Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
File: 5miK6WMjwfz6tUspRVc5e0mwO8c.mft (raw, json)
Hash identifier: EC6dQiEpa6WOhbQXW95uhHzCeyJ+jMSwCg4y+tyejQc=
Subject key identifier: 6F:53:86:35:D9:40:BE:49:8A:19:BC:90:C9:37:08:31:1C:88:29:DC
Authority key identifier: E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
Certificate issuer: /CN=e6688ae96323c1fcfab54b294557397b49b03bc7
Certificate serial: 01984BF81EA15AE4CA79D39D26148E49DA8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 13:00:08 +0000
Manifest this update: Sun 27 Jul 2025 13:00:08 +0000
Manifest next update: Mon 28 Jul 2025 13:00:08 +0000
Files and hashes: 1: 5miK6WMjwfz6tUspRVc5e0mwO8c.crl (hash: TbIToXj6l7r+XKfvMjq1axiWJkQgB+j5B9oMoTq//aA=)
2: 6d81q_lbBBvU-iMaj2PmLykzsqc.roa (hash: CeNeRZHxa3cGB4BlKcDCcgvych6z2Vt9p5goEzBLjMQ=)
3: RcUSQ0Z3GKFYWJ4WRE1UedcK5Aw.roa (hash: hdoD+wycfWRw3rbXWOc6rZDgH+1OEob47XUZHRAtJR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:f8:1e:a1:5a:e4:ca:79:d3:9d:26:14:8e:49:da:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6688ae96323c1fcfab54b294557397b49b03bc7
Validity
Not Before: Jul 27 13:00:08 2025 GMT
Not After : Jul 28 13:00:08 2025 GMT
Subject: CN=6f538635d940be498a19bc90c93708311c8829dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3f:f6:a8:67:e3:c9:11:69:90:ab:dc:9d:27:
72:5f:c0:3a:c8:0e:82:1d:8c:29:46:2d:0b:95:7c:
69:37:2e:a4:f1:8f:42:3a:47:87:4a:64:10:30:40:
7f:b6:55:d2:61:ed:a8:d3:e4:2e:50:85:39:95:50:
44:f4:4e:02:0f:6b:a7:4b:90:8b:42:f3:0c:11:62:
b6:0a:ed:f3:40:16:8c:ba:d5:25:3f:a4:4a:59:a7:
8d:ab:de:8b:f7:b4:8c:7b:ab:6e:99:75:cc:43:f4:
2f:13:0b:2e:cc:6f:46:06:5c:a8:48:9e:ce:1f:ce:
00:f8:38:df:ef:cf:0c:78:11:26:a0:f1:23:5a:e3:
37:89:24:c5:b6:ea:ed:d6:cc:6f:76:f6:c5:18:55:
ed:8c:c2:91:a0:74:63:08:16:30:b7:a4:54:04:80:
28:e2:35:0c:8d:1a:9d:d1:99:97:57:d8:b5:7a:84:
57:a2:a5:ee:a5:33:34:29:94:bf:d3:83:aa:9f:9d:
6d:e4:46:57:27:c0:ac:4d:c8:bd:23:bc:c2:f1:c5:
b8:89:26:f5:0d:2f:3c:53:74:cd:b2:81:82:01:8d:
35:c2:c0:f1:28:1b:15:13:85:cb:bd:9c:93:5a:34:
45:4e:72:97:79:2d:5b:20:13:96:24:f8:f8:e9:00:
4b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:53:86:35:D9:40:BE:49:8A:19:BC:90:C9:37:08:31:1C:88:29:DC
X509v3 Authority Key Identifier:
keyid:E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9f:59:15:7a:22:41:fa:81:f3:68:11:8a:63:56:c5:fd:77:
31:bb:79:9f:52:88:77:ce:1a:f8:cb:34:4d:67:ce:06:d5:47:
eb:ca:66:5b:ba:f8:35:53:29:a4:dc:c7:e7:cd:49:17:77:c5:
2b:a3:f2:e2:b5:1a:85:4f:69:e0:08:c9:8e:e2:fa:21:4d:73:
72:e5:f2:77:3d:9c:f0:8c:f9:a6:c7:d5:ad:7b:e6:92:a9:43:
9e:97:2f:2b:7a:93:bf:bf:81:aa:c6:03:e6:69:ae:be:b5:b5:
55:69:8a:86:8d:4b:e4:5e:0c:59:58:92:39:ef:58:82:12:b6:
7d:07:4a:0f:3e:f6:f6:55:1c:28:a3:bb:95:1a:6c:f3:76:bd:
f1:03:d3:d6:93:ea:33:a5:7c:de:07:83:57:d1:e8:ff:39:e4:
f2:01:73:9e:7d:47:67:50:ff:79:f9:3c:f7:57:46:d1:39:67:
bb:e0:23:43:31:b9:a9:88:14:6d:89:ae:9f:b2:49:f2:bf:d1:
93:7a:ea:17:48:53:dc:29:bb:97:a6:98:4c:81:9a:1f:0a:12:
91:1a:81:52:ef:5f:7b:44:f8:39:29:94:98:ef:ba:d8:7c:ef:
9c:29:1d:a0:a8:f5:55:a1:98:e2:f6:a1:ca:8b:98:0a:b7:28:
43:51:05:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhL+B6hWuTKedOdJhSOSdqOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2Njg4YWU5NjMyM2MxZmNmYWI1NGIyOTQ1NTczOTdiNDli
MDNiYzcwHhcNMjUwNzI3MTMwMDA4WhcNMjUwNzI4MTMwMDA4WjAzMTEwLwYDVQQD
Eyg2ZjUzODYzNWQ5NDBiZTQ5OGExOWJjOTBjOTM3MDgzMTFjODgyOWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5T/2qGfjyRFpkKvcnSdyX8A6yA6C
HYwpRi0LlXxpNy6k8Y9COkeHSmQQMEB/tlXSYe2o0+QuUIU5lVBE9E4CD2unS5CL
QvMMEWK2Cu3zQBaMutUlP6RKWaeNq96L97SMe6tumXXMQ/QvEwsuzG9GBlyoSJ7O
H84A+Djf788MeBEmoPEjWuM3iSTFturt1sxvdvbFGFXtjMKRoHRjCBYwt6RUBIAo
4jUMjRqd0ZmXV9i1eoRXoqXupTM0KZS/04Oqn51t5EZXJ8CsTci9I7zC8cW4iSb1
DS88U3TNsoGCAY01wsDxKBsVE4XLvZyTWjRFTnKXeS1bIBOWJPj46QBLswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9ThjXZQL5Jihm8kMk3CDEciCncMB8GA1UdIwQY
MBaAFOZoiuljI8H8+rVLKUVXOXtJsDvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW1pSzZXTWp3Zno2dFVzcFJWYzVlMG13TzhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jZTVjYTYtZjkzOS00ZmQ3LWI5Zjgt
MGExZWYwZWMwNTc4LzEvNW1pSzZXTWp3Zno2dFVzcFJWYzVlMG13TzhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9jZTVjYTYtZjkzOS00ZmQ3LWI5ZjgtMGExZWYwZWMwNTc4
LzEvNW1pSzZXTWp3Zno2dFVzcFJWYzVlMG13TzhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS59ZFXoi
QfqB82gRimNWxf13Mbt5n1KId84a+Ms0TWfOBtVH68pmW7r4NVMppNzH581JF3fF
K6Py4rUahU9p4AjJjuL6IU1zcuXydz2c8Iz5psfVrXvmkqlDnpcvK3qTv7+BqsYD
5mmuvrW1VWmKho1L5F4MWViSOe9YghK2fQdKDz729lUcKKO7lRps83a98QPT1pPq
M6V83geDV9Ho/znk8gFznn1HZ1D/efk891dG0Tlnu+AjQzG5qYgUbYmun7JJ8r/R
k3rqF0hT3Cm7l6aYTIGaHwoSkRqBUu9fe0T4OSmUmO+62HzvnCkdoKj1VaGY4vah
youYCrcoQ1EFgg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 14:41:01 2025 by rpki-client