Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
File: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft (raw, json)
Hash identifier: d00Kc9LhJYL//79GHSO1OxbEEhD8z50E9vbjQ948x3E=
Subject key identifier: DB:67:5B:FE:32:90:72:46:1B:5F:FE:B8:81:A8:CF:17:E1:64:14:13
Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94
Certificate serial: 0197B8C5E7A065A204B710529DEB1113C3DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
Manifest number: 1046
Signing time: Sat 28 Jun 2025 23:01:06 +0000
Manifest this update: Sat 28 Jun 2025 23:01:06 +0000
Manifest next update: Sun 29 Jun 2025 23:01:06 +0000
Files and hashes: 1: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl (hash: ouScPYt5vGACQoLIOvBhpYwcYBi7TRI3UiITNzz6Q+k=)
2: QjltdHgB4W_2eDHH-42Rsn7haU4.roa (hash: GyEMXz3VqmF7vL4u7u/PEu1jMNaIBLH5FqjmQMneOuk=)
3: ik_n3d34B4WKWLhhwqx1Hs4Gq10.roa (hash: SF4FNJqkU5gIwE/u+5gu4fhisTugNMrqP4zHCgZbpN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:e7:a0:65:a2:04:b7:10:52:9d:eb:11:13:c3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94
Validity
Not Before: Jun 28 23:01:06 2025 GMT
Not After : Jun 29 23:01:06 2025 GMT
Subject: CN=db675bfe329072461b5ffeb881a8cf17e1641413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:75:fa:46:b8:49:0f:2a:5f:b0:1c:e6:53:
ed:17:78:f6:62:2d:a9:39:68:92:7f:c7:89:04:6f:
91:96:68:a1:2c:e0:89:ce:6c:51:8c:fd:cb:ca:45:
37:26:16:b9:8c:07:72:a7:b7:d5:b1:64:e4:f1:39:
9f:58:b3:45:9d:7c:bc:44:5d:8e:e4:8b:7f:1c:c8:
76:31:f2:4a:ce:ad:4b:b7:d5:4c:a9:e3:86:88:36:
00:22:5f:ef:88:1c:9b:96:7f:c1:2f:b1:d3:44:eb:
1f:d7:11:d1:4f:25:a9:fd:ee:cb:1f:16:7f:d9:ce:
f8:5d:d7:5e:ac:ac:d4:e3:f5:e8:75:e6:23:ab:9e:
e2:e0:0c:67:6c:8a:68:1d:48:42:9b:45:04:ec:4e:
a2:78:63:50:d3:76:76:39:5f:c5:53:1f:ff:d3:8a:
34:89:ae:cc:66:d4:ad:6e:27:33:93:a4:af:11:79:
1d:c2:03:d1:36:1c:25:ec:a8:ac:5e:2d:cd:d5:34:
ac:70:4f:e8:96:f4:24:61:de:1c:1e:43:be:18:e6:
0d:cc:85:95:73:c5:aa:e4:a0:2e:55:1b:4d:e8:e1:
93:6d:40:6b:eb:4a:47:e7:0e:6c:11:a9:3c:57:f8:
43:15:f4:5e:23:1b:01:17:1b:15:af:f6:ea:93:09:
e6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:67:5B:FE:32:90:72:46:1B:5F:FE:B8:81:A8:CF:17:E1:64:14:13
X509v3 Authority Key Identifier:
keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:19:fa:ab:85:18:16:46:7d:84:0a:5d:21:19:e4:ba:40:3d:
52:52:a8:e0:a7:34:1b:f3:72:ae:98:81:24:79:8c:61:6b:3d:
2c:c2:d8:bf:7a:a8:38:b6:4c:97:f2:c6:5b:b8:73:7c:b5:cb:
1d:fb:f8:32:6f:bc:10:01:c4:a8:18:8b:2a:e2:77:40:b3:39:
33:97:0f:98:a3:0b:dd:5a:e3:d6:22:ca:c6:46:03:f3:b7:7e:
1e:82:ed:c8:44:46:cd:86:0c:99:d0:11:70:9c:17:ef:c2:d7:
9f:c3:d5:28:45:3b:40:56:26:95:fe:dc:96:ad:6e:e8:09:0a:
d4:51:84:a1:65:b4:b5:6d:75:7b:6f:f4:f1:1f:d4:e2:a0:4f:
81:91:ed:29:3d:a7:d9:98:06:6c:ea:68:a1:1b:6b:a8:64:d5:
f8:29:11:ac:bd:f1:68:fe:30:9e:7b:32:e4:1a:72:7e:8f:c6:
b0:62:b9:da:35:ef:bc:99:be:20:27:00:d7:34:84:0b:a3:4e:
8b:82:db:60:24:1d:78:14:03:df:22:ca:ef:fa:4a:dd:29:db:
56:8a:91:d9:94:3a:06:b3:f5:76:53:1e:f3:7c:18:8a:ec:ca:
9d:18:91:92:2d:f1:e5:0f:50:c5:61:6f:36:d5:f1:c9:1b:41:
66:01:ea:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4xeegZaIEtxBSnesRE8PdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MzM0YWQ5YjNmYzUyMTAzMGJlOTlhNTE1NzIxMWI2NjMy
MTZjOTQwHhcNMjUwNjI4MjMwMTA2WhcNMjUwNjI5MjMwMTA2WjAzMTEwLwYDVQQD
EyhkYjY3NWJmZTMyOTA3MjQ2MWI1ZmZlYjg4MWE4Y2YxN2UxNjQxNDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMB1+ka4SQ8qX7Ac5lPtF3j2Yi2p
OWiSf8eJBG+RlmihLOCJzmxRjP3LykU3Jha5jAdyp7fVsWTk8TmfWLNFnXy8RF2O
5It/HMh2MfJKzq1Lt9VMqeOGiDYAIl/viBybln/BL7HTROsf1xHRTyWp/e7LHxZ/
2c74XdderKzU4/XodeYjq57i4AxnbIpoHUhCm0UE7E6ieGNQ03Z2OV/FUx//04o0
ia7MZtStbiczk6SvEXkdwgPRNhwl7KisXi3N1TSscE/olvQkYd4cHkO+GOYNzIWV
c8Wq5KAuVRtN6OGTbUBr60pH5w5sEak8V/hDFfReIxsBFxsVr/bqkwnmSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtnW/4ykHJGG1/+uIGozxfhZBQTMB8GA1UdIwQY
MBaAFOczStmz/FIQML6ZpRVyEbZjIWyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXpOSzJiUDhVaEF3dnBtbEZYSVJ0bU1oYkpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iMDRiMmUtNzNlNi00ODg3LThkZjEt
MzcyMmRmMDczNjAzLzEvNXpOSzJiUDhVaEF3dnBtbEZYSVJ0bU1oYkpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iMDRiMmUtNzNlNi00ODg3LThkZjEtMzcyMmRmMDczNjAz
LzEvNXpOSzJiUDhVaEF3dnBtbEZYSVJ0bU1oYkpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBn6q4UY
FkZ9hApdIRnkukA9UlKo4Kc0G/NyrpiBJHmMYWs9LMLYv3qoOLZMl/LGW7hzfLXL
Hfv4Mm+8EAHEqBiLKuJ3QLM5M5cPmKML3Vrj1iLKxkYD87d+HoLtyERGzYYMmdAR
cJwX78LXn8PVKEU7QFYmlf7clq1u6AkK1FGEoWW0tW11e2/08R/U4qBPgZHtKT2n
2ZgGbOpooRtrqGTV+CkRrL3xaP4wnnsy5Bpyfo/GsGK52jXvvJm+ICcA1zSEC6NO
i4LbYCQdeBQD3yLK7/pK3SnbVoqR2ZQ6BrP1dlMe83wYiuzKnRiRki3x5Q9QxWFv
NtXxyRtBZgHqJg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:06:31 2025 by rpki-client