Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier: s85IXcWggB6YFdkLs36LtVuk4MQiJNjIjlorsL617f4=
Subject key identifier: F6:32:67:11:80:D2:81:E8:34:26:C9:BE:3E:79:D6:C5:D3:5F:B7:1D
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 0197B70F3EFF2AE5816F5291B2D6CB8F8C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:59 +0000
Manifest this update: Sat 28 Jun 2025 15:01:59 +0000
Manifest next update: Sun 29 Jun 2025 15:01:59 +0000
Files and hashes: 1: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: mhk3gMkyhgAoB8vom4Srr3l+hlA7c3EiA77/CV9ub7I=)
2: FR3a7fbq59iIo0zAlvy5kzi1iZU.roa (hash: Z35c/JbC3hZCBf85VdNEpndC+c0TUxZMQxPjJSIsAQ0=)
3: suPxSfpNrh7z5_Ta2x6TjwnQ2sY.roa (hash: jrCuL3fpLVTl6VSsAmka/tgQrfuz/laa7SHWrZ9+ExE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:3e:ff:2a:e5:81:6f:52:91:b2:d6:cb:8f:8c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Jun 28 15:01:59 2025 GMT
Not After : Jun 29 15:01:59 2025 GMT
Subject: CN=f632671180d281e83426c9be3e79d6c5d35fb71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:a4:b0:f1:5d:55:b2:fc:e8:50:5d:85:4b:
55:02:91:25:2a:7a:25:61:af:20:f5:4c:14:06:79:
44:fb:9c:03:28:08:cb:b9:11:a0:34:97:15:49:31:
02:0e:8a:54:e4:d9:c5:44:d2:78:67:8a:79:77:2c:
42:ec:76:17:94:48:43:58:e7:6a:97:c3:c2:ce:2c:
cc:63:4e:92:56:09:0f:48:11:e8:d2:c6:71:5d:1f:
07:22:4b:63:42:7a:2c:87:d9:1e:a8:0b:b1:72:c3:
3a:85:a5:bb:3b:39:aa:7a:7b:72:de:60:3c:cb:3d:
c6:d5:e1:bf:57:cf:d3:e7:d7:dd:be:ca:88:3b:1c:
00:62:e2:d0:12:c8:fa:a3:f9:ba:38:08:b2:fb:84:
21:9d:47:c1:1b:38:d2:7a:28:e3:da:b3:74:eb:f5:
82:d0:a3:8a:9a:63:89:fd:9f:4a:9a:b1:5a:fa:3d:
bf:91:73:8a:97:50:90:1a:c9:41:24:28:92:bb:88:
9a:e2:da:47:c5:db:c0:6d:23:71:2f:c1:e3:09:8d:
e9:be:4d:48:7e:0a:80:34:5e:55:7a:57:e2:ff:b0:
d6:fc:44:71:cc:1b:35:b6:a6:9d:26:09:3b:d1:5b:
be:07:4c:1b:dc:95:26:8b:b7:eb:9b:ea:40:71:9b:
82:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:32:67:11:80:D2:81:E8:34:26:C9:BE:3E:79:D6:C5:D3:5F:B7:1D
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a0:63:9f:12:02:6c:0a:b3:fd:f8:0a:8b:98:82:4b:14:dd:
66:9e:9b:e0:44:35:fe:98:44:c9:2b:d1:08:80:c1:50:d1:26:
4b:fb:dc:c1:5c:e2:7b:eb:16:18:b0:23:1c:0d:79:73:61:bf:
e4:c5:94:42:9f:b2:60:0b:67:83:98:f2:b4:44:ed:4d:67:7b:
70:71:84:8c:dc:2d:89:6a:96:ba:d1:79:36:7d:00:cf:37:23:
8c:5f:29:0f:56:5c:40:c5:87:a1:cd:27:ae:10:ce:f9:9a:84:
69:4d:92:c7:db:c9:89:05:98:46:d4:17:d8:84:76:cc:de:9d:
cb:08:c2:95:15:40:17:7e:5f:64:b4:8d:93:30:d7:64:a0:84:
bf:35:9f:60:8d:ac:c1:ac:5d:01:bd:c3:ce:11:83:65:4d:0f:
0a:38:c3:af:e2:33:ca:b2:cb:d8:71:ed:63:c4:10:64:d8:a7:
37:3e:d6:07:cd:e1:f1:95:59:40:ae:5b:77:fa:ea:4e:2d:04:
40:69:3a:00:8a:c2:9e:1b:1b:e2:9e:dd:af:3f:6a:54:a4:47:
87:97:d0:e7:af:0b:10:51:b9:ea:42:1e:42:36:4c:63:fa:b9:
36:44:2f:e5:22:31:6e:71:03:88:8a:5b:36:b3:a3:4b:f0:df:
f3:a1:4c:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dz7/KuWBb1KRstbLj4wKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1M2FkOWI0MzJiYjgzZDE0MWM0ODBkZWU3OGJjMzVmZjQ3
Y2I3MmMwHhcNMjUwNjI4MTUwMTU5WhcNMjUwNjI5MTUwMTU5WjAzMTEwLwYDVQQD
EyhmNjMyNjcxMTgwZDI4MWU4MzQyNmM5YmUzZTc5ZDZjNWQzNWZiNzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAWksPFdVbL86FBdhUtVApElKnol
Ya8g9UwUBnlE+5wDKAjLuRGgNJcVSTECDopU5NnFRNJ4Z4p5dyxC7HYXlEhDWOdq
l8PCzizMY06SVgkPSBHo0sZxXR8HIktjQnosh9keqAuxcsM6haW7Ozmqenty3mA8
yz3G1eG/V8/T59fdvsqIOxwAYuLQEsj6o/m6OAiy+4QhnUfBGzjSeijj2rN06/WC
0KOKmmOJ/Z9KmrFa+j2/kXOKl1CQGslBJCiSu4ia4tpHxdvAbSNxL8HjCY3pvk1I
fgqANF5Velfi/7DW/ERxzBs1tqadJgk70Vu+B0wb3JUmi7frm+pAcZuCwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYyZxGA0oHoNCbJvj551sXTX7cdMB8GA1UdIwQY
MBaAFOU62bQyu4PRQcSA3ueLw1/0fLcsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lOGJkMGItZjM2ZC00NWY1LWI5ODUt
MDliYjUyODc1MzFiLzEvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9lOGJkMGItZjM2ZC00NWY1LWI5ODUtMDliYjUyODc1MzFi
LzEvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkKBjnxIC
bAqz/fgKi5iCSxTdZp6b4EQ1/phEySvRCIDBUNEmS/vcwVzie+sWGLAjHA15c2G/
5MWUQp+yYAtng5jytETtTWd7cHGEjNwtiWqWutF5Nn0AzzcjjF8pD1ZcQMWHoc0n
rhDO+ZqEaU2Sx9vJiQWYRtQX2IR2zN6dywjClRVAF35fZLSNkzDXZKCEvzWfYI2s
waxdAb3DzhGDZU0PCjjDr+IzyrLL2HHtY8QQZNinNz7WB83h8ZVZQK5bd/rqTi0E
QGk6AIrCnhsb4p7drz9qVKRHh5fQ568LEFG56kIeQjZMY/q5NkQv5SIxbnEDiIpb
NrOjS/Df86FMVQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:52 2025 by rpki-client