Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft
File: 5O8X9MtP6SrQU-7yXznWOuEgfdM.mft (raw, json)
Hash identifier: 6Hrh8BTh1ZvdgdpYRlvEDiVNztzlekvpBXGXyT+voqc=
Subject key identifier: B6:6A:8C:EB:ED:A1:5A:27:B5:DE:15:21:BA:91:F6:6C:FD:46:34:6B
Authority key identifier: E4:EF:17:F4:CB:4F:E9:2A:D0:53:EE:F2:5F:39:D6:3A:E1:20:7D:D3
Certificate issuer: /CN=e4ef17f4cb4fe92ad053eef25f39d63ae1207dd3
Certificate serial: 019849650FD1205108EE05F46CA8D0541E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5O8X9MtP6SrQU-7yXznWOuEgfdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft
Manifest number: 0237
Signing time: Sun 27 Jul 2025 01:00:16 +0000
Manifest this update: Sun 27 Jul 2025 01:00:16 +0000
Manifest next update: Mon 28 Jul 2025 01:00:16 +0000
Files and hashes: 1: 5O8X9MtP6SrQU-7yXznWOuEgfdM.crl (hash: ITsb3F2I/IcJjJq7FbJAbEXmsH76/EEPKfIMSbeTczE=)
2: hkqw3W9-pdwewEMPwrQBPExOldQ.roa (hash: GNMEaQG7JI+6R+GxCRi11C7wb2KrqYyAM0elThFtbVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5O8X9MtP6SrQU-7yXznWOuEgfdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:0f:d1:20:51:08:ee:05:f4:6c:a8:d0:54:1e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ef17f4cb4fe92ad053eef25f39d63ae1207dd3
Validity
Not Before: Jul 27 01:00:16 2025 GMT
Not After : Jul 28 01:00:16 2025 GMT
Subject: CN=b66a8cebeda15a27b5de1521ba91f66cfd46346b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1f:93:c3:03:fb:58:59:d6:82:ab:96:da:f5:
09:20:00:d6:13:7e:34:12:c6:5c:ee:12:39:b1:73:
35:64:12:37:4a:c5:05:81:4c:4e:67:2f:5c:39:f7:
13:d6:2c:a5:11:9d:27:af:b0:e2:41:98:c9:a8:a6:
64:8a:f8:12:ea:81:2e:d0:80:21:fa:55:f9:57:43:
8b:b5:9b:58:2a:16:e9:c7:64:ac:b2:e2:c9:75:5c:
7a:85:43:88:17:21:9f:e6:07:8c:95:75:a4:de:cc:
08:60:34:b4:5c:f6:fd:1a:5f:2e:f3:e7:36:27:ec:
2f:f0:a6:67:10:23:d7:e5:c5:7f:36:94:c5:c8:f6:
bc:c3:a2:2e:e7:c9:7e:c7:02:cc:4f:f8:8a:81:12:
53:57:3f:d0:bb:c0:e4:21:09:d0:21:fb:f4:46:cd:
18:22:81:05:85:d2:52:d6:56:49:64:85:20:be:64:
04:4f:a5:e5:5a:ca:93:d3:46:60:6d:96:97:4b:eb:
2e:0e:7d:27:82:36:0d:8d:4a:98:2e:0e:93:cf:3d:
5e:19:1c:75:55:d4:13:4b:29:05:8f:9b:34:b5:3d:
64:18:ad:1f:a0:b3:30:00:7a:fb:b4:97:cc:e2:42:
91:86:5e:99:f4:30:8a:ec:60:81:92:e8:c2:1b:aa:
0c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6A:8C:EB:ED:A1:5A:27:B5:DE:15:21:BA:91:F6:6C:FD:46:34:6B
X509v3 Authority Key Identifier:
keyid:E4:EF:17:F4:CB:4F:E9:2A:D0:53:EE:F2:5F:39:D6:3A:E1:20:7D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5O8X9MtP6SrQU-7yXznWOuEgfdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:56:84:17:e5:12:9c:66:94:95:0c:f9:35:db:62:30:19:4b:
db:9e:eb:94:b6:da:14:5d:0c:4f:a5:61:63:81:f8:c0:a1:b2:
4a:69:6f:04:1b:db:8c:39:a4:7d:7e:2a:22:98:97:95:2e:44:
1e:b6:d3:5c:e2:be:4f:e4:92:19:c9:aa:ca:8d:96:8b:58:16:
61:db:0d:53:40:ae:0b:16:6b:24:20:a0:51:5d:92:c6:b9:ea:
7f:c0:8e:07:74:2b:50:d3:4b:57:c1:f8:7e:c9:36:e2:1e:2c:
83:30:1e:46:85:3a:44:bc:53:74:23:3e:bc:18:ca:1c:4d:b6:
71:7e:93:c8:88:d3:ca:29:e2:b7:55:a9:62:48:35:23:ab:4d:
1d:7b:7c:24:d8:fd:d6:dd:c6:03:14:58:21:99:31:3f:68:ee:
b6:0e:29:fd:f9:9b:da:69:f7:ee:15:4b:77:89:1d:a9:99:4f:
6c:98:b7:2f:85:ee:e3:26:b0:e9:49:b4:c7:95:57:b0:90:4f:
b4:0c:50:8f:00:fe:51:1e:9a:38:ab:89:d0:db:76:05:cd:e9:
de:eb:98:1d:b1:a7:bd:63:66:d4:85:fd:94:ab:59:52:93:b5:
4a:f3:2a:ef:95:20:46:59:f9:d6:aa:3f:65:1e:64:7a:0d:84:
c6:5d:e9:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZQ/RIFEI7gX0bKjQVB6WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZWYxN2Y0Y2I0ZmU5MmFkMDUzZWVmMjVmMzlkNjNhZTEy
MDdkZDMwHhcNMjUwNzI3MDEwMDE2WhcNMjUwNzI4MDEwMDE2WjAzMTEwLwYDVQQD
EyhiNjZhOGNlYmVkYTE1YTI3YjVkZTE1MjFiYTkxZjY2Y2ZkNDYzNDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR+TwwP7WFnWgquW2vUJIADWE340
EsZc7hI5sXM1ZBI3SsUFgUxOZy9cOfcT1iylEZ0nr7DiQZjJqKZkivgS6oEu0IAh
+lX5V0OLtZtYKhbpx2SssuLJdVx6hUOIFyGf5geMlXWk3swIYDS0XPb9Gl8u8+c2
J+wv8KZnECPX5cV/NpTFyPa8w6Iu58l+xwLMT/iKgRJTVz/Qu8DkIQnQIfv0Rs0Y
IoEFhdJS1lZJZIUgvmQET6XlWsqT00ZgbZaXS+suDn0ngjYNjUqYLg6Tzz1eGRx1
VdQTSykFj5s0tT1kGK0foLMwAHr7tJfM4kKRhl6Z9DCK7GCBkujCG6oMDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZqjOvtoVontd4VIbqR9mz9RjRrMB8GA1UdIwQY
MBaAFOTvF/TLT+kq0FPu8l851jrhIH3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU84WDlNdFA2U3JRVS03eVh6bldPdUVnZmRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xNTAzNTUtYzExYS00ZDM3LWExODIt
MjM3NjJhYTA5NzE3LzEvNU84WDlNdFA2U3JRVS03eVh6bldPdUVnZmRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8xNTAzNTUtYzExYS00ZDM3LWExODItMjM3NjJhYTA5NzE3
LzEvNU84WDlNdFA2U3JRVS03eVh6bldPdUVnZmRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVaEF+US
nGaUlQz5NdtiMBlL257rlLbaFF0MT6VhY4H4wKGySmlvBBvbjDmkfX4qIpiXlS5E
HrbTXOK+T+SSGcmqyo2Wi1gWYdsNU0CuCxZrJCCgUV2Sxrnqf8COB3QrUNNLV8H4
fsk24h4sgzAeRoU6RLxTdCM+vBjKHE22cX6TyIjTyinit1WpYkg1I6tNHXt8JNj9
1t3GAxRYIZkxP2jutg4p/fmb2mn37hVLd4kdqZlPbJi3L4Xu4yaw6Um0x5VXsJBP
tAxQjwD+UR6aOKuJ0Nt2Bc3p3uuYHbGnvWNm1IX9lKtZUpO1SvMq75UgRln51qo/
ZR5keg2Exl3pfg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 06:06:02 2025 by rpki-client