Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
File: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft (raw, json)
Hash identifier: x3IQmBykHE/0FxhfUDXYykfbWFmm6d1xJ/vTZpgEk/Q=
Subject key identifier: AE:AC:13:70:0C:1F:AC:97:A3:BC:D8:A9:0B:73:06:F8:78:86:7B:37
Authority key identifier: E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
Certificate issuer: /CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Certificate serial: 0197B88EAD0702F321C3CB14C80257FC2EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
Manifest number: 07C5
Signing time: Sat 28 Jun 2025 22:00:47 +0000
Manifest this update: Sat 28 Jun 2025 22:00:47 +0000
Manifest next update: Sun 29 Jun 2025 22:00:47 +0000
Files and hashes: 1: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl (hash: GKzxd/JNLWS4iCRQyIPkXbNvzxBQnVqv0+qLlxgGD+A=)
2: GkuupBH0S6UfIOVBxWCowAfIXUM.roa (hash: 0Pa8It6a3TFSH6XKo+NzCtHNBkz88WRMk9KlV3Y4AVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:ad:07:02:f3:21:c3:cb:14:c8:02:57:fc:2e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Validity
Not Before: Jun 28 22:00:47 2025 GMT
Not After : Jun 29 22:00:47 2025 GMT
Subject: CN=aeac13700c1fac97a3bcd8a90b7306f878867b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a1:f1:b2:d8:1f:75:37:08:91:35:95:6c:6c:
f1:6e:4e:11:f9:53:aa:4f:01:03:73:2a:84:13:0c:
7d:f8:b1:a9:b4:fe:d7:cc:75:4e:58:39:42:bc:46:
f8:6b:78:90:57:25:7b:17:d0:e5:ba:53:1a:ab:b2:
03:a8:96:da:b6:b0:47:60:75:65:4a:ca:ea:b6:43:
23:9e:c3:27:02:e2:93:2f:e7:07:58:d4:6b:aa:70:
5d:51:17:48:f9:df:02:e5:b0:5b:20:bf:fd:de:ea:
b1:5b:b2:3f:1a:1b:29:62:a5:cb:92:dc:7f:1d:e7:
66:ec:52:88:3a:ad:28:3a:bb:58:34:4b:e6:98:37:
b6:30:69:06:80:f4:64:a0:db:15:a9:41:f7:4c:c8:
55:ec:ba:f8:f3:44:a8:2e:b2:43:46:0e:ed:13:31:
c5:6f:83:0c:c5:aa:dd:66:0a:6b:c8:6c:e0:aa:5f:
ea:3e:fb:e4:64:e3:c3:93:b0:86:d6:40:c3:e7:c5:
c2:3c:d8:59:1a:11:05:91:8c:0d:07:a3:20:85:f8:
9e:1f:e8:80:a2:c7:e1:01:2d:57:71:ae:6b:6e:8c:
29:fc:86:da:e3:2e:eb:5b:cc:19:52:91:88:ac:13:
58:0b:b0:b7:d5:32:e7:6b:09:2a:26:c7:51:75:09:
6c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AC:13:70:0C:1F:AC:97:A3:BC:D8:A9:0B:73:06:F8:78:86:7B:37
X509v3 Authority Key Identifier:
keyid:E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f2:fb:96:f0:9d:54:c0:c3:77:23:13:ea:44:64:8f:f1:a4:
3e:7c:97:3b:aa:24:09:b0:64:f6:55:bb:d0:dd:6c:ac:69:ac:
b2:c7:9e:47:c5:7e:09:4d:f3:12:e5:e6:2d:71:65:1b:7f:fd:
df:8c:fe:7b:6c:b4:09:f2:fe:c7:99:a3:23:ee:9e:42:0c:bb:
d7:19:25:c5:6d:e9:f3:a1:e2:72:f2:ad:e0:17:b3:e0:40:3d:
e2:b5:69:e7:02:e6:79:ff:e4:81:d5:4f:d7:56:5e:02:8b:5e:
26:c0:cf:54:ec:b5:6c:4c:a5:f6:bd:72:d0:3e:19:b7:bc:29:
bd:20:fc:cd:92:c3:7c:66:9d:f8:54:b5:b8:97:75:fd:85:c9:
6e:7e:3e:6b:89:59:90:e1:6d:ad:58:49:f1:02:37:27:bf:0b:
d8:1b:f8:48:8a:aa:75:f9:11:98:ad:40:0c:11:1f:86:f0:6b:
c5:2d:3e:16:d8:58:75:65:f3:b9:35:ce:e5:bf:ff:9c:7f:ac:
e6:e4:57:70:1b:33:9e:47:31:56:7f:a7:57:d9:ed:6f:4d:8e:
e8:f7:c5:14:2f:d2:20:d0:10:4a:e5:fa:a5:e1:cb:0c:60:89:
a9:5f:91:1c:13:7e:a5:70:1c:23:2c:5f:ba:fe:96:8e:d6:56:
da:24:51:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jq0HAvMhw8sUyAJX/C7xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YWFmNzZkMjdiYTgxMmUwZDVjZTIzMDVmMTdjNTMxODhj
MjU4MGMwHhcNMjUwNjI4MjIwMDQ3WhcNMjUwNjI5MjIwMDQ3WjAzMTEwLwYDVQQD
EyhhZWFjMTM3MDBjMWZhYzk3YTNiY2Q4YTkwYjczMDZmODc4ODY3YjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6HxstgfdTcIkTWVbGzxbk4R+VOq
TwEDcyqEEwx9+LGptP7XzHVOWDlCvEb4a3iQVyV7F9DlulMaq7IDqJbatrBHYHVl
SsrqtkMjnsMnAuKTL+cHWNRrqnBdURdI+d8C5bBbIL/93uqxW7I/GhspYqXLktx/
Hedm7FKIOq0oOrtYNEvmmDe2MGkGgPRkoNsVqUH3TMhV7Lr480SoLrJDRg7tEzHF
b4MMxardZgpryGzgql/qPvvkZOPDk7CG1kDD58XCPNhZGhEFkYwNB6MghfieH+iA
osfhAS1Xca5rbowp/Iba4y7rW8wZUpGIrBNYC7C31TLnawkqJsdRdQlsrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6sE3AMH6yXo7zYqQtzBvh4hns3MB8GA1UdIwQY
MBaAFOWq920nuoEuDVziMF8XxTGIwlgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFyM2JTZTZnUzROWE9Jd1h4ZkZNWWpDV0F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85ZjUyMjMtYTU2Yy00NjViLWFjNjUt
ZmQxNTJhNmEwNTg3LzEvNWFyM2JTZTZnUzROWE9Jd1h4ZkZNWWpDV0F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85ZjUyMjMtYTU2Yy00NjViLWFjNjUtZmQxNTJhNmEwNTg3
LzEvNWFyM2JTZTZnUzROWE9Jd1h4ZkZNWWpDV0F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/L7lvCd
VMDDdyMT6kRkj/GkPnyXO6okCbBk9lW70N1srGmssseeR8V+CU3zEuXmLXFlG3/9
34z+e2y0CfL+x5mjI+6eQgy71xklxW3p86HicvKt4Bez4EA94rVp5wLmef/kgdVP
11ZeAoteJsDPVOy1bEyl9r1y0D4Zt7wpvSD8zZLDfGad+FS1uJd1/YXJbn4+a4lZ
kOFtrVhJ8QI3J78L2Bv4SIqqdfkRmK1ADBEfhvBrxS0+FthYdWXzuTXO5b//nH+s
5uRXcBsznkcxVn+nV9ntb02O6PfFFC/SINAQSuX6peHLDGCJqV+RHBN+pXAcIyxf
uv6WjtZW2iRRWg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:02 2025 by rpki-client