Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
File: 5LTFOvZfC4OWuVtNB9TsTnvid-U.mft (raw, json)
Hash identifier: 8gJEQ+nSqzGa8sOoydu7Fvm71uoFTwSyJ3X9HrA6anw=
Subject key identifier: 1D:94:FE:8D:D7:BA:F0:6E:AD:1A:D2:0C:C3:02:3B:0C:1E:CD:2F:DE
Authority key identifier: E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
Certificate issuer: /CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Certificate serial: 0197B88F5FCBF83560EBD8E49FC929B922AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 22:01:33 +0000
Manifest this update: Sat 28 Jun 2025 22:01:33 +0000
Manifest next update: Sun 29 Jun 2025 22:01:33 +0000
Files and hashes: 1: 5LTFOvZfC4OWuVtNB9TsTnvid-U.crl (hash: Fe4NJ8bXlfLxQSyGdZgVKNFyetWlZ/pK/8/bYx92XRs=)
2: HPP-Y8CcP39de0XZZOWjFIJ96v4.roa (hash: wqE/NVLKIIjuJJuVTQbIHrmfJEIIZJeODzcidgoveO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:5f:cb:f8:35:60:eb:d8:e4:9f:c9:29:b9:22:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Validity
Not Before: Jun 28 22:01:33 2025 GMT
Not After : Jun 29 22:01:33 2025 GMT
Subject: CN=1d94fe8dd7baf06ead1ad20cc3023b0c1ecd2fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:f8:bc:76:e2:7a:4d:6a:be:5f:f3:ab:35:
d4:ea:13:e6:25:ad:44:1e:f0:33:14:d2:20:22:c4:
e1:c0:98:04:55:50:47:3d:1e:d9:87:06:b8:d2:d4:
b9:8a:22:72:73:ef:cd:bb:9d:a5:77:d4:f5:93:73:
5b:d8:16:b0:8f:1d:3d:cd:29:fa:eb:db:54:86:5e:
85:62:6f:ed:81:fb:60:e7:fa:5e:3a:c5:88:28:74:
bd:5a:e9:32:7f:2e:d1:ab:76:c4:6c:13:71:b7:bb:
ca:63:80:18:24:a8:13:4d:be:f4:e7:69:00:28:47:
12:03:f7:3c:85:04:88:83:96:60:dd:c3:1e:32:97:
40:9f:f5:7b:04:9a:be:ba:6f:9f:e1:63:3a:ef:82:
de:aa:5e:ed:88:c8:6b:2d:8c:8b:d3:1e:33:1a:cc:
5e:12:22:a2:a6:00:81:c9:9b:83:71:e9:e1:c6:0b:
1a:8f:26:ea:6d:99:58:b8:62:82:c4:98:0b:e3:f5:
5c:2a:17:2b:04:7d:f5:81:a5:a5:75:9c:e7:61:6f:
90:f5:ed:e2:c5:86:76:48:88:1f:b9:8f:4d:22:4f:
4a:b0:4f:24:75:71:b8:46:91:d2:36:ba:d1:a6:0b:
d4:8e:cd:a3:05:74:9e:0f:9c:d0:60:f5:c1:76:b0:
b1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:94:FE:8D:D7:BA:F0:6E:AD:1A:D2:0C:C3:02:3B:0C:1E:CD:2F:DE
X509v3 Authority Key Identifier:
keyid:E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:89:15:e2:d8:b2:41:8b:ac:a3:c3:e4:a8:f3:83:29:de:6f:
28:89:49:0e:09:a9:57:16:63:fe:25:00:8c:5d:b2:85:85:0e:
36:60:83:1a:19:8f:20:54:ca:9d:12:41:4a:99:cb:d3:f7:4f:
89:a9:b2:54:53:7d:11:67:8f:9c:49:3a:04:6c:ea:42:f0:66:
d6:82:b4:67:f5:d6:0a:69:c4:0e:b2:fc:1d:c8:59:4f:42:6d:
3f:7f:32:77:b9:73:57:71:11:36:bd:f1:5c:45:88:d8:8e:f8:
0d:75:af:01:a7:9f:6a:85:bd:e7:92:43:bb:65:ff:24:0c:48:
64:57:63:43:2d:48:6d:ca:18:37:e3:d6:8a:ae:65:70:20:17:
ab:9b:4d:5c:4a:31:5e:0a:5c:7c:c2:6b:2b:8d:e9:dd:84:2a:
bc:0b:7c:5d:e7:38:ed:b1:9d:73:bf:31:34:45:d2:bb:55:32:
a2:7a:0c:4a:fc:9b:e8:c5:d6:6e:7f:41:9e:0d:ea:ed:1f:2b:
88:5b:7f:e3:c1:24:24:56:c1:74:83:8e:99:f7:4f:af:a0:bf:
4f:b2:43:24:8d:41:65:99:86:1b:17:2a:de:b4:ac:62:dc:4e:
b7:e3:62:3b:5a:16:45:54:a7:16:83:60:eb:30:16:69:6f:c4:
62:fc:d8:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j1/L+DVg69jkn8kpuSKuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YjRjNTNhZjY1ZjBiODM5NmI5NWI0ZDA3ZDRlYzRlN2Jl
Mjc3ZTUwHhcNMjUwNjI4MjIwMTMzWhcNMjUwNjI5MjIwMTMzWjAzMTEwLwYDVQQD
EygxZDk0ZmU4ZGQ3YmFmMDZlYWQxYWQyMGNjMzAyM2IwYzFlY2QyZmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi34vHbiek1qvl/zqzXU6hPmJa1E
HvAzFNIgIsThwJgEVVBHPR7Zhwa40tS5iiJyc+/Nu52ld9T1k3Nb2Bawjx09zSn6
69tUhl6FYm/tgftg5/peOsWIKHS9Wukyfy7Rq3bEbBNxt7vKY4AYJKgTTb7052kA
KEcSA/c8hQSIg5Zg3cMeMpdAn/V7BJq+um+f4WM674Leql7tiMhrLYyL0x4zGsxe
EiKipgCByZuDcenhxgsajybqbZlYuGKCxJgL4/VcKhcrBH31gaWldZznYW+Q9e3i
xYZ2SIgfuY9NIk9KsE8kdXG4RpHSNrrRpgvUjs2jBXSeD5zQYPXBdrCxKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2U/o3XuvBurRrSDMMCOwwezS/eMB8GA1UdIwQY
MBaAFOS0xTr2XwuDlrlbTQfU7E574nflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUxURk92WmZDNE9XdVZ0TkI5VHNUbnZpZC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80NmFhYmYtZGFkMC00ZDc2LWE1YjUt
ODhkYjAxMjVhNmI4LzEvNUxURk92WmZDNE9XdVZ0TkI5VHNUbnZpZC1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi80NmFhYmYtZGFkMC00ZDc2LWE1YjUtODhkYjAxMjVhNmI4
LzEvNUxURk92WmZDNE9XdVZ0TkI5VHNUbnZpZC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGokV4tiy
QYuso8PkqPODKd5vKIlJDgmpVxZj/iUAjF2yhYUONmCDGhmPIFTKnRJBSpnL0/dP
iamyVFN9EWePnEk6BGzqQvBm1oK0Z/XWCmnEDrL8HchZT0JtP38yd7lzV3ERNr3x
XEWI2I74DXWvAaefaoW955JDu2X/JAxIZFdjQy1IbcoYN+PWiq5lcCAXq5tNXEox
XgpcfMJrK43p3YQqvAt8Xec47bGdc78xNEXSu1UyonoMSvyb6MXWbn9Bng3q7R8r
iFt/48EkJFbBdIOOmfdPr6C/T7JDJI1BZZmGGxcq3rSsYtxOt+NiO1oWRVSnFoNg
6zAWaW/EYvzYug==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:41 2025 by rpki-client