Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
File: S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft (raw, json)
Hash identifier: qb7W4xysNm7AOEHZqUlHGemC0JkSXmmcVYxxxKOr7To=
Subject key identifier: 6B:4C:5C:9D:3E:FC:FE:68:8A:1B:ED:94:38:F9:F6:77:28:5C:CF:6F
Authority key identifier: 4B:93:C6:A1:0D:14:1F:00:AE:FA:DE:01:BC:D3:49:2F:75:4F:4E:83
Certificate issuer: /CN=4b93c6a10d141f00aefade01bcd3492f754f4e83
Certificate serial: 0197B70E6E98857CB6404F3C901439C6044F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
Manifest number: 150E
Signing time: Sat 28 Jun 2025 15:01:05 +0000
Manifest this update: Sat 28 Jun 2025 15:01:05 +0000
Manifest next update: Sun 29 Jun 2025 15:01:05 +0000
Files and hashes: 1: S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl (hash: mb7liMvBtMv+wng3jLT8PaOhIJXVZ7gZxlI+XWIvxQQ=)
2: v6SZGiKR24BVvAjZdd8cz7dRNVo.roa (hash: SrmYXvyqUl8YVIgTkfPYRcexlIdDbvR6648X1c8kcVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:6e:98:85:7c:b6:40:4f:3c:90:14:39:c6:04:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b93c6a10d141f00aefade01bcd3492f754f4e83
Validity
Not Before: Jun 28 15:01:05 2025 GMT
Not After : Jun 29 15:01:05 2025 GMT
Subject: CN=6b4c5c9d3efcfe688a1bed9438f9f677285ccf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f5:bb:5b:99:b5:5c:11:fe:81:aa:76:12:38:
6f:a9:a5:64:58:b7:ae:81:4b:e7:73:cf:c7:df:f9:
16:e3:e9:5c:56:c0:71:55:b6:09:49:29:4d:b1:19:
a3:78:0e:bd:e1:07:82:84:08:55:e1:95:e1:64:83:
78:20:28:23:b5:f6:d0:be:a6:f1:63:04:b6:43:9c:
3d:8b:b1:47:28:c6:c7:4d:34:48:a4:01:69:bc:e0:
02:8d:59:63:f1:b0:c6:76:88:3f:87:8e:0f:c4:11:
33:01:5e:79:d8:a9:a3:d0:b8:a9:eb:3d:dd:23:45:
a3:8c:3a:78:8d:a9:90:cd:8a:4c:04:b0:54:4f:76:
95:56:11:61:97:bd:6e:e6:e9:20:0e:75:b6:fa:70:
ed:ee:6d:3d:80:e9:09:c8:72:af:9d:bb:56:82:44:
e8:22:d9:b5:ed:55:d3:36:04:89:76:e7:cb:a1:f2:
b9:c4:57:43:60:3f:e9:4d:6f:f5:59:41:68:22:c7:
3c:c9:7d:18:ea:30:07:88:5c:c0:b2:03:83:52:15:
94:fa:9c:07:ca:ab:88:c1:ed:b6:c5:36:63:fe:bf:
e5:d1:0d:cf:15:61:a0:04:c0:94:e7:c5:e2:a9:15:
5e:f8:11:90:c5:37:9b:cd:0f:23:e5:b5:89:21:ed:
a3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4C:5C:9D:3E:FC:FE:68:8A:1B:ED:94:38:F9:F6:77:28:5C:CF:6F
X509v3 Authority Key Identifier:
keyid:4B:93:C6:A1:0D:14:1F:00:AE:FA:DE:01:BC:D3:49:2F:75:4F:4E:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:21:b7:58:60:26:0c:c9:ed:a9:f4:1f:30:e7:cd:16:bf:86:
92:93:d0:16:51:60:70:5b:12:74:d7:a4:9e:c0:c8:3e:68:11:
f5:f2:d5:02:b1:a5:d9:ea:ca:8b:f3:f5:33:cb:98:b2:77:a3:
51:8d:02:f7:19:47:40:10:b2:11:e0:67:b7:43:07:e5:e1:0a:
64:14:65:ac:ee:48:1b:c6:c7:32:cb:72:c3:2f:84:2c:7b:6d:
94:46:40:e5:7c:98:1f:f3:cb:86:5d:5b:3b:a7:53:49:16:46:
3c:2e:62:cb:27:98:05:29:65:f1:25:86:77:63:16:6c:85:61:
b4:a4:8f:f8:df:8b:3c:d0:82:e8:b4:40:65:cb:85:c9:63:6e:
22:92:15:80:44:8e:f4:ed:a3:e1:7c:e1:3f:29:42:0a:46:94:
7f:04:a3:07:db:df:8a:63:60:23:e5:79:0c:ee:cd:09:15:9c:
53:ef:c6:23:d4:1e:ad:25:c9:9e:01:6a:f2:a9:97:05:9f:7a:
80:7a:af:6b:32:3b:cf:d7:0b:9c:da:f2:3d:8e:0e:4c:54:20:
2d:bf:1a:b2:60:30:a1:d3:b9:ea:d6:cd:c5:03:0d:81:4e:ec:
2c:73:f0:95:41:9e:f0:fb:4e:24:f6:94:f6:75:39:0c:9a:64:
10:f8:b5:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dm6YhXy2QE88kBQ5xgRPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOTNjNmExMGQxNDFmMDBhZWZhZGUwMWJjZDM0OTJmNzU0
ZjRlODMwHhcNMjUwNjI4MTUwMTA1WhcNMjUwNjI5MTUwMTA1WjAzMTEwLwYDVQQD
Eyg2YjRjNWM5ZDNlZmNmZTY4OGExYmVkOTQzOGY5ZjY3NzI4NWNjZjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfW7W5m1XBH+gap2EjhvqaVkWLeu
gUvnc8/H3/kW4+lcVsBxVbYJSSlNsRmjeA694QeChAhV4ZXhZIN4ICgjtfbQvqbx
YwS2Q5w9i7FHKMbHTTRIpAFpvOACjVlj8bDGdog/h44PxBEzAV552Kmj0Lip6z3d
I0WjjDp4jamQzYpMBLBUT3aVVhFhl71u5ukgDnW2+nDt7m09gOkJyHKvnbtWgkTo
Itm17VXTNgSJdufLofK5xFdDYD/pTW/1WUFoIsc8yX0Y6jAHiFzAsgODUhWU+pwH
yquIwe22xTZj/r/l0Q3PFWGgBMCU58XiqRVe+BGQxTebzQ8j5bWJIe2jLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtMXJ0+/P5oihvtlDj59ncoXM9vMB8GA1UdIwQY
MBaAFEuTxqENFB8ArvreAbzTSS91T06DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVQR29RMFVId0N1LXQ0QnZOTkpMM1ZQVG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8yODg0YTEtYzEyNC00NTY1LWI4NDEt
ZTEwNGM5ODJkN2EwLzEvUzVQR29RMFVId0N1LXQ0QnZOTkpMM1ZQVG9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8yODg0YTEtYzEyNC00NTY1LWI4NDEtZTEwNGM5ODJkN2Ew
LzEvUzVQR29RMFVId0N1LXQ0QnZOTkpMM1ZQVG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSG3WGAm
DMntqfQfMOfNFr+GkpPQFlFgcFsSdNeknsDIPmgR9fLVArGl2erKi/P1M8uYsnej
UY0C9xlHQBCyEeBnt0MH5eEKZBRlrO5IG8bHMstywy+ELHttlEZA5XyYH/PLhl1b
O6dTSRZGPC5iyyeYBSll8SWGd2MWbIVhtKSP+N+LPNCC6LRAZcuFyWNuIpIVgESO
9O2j4XzhPylCCkaUfwSjB9vfimNgI+V5DO7NCRWcU+/GI9QerSXJngFq8qmXBZ96
gHqvazI7z9cLnNryPY4OTFQgLb8asmAwodO56tbNxQMNgU7sLHPwlUGe8PtOJPaU
9nU5DJpkEPi1Uw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:47 2025 by rpki-client