Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
File: 5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft (raw, json)
Hash identifier: C1ftkVR1Cp3W3x1sd3LR5/j6GvJinphQn0MfbkTcCPU=
Subject key identifier: B2:76:15:6B:F2:25:4D:62:91:68:6D:D7:CB:B8:8E:FA:DF:51:09:F7
Authority key identifier: E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
Certificate issuer: /CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Certificate serial: 0197B632A46952B316085E7EE95EA52AEF97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
Manifest number: 1098
Signing time: Sat 28 Jun 2025 11:01:01 +0000
Manifest this update: Sat 28 Jun 2025 11:01:01 +0000
Manifest next update: Sun 29 Jun 2025 11:01:01 +0000
Files and hashes: 1: 5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl (hash: MDF74A8ab0Nzl9l1VTVZFhgRyXiRK5D4RkFrW0DulIQ=)
2: WFOxXq8-woghob55sftxvTt6FdI.roa (hash: hwAy54H63vrYPhBgVny9CWYFBq69ABYXgCXp7pxF/eQ=)
3: nMthV73xKQot_nDw1BjaSeVp1wM.roa (hash: TYeby9qItlQuzOaWwKV9Jy5leKuAxnH4NPibMj98Eco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:a4:69:52:b3:16:08:5e:7e:e9:5e:a5:2a:ef:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Validity
Not Before: Jun 28 11:01:01 2025 GMT
Not After : Jun 29 11:01:01 2025 GMT
Subject: CN=b276156bf2254d6291686dd7cbb88efadf5109f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:01:b8:fd:c3:19:cc:7b:c2:f8:b7:d0:24:
1e:38:e1:6b:be:d5:6a:69:2a:75:cc:a4:47:52:c3:
e1:07:79:61:b0:7a:6e:cf:f1:4b:5e:d0:c1:40:b9:
69:dd:f6:4e:e5:5b:eb:cc:89:a4:f4:67:09:32:d9:
9d:a2:df:71:52:3e:4b:50:68:f1:eb:4b:f6:98:bf:
7f:9a:a6:2e:88:1f:da:2f:f5:ba:a7:47:ed:a1:40:
78:e4:a6:28:1b:56:12:ec:25:4c:0f:71:90:e7:20:
7f:d1:20:d8:f9:7e:c8:66:d3:4f:de:2b:91:da:87:
da:70:bd:b6:76:4a:eb:cc:a9:20:6b:67:bd:7e:59:
0d:da:bb:5a:bf:26:4f:77:da:4b:7a:87:27:c2:6f:
74:4a:6f:80:08:ab:1a:f2:3f:42:2b:0b:76:2b:d9:
5e:27:8f:7d:62:05:14:a3:c1:4a:6f:20:60:da:93:
93:5e:c3:8f:6a:2d:a1:d8:a0:9a:66:12:c0:ff:33:
e9:04:18:dc:2b:2c:b1:d4:08:62:4f:6d:3d:bd:45:
60:8e:af:e5:c1:cb:cf:23:2f:c9:78:8f:d4:01:32:
8b:2a:cd:bd:79:b7:d1:d5:10:96:1a:01:13:5e:06:
36:79:47:5f:69:a6:07:2f:d6:cc:0e:be:4e:20:15:
e8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:76:15:6B:F2:25:4D:62:91:68:6D:D7:CB:B8:8E:FA:DF:51:09:F7
X509v3 Authority Key Identifier:
keyid:E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:cf:8c:36:d4:5a:0f:35:ac:b7:6e:57:d4:39:ec:b2:26:d6:
4f:c1:f3:ee:0f:de:50:7b:51:e7:cd:08:fb:3c:46:16:43:d4:
ec:c4:f4:a3:8c:b8:cf:d5:d0:2a:8f:03:70:4a:d1:23:90:66:
a5:2f:da:28:79:80:ec:33:62:f1:4e:ca:31:df:0f:b3:b5:79:
05:82:3e:84:52:6a:45:60:89:26:68:51:b4:7b:80:6d:20:1f:
b8:13:11:20:fe:84:58:96:bd:50:ea:63:b4:12:ad:25:70:fe:
85:fe:11:cc:dc:c5:f1:55:27:5c:3f:08:92:13:27:b0:47:ca:
27:ef:5b:af:5c:39:e8:4f:c3:6f:21:ec:5c:87:89:7a:53:04:
b7:c5:93:47:cf:be:46:70:13:c8:42:42:f8:6f:7a:fc:d0:13:
69:dc:33:78:ec:4f:0c:49:32:85:dc:d7:ee:10:01:b8:45:83:
f9:24:50:5e:cf:ae:85:91:95:76:5d:8e:c0:4c:b5:d9:16:c1:
ad:67:80:af:86:82:e6:dd:a4:d4:fa:25:2c:41:58:41:40:b7:
fc:25:fe:af:65:21:03:b7:47:96:ad:b9:31:ef:2c:15:85:60:
cc:5d:c1:b8:4c:a1:cb:e9:33:70:b0:2c:0b:2d:59:83:35:06:
bb:af:27:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MqRpUrMWCF5+6V6lKu+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0OTg0ZjhmMzZlYmY5ZjhmNTRjMTIxNzRmNDYzNjY0ZDdi
MjNhZWUwHhcNMjUwNjI4MTEwMTAxWhcNMjUwNjI5MTEwMTAxWjAzMTEwLwYDVQQD
EyhiMjc2MTU2YmYyMjU0ZDYyOTE2ODZkZDdjYmI4OGVmYWRmNTEwOWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzwBuP3DGcx7wvi30CQeOOFrvtVq
aSp1zKRHUsPhB3lhsHpuz/FLXtDBQLlp3fZO5VvrzImk9GcJMtmdot9xUj5LUGjx
60v2mL9/mqYuiB/aL/W6p0ftoUB45KYoG1YS7CVMD3GQ5yB/0SDY+X7IZtNP3iuR
2ofacL22dkrrzKkga2e9flkN2rtavyZPd9pLeocnwm90Sm+ACKsa8j9CKwt2K9le
J499YgUUo8FKbyBg2pOTXsOPai2h2KCaZhLA/zPpBBjcKyyx1AhiT209vUVgjq/l
wcvPIy/JeI/UATKLKs29ebfR1RCWGgETXgY2eUdfaaYHL9bMDr5OIBXowwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJ2FWvyJU1ikWht18u4jvrfUQn3MB8GA1UdIwQY
MBaAFOSYT4826/n49UwSF09GNmTXsjruMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUpoUGp6YnItZmoxVEJJWFQwWTJaTmV5T3U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81N2Q5MDgtMjA3ZC00OTdjLWFiMTgt
ZGU3YmUxZTVjNzc2LzEvNUpoUGp6YnItZmoxVEJJWFQwWTJaTmV5T3U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi81N2Q5MDgtMjA3ZC00OTdjLWFiMTgtZGU3YmUxZTVjNzc2
LzEvNUpoUGp6YnItZmoxVEJJWFQwWTJaTmV5T3U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAec+MNtRa
DzWst25X1DnssibWT8Hz7g/eUHtR580I+zxGFkPU7MT0o4y4z9XQKo8DcErRI5Bm
pS/aKHmA7DNi8U7KMd8Ps7V5BYI+hFJqRWCJJmhRtHuAbSAfuBMRIP6EWJa9UOpj
tBKtJXD+hf4RzNzF8VUnXD8IkhMnsEfKJ+9br1w56E/DbyHsXIeJelMEt8WTR8++
RnATyEJC+G96/NATadwzeOxPDEkyhdzX7hABuEWD+SRQXs+uhZGVdl2OwEy12RbB
rWeAr4aC5t2k1PolLEFYQUC3/CX+r2UhA7dHlq25Me8sFYVgzF3BuEyhy+kzcLAs
Cy1ZgzUGu68nKQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:38 2025 by rpki-client