Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
File: V5NTy0LgxPulyuJTpXaLwfJGW5k.mft (raw, json)
Hash identifier: o/s2b//xP2Tinoj2/Hn/Rv42hKDke60gXJ3Xdherf7c=
Subject key identifier: 99:9C:53:71:3D:C6:E8:42:E5:6D:4C:1D:E8:BB:82:81:B2:1A:54:75
Authority key identifier: 57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
Certificate issuer: /CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Certificate serial: 0197B6A050CA0A271252D0A287430A416BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
Manifest number: 103A
Signing time: Sat 28 Jun 2025 13:00:49 +0000
Manifest this update: Sat 28 Jun 2025 13:00:49 +0000
Manifest next update: Sun 29 Jun 2025 13:00:49 +0000
Files and hashes: 1: D3QeUsU8Q-1bY74EwK2MA0No9Ew.roa (hash: N97kcfMNA4uFpsheDLzM7+Nl7AAF28L1BPIs41yYMZY=)
2: Q07EucI5XyAYo9s-A9qqwpcEGlA.roa (hash: VFWYrVVM3MpoRzNbOjii1yFOv4OAEiNvOV4MAp0ri4Y=)
3: V5NTy0LgxPulyuJTpXaLwfJGW5k.crl (hash: FHx0LSAtwJSzSJPrPE20L0KVuLa3+FR4F46MbhBlxvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:50:ca:0a:27:12:52:d0:a2:87:43:0a:41:6b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Validity
Not Before: Jun 28 13:00:49 2025 GMT
Not After : Jun 29 13:00:49 2025 GMT
Subject: CN=999c53713dc6e842e56d4c1de8bb8281b21a5475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3b:df:17:1a:ce:2e:46:6e:e5:b6:4d:78:80:
5d:70:dd:e7:64:e2:db:82:ab:db:a7:d0:5c:66:71:
4f:4c:87:71:71:a7:7a:2c:52:15:88:38:93:88:00:
61:7d:d7:da:13:5c:bc:2c:44:a4:f9:99:e5:d6:11:
a8:a1:3e:b3:6c:78:34:b2:82:ef:7e:c1:8f:c6:7c:
18:39:ce:28:06:3a:ac:ff:f0:d3:7b:f5:3e:f0:04:
f4:79:7c:c9:65:0f:ff:bc:d9:a8:16:f3:62:c4:34:
40:96:23:82:a3:86:fd:02:c6:af:cc:f6:15:e1:a1:
ec:70:cf:6a:50:0d:c6:7b:d7:db:cf:3b:7b:a0:da:
b6:1f:93:da:af:e2:e9:96:cd:da:80:40:1b:eb:e0:
a5:ab:f5:20:29:51:cb:d2:57:7f:15:71:fb:7c:1f:
58:e6:fb:cd:c2:89:8e:e4:41:f9:9c:e3:63:dc:92:
11:c6:be:2d:28:8a:20:7f:88:c0:1c:be:64:fc:77:
3d:cc:61:b0:b1:c6:93:1d:4a:6b:bd:2e:54:c8:c6:
87:50:29:11:50:27:f9:67:27:de:c7:9d:f8:01:25:
66:8c:21:cd:c5:dc:17:fe:42:f6:ae:79:71:b6:42:
18:09:2f:17:00:26:81:ec:ce:2d:7f:df:33:79:4b:
72:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9C:53:71:3D:C6:E8:42:E5:6D:4C:1D:E8:BB:82:81:B2:1A:54:75
X509v3 Authority Key Identifier:
keyid:57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:bd:8e:2a:59:ba:65:21:f1:cb:1b:25:21:08:3e:d9:2d:a6:
63:4b:d5:8c:21:2a:6a:73:c0:14:e0:d9:16:b3:c4:ea:34:99:
28:7c:c2:29:c2:7e:98:b0:90:08:5d:e3:95:c8:96:30:fe:49:
c4:95:69:51:24:68:a5:b0:04:9b:7d:ae:0f:c9:01:9b:7f:f6:
b5:11:a5:65:88:8e:5a:18:55:57:37:14:4e:b0:85:19:1c:e1:
b4:c0:93:f6:b9:5c:fb:7c:5b:06:e7:da:bb:b6:ed:1a:1a:79:
7f:91:4a:62:8b:e0:82:62:b4:84:cd:98:bb:31:3d:93:e8:71:
8a:78:4d:98:81:40:2d:18:f0:16:1a:ff:d3:31:43:46:17:34:
42:b1:27:af:cf:90:4a:81:30:04:97:9f:d1:ff:b8:ee:51:1a:
de:79:7a:d5:b8:b7:0d:66:5a:8f:f9:eb:14:09:07:c3:94:0b:
79:a7:71:56:9b:23:90:33:79:a7:3b:e8:9d:5c:77:83:ee:7d:
38:03:a5:42:fa:eb:1a:e7:c4:06:1c:3e:24:83:8e:ed:9e:cb:
b6:a9:59:1a:ae:dc:aa:c2:b1:4a:b8:e3:75:ea:19:03:e3:30:
fc:dd:5a:f0:7b:2a:b2:0e:74:96:b5:be:7a:85:01:4c:3f:a1:
c6:d0:29:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oFDKCicSUtCih0MKQWu0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OTM1M2NiNDJlMGM0ZmJhNWNhZTI1M2E1NzY4YmMxZjI0
NjViOTkwHhcNMjUwNjI4MTMwMDQ5WhcNMjUwNjI5MTMwMDQ5WjAzMTEwLwYDVQQD
Eyg5OTljNTM3MTNkYzZlODQyZTU2ZDRjMWRlOGJiODI4MWIyMWE1NDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDvfFxrOLkZu5bZNeIBdcN3nZOLb
gqvbp9BcZnFPTIdxcad6LFIViDiTiABhfdfaE1y8LESk+Znl1hGooT6zbHg0soLv
fsGPxnwYOc4oBjqs//DTe/U+8AT0eXzJZQ//vNmoFvNixDRAliOCo4b9AsavzPYV
4aHscM9qUA3Ge9fbzzt7oNq2H5Par+Lpls3agEAb6+Clq/UgKVHL0ld/FXH7fB9Y
5vvNwomO5EH5nONj3JIRxr4tKIogf4jAHL5k/Hc9zGGwscaTHUprvS5UyMaHUCkR
UCf5Zyfex534ASVmjCHNxdwX/kL2rnlxtkIYCS8XACaB7M4tf98zeUtyUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmcU3E9xuhC5W1MHei7goGyGlR1MB8GA1UdIwQY
MBaAFFeTU8tC4MT7pcriU6V2i8HyRluZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVOVHkwTGd4UHVseXVKVHBYYUx3ZkpHVzVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMmNjY2QtMDQzMy00MzMwLTk4MWMt
YzY3MmQ2NzM2ODZmLzEvVjVOVHkwTGd4UHVseXVKVHBYYUx3ZkpHVzVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8wMmNjY2QtMDQzMy00MzMwLTk4MWMtYzY3MmQ2NzM2ODZm
LzEvVjVOVHkwTGd4UHVseXVKVHBYYUx3ZkpHVzVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW72OKlm6
ZSHxyxslIQg+2S2mY0vVjCEqanPAFODZFrPE6jSZKHzCKcJ+mLCQCF3jlciWMP5J
xJVpUSRopbAEm32uD8kBm3/2tRGlZYiOWhhVVzcUTrCFGRzhtMCT9rlc+3xbBufa
u7btGhp5f5FKYovggmK0hM2YuzE9k+hxinhNmIFALRjwFhr/0zFDRhc0QrEnr8+Q
SoEwBJef0f+47lEa3nl61bi3DWZaj/nrFAkHw5QLeadxVpsjkDN5pzvonVx3g+59
OAOlQvrrGufEBhw+JIOO7Z7LtqlZGq7cqsKxSrjjdeoZA+Mw/N1a8Hsqsg50lrW+
eoUBTD+hxtApNg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:06:00 2025 by rpki-client