Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
File: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft (raw, json)
Hash identifier: QmeNACM8xiczvynjd1tw1oJnVbHvhuPW231Nb50HiVw=
Subject key identifier: C0:03:00:01:0D:10:E8:D3:15:BE:D6:07:06:44:E7:10:79:1E:8E:9D
Authority key identifier: E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2
Certificate issuer: /CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
Certificate serial: 0197B8FD9C14D59F2C2E342D815A932AF83F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
Manifest number: 086C
Signing time: Sun 29 Jun 2025 00:01:57 +0000
Manifest this update: Sun 29 Jun 2025 00:01:57 +0000
Manifest next update: Mon 30 Jun 2025 00:01:57 +0000
Files and hashes: 1: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl (hash: UnmdyXNse9acAtYvZ2BCMWN4rsEcA/H4gGnIdiKt2iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:9c:14:d5:9f:2c:2e:34:2d:81:5a:93:2a:f8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
Validity
Not Before: Jun 29 00:01:57 2025 GMT
Not After : Jun 30 00:01:57 2025 GMT
Subject: CN=c00300010d10e8d315bed6070644e710791e8e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:27:55:b6:b3:7e:8c:a8:6f:d1:e8:10:10:d5:
d4:08:13:3e:52:ad:e6:ee:57:40:2c:50:5e:9e:fb:
f8:87:46:c9:c9:08:c0:2b:11:78:1c:34:1f:08:ad:
68:7d:4f:c4:78:19:61:9e:31:80:83:c1:c4:fb:e1:
2e:12:3b:c9:86:ad:00:a2:ad:0c:ef:22:33:7a:ac:
dd:df:70:76:a7:60:ca:58:e3:e8:12:ed:69:c9:90:
c9:f9:5e:77:af:9b:f7:e5:ba:40:00:a4:2c:f2:fb:
aa:5c:04:6e:f8:ab:c1:56:56:6f:7b:fd:bd:63:91:
eb:04:8b:8d:d5:27:84:6a:b0:e4:40:30:92:54:b1:
1c:76:d3:8d:b3:39:86:61:fd:e5:ba:03:09:e9:7e:
52:1e:08:60:01:b8:ee:37:ba:0d:66:e4:db:90:d5:
8c:2b:43:24:5e:3a:5b:a1:da:87:1b:c4:a2:6d:e8:
60:02:36:71:5a:b3:cd:9b:0f:4d:76:85:cc:03:87:
78:fd:ca:cf:17:20:b7:27:1a:72:5a:73:d7:38:d3:
50:39:94:60:77:d1:60:17:a5:a0:7e:2d:15:48:dc:
9f:a4:cd:b0:4d:a2:c1:93:8b:78:ff:0b:7e:c8:33:
87:20:f4:0b:04:9c:f3:2e:63:de:00:9a:21:61:f9:
ac:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:03:00:01:0D:10:E8:D3:15:BE:D6:07:06:44:E7:10:79:1E:8E:9D
X509v3 Authority Key Identifier:
keyid:E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b8:61:11:1d:3e:fc:4e:bc:91:38:04:88:a8:20:2f:fd:85:
4f:0b:e8:dc:9a:b2:68:1a:5b:a0:99:a0:bc:da:19:16:69:4e:
4a:ff:ee:97:cd:23:1c:da:b0:ad:c0:d8:f2:99:08:07:a7:10:
49:27:b9:b6:56:72:8f:a4:22:04:46:5e:3d:e4:ae:e5:00:1f:
3a:04:fa:f0:c8:ed:d4:d2:94:bb:47:40:1e:10:fb:d5:96:bf:
61:63:ae:5c:b4:90:0c:9f:47:82:2b:fd:cb:9b:b5:b2:f5:8f:
63:bf:1b:40:60:8b:90:c4:84:6c:b0:97:66:ee:32:b4:5f:aa:
33:5b:c6:ac:1b:62:11:fa:75:c4:40:84:be:b0:32:5b:11:ad:
0f:cd:99:3c:a0:2b:26:2a:b8:f2:0b:f5:31:46:c0:8f:74:4a:
7d:6e:6c:95:d0:5e:83:ef:0e:b8:79:d7:3d:2b:48:73:2c:2d:
6c:c9:97:43:4f:85:20:e6:7e:ea:6a:de:24:15:79:35:ba:14:
58:60:b0:07:66:78:60:30:f4:25:e4:f5:e4:d0:9e:25:e8:16:
34:94:3e:1c:07:6b:f3:d6:5a:8c:92:87:48:0a:ca:67:3e:6b:
59:40:c1:bf:f3:5c:28:7c:64:46:e5:4a:8e:f6:71:95:ef:05:
a3:27:2e:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4/ZwU1Z8sLjQtgVqTKvg/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZWQ3MmI0NmJlODZjNjU0ZDU4YzkzMDUxNGE1ZjQzYjRh
NDRlZTIwHhcNMjUwNjI5MDAwMTU3WhcNMjUwNjMwMDAwMTU3WjAzMTEwLwYDVQQD
EyhjMDAzMDAwMTBkMTBlOGQzMTViZWQ2MDcwNjQ0ZTcxMDc5MWU4ZTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSdVtrN+jKhv0egQENXUCBM+Uq3m
7ldALFBenvv4h0bJyQjAKxF4HDQfCK1ofU/EeBlhnjGAg8HE++EuEjvJhq0Aoq0M
7yIzeqzd33B2p2DKWOPoEu1pyZDJ+V53r5v35bpAAKQs8vuqXARu+KvBVlZve/29
Y5HrBIuN1SeEarDkQDCSVLEcdtONszmGYf3lugMJ6X5SHghgAbjuN7oNZuTbkNWM
K0MkXjpbodqHG8SibehgAjZxWrPNmw9NdoXMA4d4/crPFyC3JxpyWnPXONNQOZRg
d9FgF6Wgfi0VSNyfpM2wTaLBk4t4/wt+yDOHIPQLBJzzLmPeAJohYfms4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMADAAENEOjTFb7WBwZE5xB5Ho6dMB8GA1UdIwQY
MBaAFObtcrRr6GxlTVjJMFFKX0O0pE7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXUxeXRHdm9iR1ZOV01rd1VVcGZRN1NrVHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mOGM2NTctMmQ1ZS00NmM5LWJlYmMt
ZDg0MzJhMjc1M2ViLzEvNXUxeXRHdm9iR1ZOV01rd1VVcGZRN1NrVHVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9mOGM2NTctMmQ1ZS00NmM5LWJlYmMtZDg0MzJhMjc1M2Vi
LzEvNXUxeXRHdm9iR1ZOV01rd1VVcGZRN1NrVHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrhhER0+
/E68kTgEiKggL/2FTwvo3JqyaBpboJmgvNoZFmlOSv/ul80jHNqwrcDY8pkIB6cQ
SSe5tlZyj6QiBEZePeSu5QAfOgT68Mjt1NKUu0dAHhD71Za/YWOuXLSQDJ9Hgiv9
y5u1svWPY78bQGCLkMSEbLCXZu4ytF+qM1vGrBtiEfp1xECEvrAyWxGtD82ZPKAr
Jiq48gv1MUbAj3RKfW5sldBeg+8OuHnXPStIcywtbMmXQ0+FIOZ+6mreJBV5NboU
WGCwB2Z4YDD0JeT15NCeJegWNJQ+HAdr89ZajJKHSArKZz5rWUDBv/NcKHxkRuVK
jvZxle8FoycuCQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:48:25 2025 by rpki-client