Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
File: V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft (raw, json)
Hash identifier: sd4WKZxcuKl2QZLVgCq0N3IM4z5wvITnV40rkFPD5bQ=
Subject key identifier: 73:BC:3F:78:06:FE:C0:07:74:DD:3C:28:B3:45:6D:E0:0F:5B:C1:DA
Authority key identifier: 57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D
Certificate issuer: /CN=5797245d78078985c147dccbe0ec6d168dd9982d
Certificate serial: 0197B77C9A2107E0DC124140D2C97E212AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
Manifest number: 12A0
Signing time: Sat 28 Jun 2025 17:01:25 +0000
Manifest this update: Sat 28 Jun 2025 17:01:25 +0000
Manifest next update: Sun 29 Jun 2025 17:01:25 +0000
Files and hashes: 1: LXZlJTG3YsWQvmeHm3moz8YZuWw.roa (hash: mxP6NSnPOQlaHwnP8UnNjh2RIRc/bI9gDbXBJw+o1lw=)
2: V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl (hash: ND1usnlswIiFUXMn60jnRWHpa8cGNxS7oBh5G89YTdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:9a:21:07:e0:dc:12:41:40:d2:c9:7e:21:2a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5797245d78078985c147dccbe0ec6d168dd9982d
Validity
Not Before: Jun 28 17:01:25 2025 GMT
Not After : Jun 29 17:01:25 2025 GMT
Subject: CN=73bc3f7806fec00774dd3c28b3456de00f5bc1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d6:90:a7:86:f0:e1:18:7c:2e:29:dc:54:2c:
ae:5e:32:56:09:f0:07:36:1a:2e:55:ef:f9:88:2a:
ec:74:dc:ee:93:c2:15:e1:50:86:5b:e7:2e:f1:98:
a7:fe:2a:ad:b3:a8:68:91:00:b8:b8:da:c0:c4:74:
7e:21:0d:ad:fb:c6:ee:bb:76:d1:c9:3f:33:32:2c:
56:ee:9e:40:ea:51:25:ae:9b:3d:13:5e:bf:6b:20:
c1:de:82:cc:44:56:24:57:b0:42:f5:f2:d4:73:73:
02:70:33:f7:2d:79:b3:c4:b2:59:a1:88:c5:03:e1:
4c:38:2e:59:bb:21:b9:d6:6f:73:8b:5e:a3:8b:14:
b1:b4:80:ba:db:15:ae:34:e9:6e:04:a0:e9:00:7a:
b9:40:42:87:f6:42:43:ef:b4:c9:17:f7:fa:0f:b9:
03:75:0a:24:98:af:27:19:5f:18:c1:ca:f8:16:6e:
54:cd:17:0f:02:b7:e6:b2:12:68:53:02:20:4a:44:
ff:4a:23:02:cf:64:42:b3:2f:a0:e1:9b:60:ef:25:
89:f2:40:a3:3d:cb:c3:b2:17:f3:d0:e8:a3:ae:20:
80:4c:eb:68:db:35:8e:dc:16:99:29:35:e1:55:72:
f4:a7:c7:6c:42:ab:91:df:ba:3d:59:c9:8f:f2:79:
fa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BC:3F:78:06:FE:C0:07:74:DD:3C:28:B3:45:6D:E0:0F:5B:C1:DA
X509v3 Authority Key Identifier:
keyid:57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0b:e1:f5:eb:4c:89:57:a6:d4:f7:87:55:96:1c:ee:1d:6e:
92:0d:d0:50:7b:47:b9:9d:ca:8d:89:64:22:3a:b9:52:0d:b7:
5a:7c:20:f1:ce:5e:6f:93:e0:06:cd:01:8a:37:59:fe:d9:42:
08:f5:ca:2d:ad:b9:88:15:e2:7e:67:95:25:91:ce:32:29:f4:
37:9c:81:8c:93:f4:71:1d:2c:ca:35:5a:ee:73:9a:f9:f9:78:
67:05:fb:9d:5b:7f:fc:fc:77:b6:e2:07:a6:86:e5:b8:27:ee:
f8:0b:d7:70:f2:ae:a2:8b:c9:32:d4:41:ec:60:8a:45:9a:8c:
36:b3:6a:8d:c8:2e:ad:5c:04:cc:ce:54:2d:ff:f1:be:2d:91:
a9:c4:47:c6:61:7f:06:88:45:70:75:96:3b:bf:f3:6f:74:49:
6c:2f:e4:6b:a6:65:94:16:05:d8:e0:44:dd:32:0a:10:fe:54:
5e:f3:25:c7:b3:ae:8b:1e:fb:9a:83:3a:ae:3f:0c:70:0e:5d:
66:df:e4:9e:26:0e:37:49:c4:8e:4e:c4:c4:ae:2f:2f:a6:72:
9a:d8:1c:8b:a5:4a:c1:54:fb:9c:31:7d:26:4c:ce:b8:9c:d9:
c8:de:45:00:45:87:35:87:61:e0:7e:be:db:65:27:1e:45:dd:
ee:62:f2:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fJohB+DcEkFA0sl+ISrTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OTcyNDVkNzgwNzg5ODVjMTQ3ZGNjYmUwZWM2ZDE2OGRk
OTk4MmQwHhcNMjUwNjI4MTcwMTI1WhcNMjUwNjI5MTcwMTI1WjAzMTEwLwYDVQQD
Eyg3M2JjM2Y3ODA2ZmVjMDA3NzRkZDNjMjhiMzQ1NmRlMDBmNWJjMWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtaQp4bw4Rh8LincVCyuXjJWCfAH
NhouVe/5iCrsdNzuk8IV4VCGW+cu8Zin/iqts6hokQC4uNrAxHR+IQ2t+8buu3bR
yT8zMixW7p5A6lElrps9E16/ayDB3oLMRFYkV7BC9fLUc3MCcDP3LXmzxLJZoYjF
A+FMOC5ZuyG51m9zi16jixSxtIC62xWuNOluBKDpAHq5QEKH9kJD77TJF/f6D7kD
dQokmK8nGV8Ywcr4Fm5UzRcPArfmshJoUwIgSkT/SiMCz2RCsy+g4Ztg7yWJ8kCj
PcvDshfz0OijriCATOto2zWO3BaZKTXhVXL0p8dsQquR37o9WcmP8nn6pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHO8P3gG/sAHdN08KLNFbeAPW8HaMB8GA1UdIwQY
MBaAFFeXJF14B4mFwUfcy+DsbRaN2ZgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVja1hYZ0hpWVhCUjl6TDRPeHRGbzNabUMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xMTE1NzktYWUxOS00MjUxLTk3ODUt
NzNlMzhjY2UxMzgzLzEvVjVja1hYZ0hpWVhCUjl6TDRPeHRGbzNabUMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8xMTE1NzktYWUxOS00MjUxLTk3ODUtNzNlMzhjY2UxMzgz
LzEvVjVja1hYZ0hpWVhCUjl6TDRPeHRGbzNabUMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQvh9etM
iVem1PeHVZYc7h1ukg3QUHtHuZ3KjYlkIjq5Ug23Wnwg8c5eb5PgBs0BijdZ/tlC
CPXKLa25iBXifmeVJZHOMin0N5yBjJP0cR0syjVa7nOa+fl4ZwX7nVt//Px3tuIH
pobluCfu+AvXcPKuoovJMtRB7GCKRZqMNrNqjcgurVwEzM5ULf/xvi2RqcRHxmF/
BohFcHWWO7/zb3RJbC/ka6ZllBYF2OBE3TIKEP5UXvMlx7Ouix77moM6rj8McA5d
Zt/kniYON0nEjk7ExK4vL6Zymtgci6VKwVT7nDF9JkzOuJzZyN5FAEWHNYdh4H6+
22UnHkXd7mLysg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:59:19 2025 by rpki-client