Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
File: d5KQMR5unPpeUX-rsNlvqaccPaE.mft (raw, json)
Hash identifier: ohBA5O9nGRsTamEwtSmCtQJ6G1jgmMgie+58dipCAXg=
Subject key identifier: FD:D2:D5:D7:33:1D:2E:10:02:4E:7B:99:49:20:36:C7:AA:73:00:09
Authority key identifier: 77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1
Certificate issuer: /CN=779290311e6e9cfa5e517fabb0d96fa9a71c3da1
Certificate serial: 0197C1C8EBB35BB40A8FB1BF3D2B0D928E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
Manifest number: 15BA
Signing time: Mon 30 Jun 2025 17:00:59 +0000
Manifest this update: Mon 30 Jun 2025 17:00:59 +0000
Manifest next update: Tue 01 Jul 2025 17:00:59 +0000
Files and hashes: 1: LOkJgQnrVhTjIGglVDZP2nXIS3k.roa (hash: w0AA95RC5IbPZCqkTY536mw4aIKSxO5pRstC+7ehig8=)
2: d5KQMR5unPpeUX-rsNlvqaccPaE.crl (hash: JJkrnqFMpk1P2F0tbmCf2ugzwR8zFRxxjHrNLlKAJpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:c8:eb:b3:5b:b4:0a:8f:b1:bf:3d:2b:0d:92:8e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779290311e6e9cfa5e517fabb0d96fa9a71c3da1
Validity
Not Before: Jun 30 17:00:59 2025 GMT
Not After : Jul 1 17:00:59 2025 GMT
Subject: CN=fdd2d5d7331d2e10024e7b99492036c7aa730009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:13:04:cb:37:cc:d4:0f:9a:90:e7:41:0f:48:
a6:2e:4d:a6:c1:2d:d9:75:0e:0d:c3:d9:ba:b5:2e:
54:33:f9:a9:16:7b:37:d0:ac:85:b2:9e:c8:25:48:
01:9e:7b:64:1d:e6:03:73:d1:66:d9:db:e3:48:76:
c6:dd:5d:99:2c:53:49:fd:ed:ec:66:c8:6a:de:98:
30:e0:99:cc:e9:58:ed:bb:86:7c:79:00:d8:0f:db:
bb:08:bd:aa:3f:52:d0:12:1b:bb:66:ba:97:d6:d3:
13:cc:40:e1:40:10:de:87:30:8e:ff:80:58:be:50:
81:a7:ad:f6:f2:ad:51:af:06:8f:c7:4d:02:1f:3b:
68:1a:c2:b6:e0:dd:fe:45:9f:71:76:70:f0:6b:22:
42:00:4e:74:8a:e3:84:29:f9:7f:75:05:31:3a:76:
8f:76:45:80:73:e1:28:4e:40:a3:0b:1c:96:d2:da:
1b:30:17:15:82:28:a7:04:05:eb:0f:9f:9a:c1:11:
1d:b4:ae:1a:30:4e:3f:5b:8d:4e:4c:b8:8b:1f:ed:
28:f5:8e:42:b8:b4:27:c2:35:06:8b:b1:63:f5:02:
c8:24:ae:66:a4:e8:c0:7e:b2:fe:01:14:e9:24:40:
eb:62:fe:93:9b:fd:42:9d:28:ca:c9:13:e0:96:36:
9c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D2:D5:D7:33:1D:2E:10:02:4E:7B:99:49:20:36:C7:AA:73:00:09
X509v3 Authority Key Identifier:
keyid:77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:e1:73:bb:3c:08:aa:4e:08:3a:96:c0:97:02:ac:f1:5e:37:
8a:ca:26:22:8f:cc:d0:0b:f1:90:00:e8:38:c3:30:11:23:dd:
ba:3f:3d:d9:88:33:50:95:c6:ca:4a:8f:30:59:58:b6:9f:61:
1e:ce:16:6e:e2:ff:06:55:9f:d5:4a:8b:a5:1a:0a:8b:96:58:
ae:ef:ed:f9:a1:d8:3f:32:47:63:35:b7:84:56:ff:54:ac:67:
03:de:70:93:12:fa:7e:0c:0f:7b:81:0d:00:b0:4a:50:74:df:
b2:70:0e:2e:62:04:58:47:6f:84:1a:89:a6:b2:8b:93:b3:a5:
7f:a9:80:30:a9:10:cf:84:f9:09:0f:3c:50:8c:da:46:44:bc:
03:3a:93:a6:89:08:82:3c:65:b6:c6:93:f9:e5:3a:76:a0:0e:
af:92:87:35:52:a0:dd:07:88:5f:5f:82:f2:c0:0c:ff:6e:38:
ff:1d:25:4d:d8:f8:1a:92:e5:c9:67:44:42:82:39:06:0b:45:
62:cf:21:9e:a5:93:4b:23:46:0f:68:d2:a6:b8:bb:08:f5:46:
64:af:93:7b:dd:dc:b9:90:a9:46:45:3a:9b:53:ca:0f:df:97:
9b:43:19:f9:98:5f:a4:7b:c4:a2:4a:60:a3:25:a8:16:5b:67:
c4:f1:07:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfByOuzW7QKj7G/PSsNko49MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OTI5MDMxMWU2ZTljZmE1ZTUxN2ZhYmIwZDk2ZmE5YTcx
YzNkYTEwHhcNMjUwNjMwMTcwMDU5WhcNMjUwNzAxMTcwMDU5WjAzMTEwLwYDVQQD
EyhmZGQyZDVkNzMzMWQyZTEwMDI0ZTdiOTk0OTIwMzZjN2FhNzMwMDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxMEyzfM1A+akOdBD0imLk2mwS3Z
dQ4Nw9m6tS5UM/mpFns30KyFsp7IJUgBnntkHeYDc9Fm2dvjSHbG3V2ZLFNJ/e3s
Zshq3pgw4JnM6Vjtu4Z8eQDYD9u7CL2qP1LQEhu7ZrqX1tMTzEDhQBDehzCO/4BY
vlCBp6328q1RrwaPx00CHztoGsK24N3+RZ9xdnDwayJCAE50iuOEKfl/dQUxOnaP
dkWAc+EoTkCjCxyW0tobMBcVgiinBAXrD5+awREdtK4aME4/W41OTLiLH+0o9Y5C
uLQnwjUGi7Fj9QLIJK5mpOjAfrL+ARTpJEDrYv6Tm/1CnSjKyRPgljachwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3S1dczHS4QAk57mUkgNseqcwAJMB8GA1UdIwQY
MBaAFHeSkDEebpz6XlF/q7DZb6mnHD2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDVLUU1SNXVuUHBlVVgtcnNObHZxYWNjUGFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iOGUwM2UtYzM5OC00ZWVlLTg5Mzkt
ZjkwOWQ3OWE0NGFkLzEvZDVLUU1SNXVuUHBlVVgtcnNObHZxYWNjUGFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9iOGUwM2UtYzM5OC00ZWVlLTg5MzktZjkwOWQ3OWE0NGFk
LzEvZDVLUU1SNXVuUHBlVVgtcnNObHZxYWNjUGFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAueFzuzwI
qk4IOpbAlwKs8V43isomIo/M0AvxkADoOMMwESPduj892YgzUJXGykqPMFlYtp9h
Hs4WbuL/BlWf1UqLpRoKi5ZYru/t+aHYPzJHYzW3hFb/VKxnA95wkxL6fgwPe4EN
ALBKUHTfsnAOLmIEWEdvhBqJprKLk7Olf6mAMKkQz4T5CQ88UIzaRkS8AzqTpokI
gjxltsaT+eU6dqAOr5KHNVKg3QeIX1+C8sAM/244/x0lTdj4GpLlyWdEQoI5BgtF
Ys8hnqWTSyNGD2jSpri7CPVGZK+Te93cuZCpRkU6m1PKD9+Xm0MZ+ZhfpHvEokpg
oyWoFltnxPEHwA==
-----END CERTIFICATE-----
Generated at Mon Jun 30 20:29:53 2025 by rpki-client