEwYQHMnsn86YUoDB2w83wTWjo.mft (raw, json)
Hash identifier: ROwVkl20H2vxhB870BZOBOIzOJVjwZbTfHZkaTOWn0A=
Subject key identifier: F8:8E:1E:7C:44:8F:10:7C:B7:60:E1:E6:5B:2B:3E:DA:71:A1:BE:D1
Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
Certificate issuer: /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Certificate serial: 0197DAE41635A49D4D63AFB76DA99A66549D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
Manifest number: 110A
Signing time: Sat 05 Jul 2025 14:01:10 +0000
Manifest this update: Sat 05 Jul 2025 14:01:10 +0000
Manifest next update: Sun 06 Jul 2025 14:01:10 +0000
Files and hashes: 1: 5LEwYQHMnsn86YUoDB2w83wTWjo.crl (hash: KzWIMf8YbSFA1xd4LGaV3ORldt/lxUjFq5x3H4deksQ=)
2: kI0vHB0itKLKV54MYG6cGrVo0eY.roa (hash: C5TgalX0uC/rPE4DDIN7aoT3cFXmNAi4cZYsmZl5eDw=)
3: u8V02AIoZzOPfjpi5j7wtSWVgSg.roa (hash: 9pvkolnrpZjRfbBA2Q8IhG+FM5X8l0p9e5PvDFmhqmQ=)
4: y-M_EBDyqDFIVawFxida8qjR5Co.roa (hash: OVypj78ZSdDN2W9JmlOfV0llyXCESZchLL8yqQ85v9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:da:e4:16:35:a4:9d:4d:63:af:b7:6d:a9:9a:66:54:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Validity
Not Before: Jul 5 14:01:10 2025 GMT
Not After : Jul 6 14:01:10 2025 GMT
Subject: CN=f88e1e7c448f107cb760e1e65b2b3eda71a1bed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:71:5c:91:9e:f5:98:fd:e3:0d:20:aa:25:
c5:73:d1:cb:75:b4:e9:e8:15:72:a1:79:7a:5e:4d:
b2:0b:c3:59:fa:34:06:c3:85:8a:8c:c9:a8:71:71:
4d:99:4e:63:cf:eb:a7:7b:31:1d:d4:15:45:cf:bc:
b6:d5:73:96:eb:b1:d9:94:2f:ba:97:dc:6c:7a:5a:
14:bc:94:30:4f:a1:4c:7f:95:80:f1:e9:fc:ba:60:
be:97:22:3a:90:38:b5:2a:20:a3:18:ad:3a:47:2c:
3e:b4:a7:16:e4:b5:de:7f:6b:9b:d9:b0:d1:76:a8:
96:59:7b:0a:f9:ae:fc:d2:73:fd:71:bf:1b:a6:cf:
e0:73:16:ca:d5:4b:6b:b3:c5:02:71:48:8e:bd:dd:
c6:db:6f:7d:d7:66:15:3f:e4:16:8e:bc:66:f1:0d:
a8:20:75:07:c5:43:57:4e:0e:99:c4:2f:08:72:7f:
a1:da:38:0b:a0:91:fb:0b:d6:46:34:56:79:13:10:
3c:b6:1d:95:9b:d1:2b:f6:b4:de:15:95:d8:c9:d0:
e3:40:5c:fe:cc:7f:f2:3f:cd:01:90:c4:68:e2:74:
b4:a3:fe:ad:46:e7:c3:ec:b3:25:fd:70:f4:57:19:
7c:45:00:c1:48:86:42:25:70:f1:fe:a6:2a:ab:a5:
bf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8E:1E:7C:44:8F:10:7C:B7:60:E1:E6:5B:2B:3E:DA:71:A1:BE:D1
X509v3 Authority Key Identifier:
keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:12:b5:d7:e2:b4:c5:90:25:64:0f:fe:3a:05:cd:b5:52:95:
91:24:4a:55:1a:3d:ee:33:db:17:73:88:2a:27:72:19:07:3a:
13:85:dd:44:a9:3a:fb:9c:c0:21:71:0b:2f:8d:df:4f:cc:81:
51:15:b4:61:66:f0:78:b9:3d:27:7a:1e:0a:1d:a5:1d:fa:d0:
87:e2:24:1b:5f:73:7a:f1:b4:c4:92:80:8b:97:3d:51:c2:79:
75:33:7b:64:ab:fa:88:15:27:f5:83:63:15:21:bd:28:15:31:
3b:1f:cf:4c:9e:ba:13:df:84:3d:81:33:f8:61:69:36:b3:47:
7a:6b:29:70:ff:48:fa:15:ac:5c:12:74:0d:8f:7a:de:0c:23:
ce:c9:e6:8d:78:62:d3:84:9a:ed:9d:c6:7e:ec:de:f1:fd:d0:
0d:6a:16:13:88:ee:66:c9:ec:16:b3:b6:11:0f:06:66:46:8b:
fc:ab:32:b8:68:b0:cb:d3:04:84:94:d7:99:d8:df:ea:74:42:
11:79:d1:45:33:b7:7a:57:f4:79:46:aa:87:d9:03:94:80:ce:
95:2e:3f:c1:d6:1c:a0:0a:a6:55:0d:89:fa:15:f4:98:ad:ad:
c6:60:f7:bf:69:ad:99:69:9b:8d:22:37:cf:ce:f0:aa:da:dd:
5c:7e:10:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfa5BY1pJ1NY6+3bamaZlSdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YjEzMDYxMDFjYzllYzlmY2U5ODUyODBjMWRiMGYzN2Mx
MzVhM2EwHhcNMjUwNzA1MTQwMTEwWhcNMjUwNzA2MTQwMTEwWjAzMTEwLwYDVQQD
EyhmODhlMWU3YzQ0OGYxMDdjYjc2MGUxZTY1YjJiM2VkYTcxYTFiZWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9FxXJGe9Zj94w0gqiXFc9HLdbTp
6BVyoXl6Xk2yC8NZ+jQGw4WKjMmocXFNmU5jz+unezEd1BVFz7y21XOW67HZlC+6
l9xseloUvJQwT6FMf5WA8en8umC+lyI6kDi1KiCjGK06Ryw+tKcW5LXef2ub2bDR
dqiWWXsK+a780nP9cb8bps/gcxbK1Utrs8UCcUiOvd3G229912YVP+QWjrxm8Q2o
IHUHxUNXTg6ZxC8Icn+h2jgLoJH7C9ZGNFZ5ExA8th2Vm9Er9rTeFZXYydDjQFz+
zH/yP80BkMRo4nS0o/6tRufD7LMl/XD0Vxl8RQDBSIZCJXDx/qYqq6W/bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiOHnxEjxB8t2Dh5lsrPtpxob7RMB8GA1UdIwQY
MBaAFOSxMGEBzJ7J/OmFKAwdsPN8E1o6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUt
ZmE2MzQ4ZjY5NWI1LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUtZmE2MzQ4ZjY5NWI1
LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRK11+K0
xZAlZA/+OgXNtVKVkSRKVRo97jPbF3OIKidyGQc6E4XdRKk6+5zAIXELL43fT8yB
URW0YWbweLk9J3oeCh2lHfrQh+IkG19zevG0xJKAi5c9UcJ5dTN7ZKv6iBUn9YNj
FSG9KBUxOx/PTJ66E9+EPYEz+GFpNrNHemspcP9I+hWsXBJ0DY963gwjzsnmjXhi
04Sa7Z3Gfuze8f3QDWoWE4juZsnsFrO2EQ8GZkaL/KsyuGiwy9MEhJTXmdjf6nRC
EXnRRTO3elf0eUaqh9kDlIDOlS4/wdYcoAqmVQ2J+hX0mK2txmD3v2mtmWmbjSI3
z87wqtrdXH4Q+A==
-----END CERTIFICATE-----
Generated at Sat Jul 5 21:43:40 2025 by rpki-client