Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
File: R5govcbQWedVFZLePuKetBv3vaU.mft (raw, json)
Hash identifier: TD6MLgInmuroWXWeCeZ6W4Y67PN7cymqYS9GAWWRzOg=
Subject key identifier: 6A:C8:2D:C9:68:92:61:66:87:DB:53:B2:83:FC:14:A6:AB:29:70:CF
Authority key identifier: 47:98:28:BD:C6:D0:59:E7:55:15:92:DE:3E:E2:9E:B4:1B:F7:BD:A5
Certificate issuer: /CN=479828bdc6d059e7551592de3ee29eb41bf7bda5
Certificate serial: 0197B6D74FDBCC4369904AE4E54E47FF6005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
Manifest number: 12ED
Signing time: Sat 28 Jun 2025 14:00:53 +0000
Manifest this update: Sat 28 Jun 2025 14:00:53 +0000
Manifest next update: Sun 29 Jun 2025 14:00:53 +0000
Files and hashes: 1: 6tr1rrCgjeuxrkgAXDLatxAPpWk.roa (hash: A5u3qVfZdPKR2rtZPYyIhEzH3krbvs2KLzMm8FE26Yo=)
2: R5govcbQWedVFZLePuKetBv3vaU.crl (hash: A/APwKFJALfljgSqiwcRRvNHqjrKD41Fh4e67BOJvmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4f:db:cc:43:69:90:4a:e4:e5:4e:47:ff:60:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=479828bdc6d059e7551592de3ee29eb41bf7bda5
Validity
Not Before: Jun 28 14:00:53 2025 GMT
Not After : Jun 29 14:00:53 2025 GMT
Subject: CN=6ac82dc96892616687db53b283fc14a6ab2970cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:63:d5:72:a1:e0:90:86:01:7e:4b:e7:02:
25:da:84:c0:a0:2b:2e:05:52:ae:70:64:ee:f7:60:
dd:82:e8:ab:0e:58:cb:3e:3d:0f:05:1e:3e:bc:67:
23:9f:56:7b:de:16:92:d9:ce:f7:6e:f8:73:49:37:
59:aa:e6:00:e2:d3:26:aa:94:1d:93:39:45:8e:bc:
e0:20:fb:40:30:9e:c7:34:90:23:21:73:bd:27:ed:
14:85:f7:62:a7:02:23:55:9c:89:58:ac:43:84:84:
af:31:60:fe:bc:1e:63:36:32:8e:b6:82:30:51:7f:
aa:89:4c:9d:8a:d6:1c:95:91:f2:1b:fd:6c:a2:8d:
07:12:62:1c:51:96:cd:9a:7b:9c:5e:bb:0b:a2:e6:
00:36:6c:e6:15:ad:4c:6f:b3:2f:0b:49:b3:9e:50:
41:b0:53:80:8d:90:4e:fa:5f:3d:f2:ce:60:c4:24:
31:70:55:48:0f:03:32:42:d3:03:c2:ef:f7:15:bf:
eb:6e:8b:aa:e4:6a:9a:a6:62:4d:3f:c5:74:11:46:
c7:48:f3:a3:4e:5a:d1:2a:e1:58:76:7f:80:c8:e5:
55:e2:92:e3:da:b3:6b:c1:16:3a:4c:35:13:06:88:
1b:bd:0d:a2:4d:e1:a3:86:55:4d:88:da:95:1d:87:
db:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C8:2D:C9:68:92:61:66:87:DB:53:B2:83:FC:14:A6:AB:29:70:CF
X509v3 Authority Key Identifier:
keyid:47:98:28:BD:C6:D0:59:E7:55:15:92:DE:3E:E2:9E:B4:1B:F7:BD:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d9:a3:a3:e4:e7:45:14:e0:d5:ef:21:d3:ca:3b:d8:4a:a2:
c6:54:ce:68:3a:2c:21:4b:7a:4d:2c:af:b6:07:41:24:dc:46:
cc:b2:72:13:33:2c:0f:c0:c2:ce:90:97:d8:98:90:46:31:ba:
24:33:c3:8a:48:cc:2d:06:68:21:27:bd:36:2b:d8:b0:c5:f4:
1e:b8:09:43:97:05:ce:64:71:89:a5:62:6f:24:e4:0e:cf:bd:
c3:49:ec:86:46:c9:5b:e9:d5:a5:03:b4:1b:22:9a:d8:8e:54:
48:52:14:bd:7e:ae:21:74:a1:19:9a:3c:20:a6:f3:f2:19:88:
18:d5:39:4f:77:38:1e:04:1d:84:02:4a:fa:bf:7a:e6:a7:fe:
be:2f:63:8e:c9:18:ce:4c:c6:b0:75:26:b9:bd:d5:6a:2e:c3:
d7:b7:4f:65:10:24:cf:79:c4:b2:b8:ab:82:dd:32:d9:f5:ef:
bb:cd:ef:ac:2e:0e:e3:e2:71:6c:83:97:c2:a1:ed:f6:e9:43:
2d:c9:ec:16:10:30:27:b4:18:e3:62:dc:32:6e:72:d9:bd:8e:
fa:24:cd:dc:cf:40:76:30:ef:c5:c9:2b:15:38:26:23:76:01:
3a:e4:bc:a1:21:25:7f:73:6b:07:7f:70:db:8f:a4:d0:a7:53:
65:f2:fc:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe210/bzENpkErk5U5H/2AFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3OTgyOGJkYzZkMDU5ZTc1NTE1OTJkZTNlZTI5ZWI0MWJm
N2JkYTUwHhcNMjUwNjI4MTQwMDUzWhcNMjUwNjI5MTQwMDUzWjAzMTEwLwYDVQQD
Eyg2YWM4MmRjOTY4OTI2MTY2ODdkYjUzYjI4M2ZjMTRhNmFiMjk3MGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0Fj1XKh4JCGAX5L5wIl2oTAoCsu
BVKucGTu92DdguirDljLPj0PBR4+vGcjn1Z73haS2c73bvhzSTdZquYA4tMmqpQd
kzlFjrzgIPtAMJ7HNJAjIXO9J+0UhfdipwIjVZyJWKxDhISvMWD+vB5jNjKOtoIw
UX+qiUyditYclZHyG/1soo0HEmIcUZbNmnucXrsLouYANmzmFa1Mb7MvC0mznlBB
sFOAjZBO+l898s5gxCQxcFVIDwMyQtMDwu/3Fb/rbouq5GqapmJNP8V0EUbHSPOj
TlrRKuFYdn+AyOVV4pLj2rNrwRY6TDUTBogbvQ2iTeGjhlVNiNqVHYfbkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrILclokmFmh9tTsoP8FKarKXDPMB8GA1UdIwQY
MBaAFEeYKL3G0FnnVRWS3j7inrQb972lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjVnb3ZjYlFXZWRWRlpMZVB1S2V0QnYzdmFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni81NDRiZGEtYTRlZi00MjU0LWJhMTkt
M2MxNGFkMmI4M2Q3LzEvUjVnb3ZjYlFXZWRWRlpMZVB1S2V0QnYzdmFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni81NDRiZGEtYTRlZi00MjU0LWJhMTktM2MxNGFkMmI4M2Q3
LzEvUjVnb3ZjYlFXZWRWRlpMZVB1S2V0QnYzdmFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAktmjo+Tn
RRTg1e8h08o72EqixlTOaDosIUt6TSyvtgdBJNxGzLJyEzMsD8DCzpCX2JiQRjG6
JDPDikjMLQZoISe9NivYsMX0HrgJQ5cFzmRxiaVibyTkDs+9w0nshkbJW+nVpQO0
GyKa2I5USFIUvX6uIXShGZo8IKbz8hmIGNU5T3c4HgQdhAJK+r965qf+vi9jjskY
zkzGsHUmub3Vai7D17dPZRAkz3nEsrirgt0y2fXvu83vrC4O4+JxbIOXwqHt9ulD
LcnsFhAwJ7QY42LcMm5y2b2O+iTN3M9AdjDvxckrFTgmI3YBOuS8oSElf3NrB39w
24+k0KdTZfL8Nw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:36:02 2025 by rpki-client