Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
File: 5_4i9VHpWw8VAzxQNVLkm8phfGo.mft (raw, json)
Hash identifier: loejpYqEgyWCqPgLXTL1xM3RIC/v0nEETLk9SPnxcA0=
Subject key identifier: 65:B5:E9:AB:1A:0F:C0:0C:7E:A6:74:07:9D:77:0B:1E:62:A3:19:7F
Authority key identifier: E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
Certificate issuer: /CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Certificate serial: 01974C9FB76A5EBEF14A441E473DA5A023AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
Manifest number: 01E7
Signing time: Sat 07 Jun 2025 23:00:24 +0000
Manifest this update: Sat 07 Jun 2025 23:00:24 +0000
Manifest next update: Sun 08 Jun 2025 23:00:24 +0000
Files and hashes: 1: 5_4i9VHpWw8VAzxQNVLkm8phfGo.crl (hash: ntzvGmmaD6fx4gwN5S48teqCP/QQrwpI6w3pRkTf3bY=)
2: THghgq3_4L1NVnK6KOFYexQq5SI.roa (hash: /zrwFkLWh9pajQgZXuExr20G8aRLgJD9APPdVLa4mp8=)
3: teYc1cFeqUuzMd-dJeyJRJ9jp-k.roa (hash: SD6wWRBAQPvJFZ63a4Ws+sFA/hBOJ/3xD8PJ20JClwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:b7:6a:5e:be:f1:4a:44:1e:47:3d:a5:a0:23:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Validity
Not Before: Jun 7 23:00:24 2025 GMT
Not After : Jun 8 23:00:24 2025 GMT
Subject: CN=65b5e9ab1a0fc00c7ea674079d770b1e62a3197f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:01:d3:91:95:89:1c:d1:84:0e:61:d6:79:
be:6f:96:09:aa:95:7a:e9:fc:ba:25:84:12:3c:a7:
62:e8:14:50:14:2c:28:06:20:a8:ca:59:10:a1:9e:
3c:b2:57:91:f1:e2:70:00:21:cf:da:21:6a:9f:48:
11:07:70:01:d5:0e:ec:77:2d:db:50:26:91:37:8b:
17:7b:1a:b9:bc:a0:cf:a6:2b:69:18:3d:d9:bc:b0:
d8:e7:05:e4:21:e1:0f:8c:9a:aa:0a:0c:19:fe:b4:
18:36:96:aa:d3:9c:f6:66:d8:bb:6f:82:16:ef:69:
28:42:b1:5a:f0:52:e5:26:9b:06:4a:b9:19:c3:82:
d5:fc:0e:68:11:a5:da:87:e4:bd:4b:79:d4:2f:25:
a8:ca:cf:c2:86:90:3f:ba:6f:77:17:49:c6:83:5c:
fa:3c:7c:d9:17:a4:03:34:e4:c3:7a:68:94:f1:8c:
f0:66:ba:a7:6e:83:94:b0:a0:ff:ad:5b:85:d5:94:
50:e3:dd:0e:51:11:d8:11:65:2c:fa:ac:72:77:78:
08:69:97:91:b1:bc:f6:76:3c:4a:c6:b6:8d:3a:7e:
e4:ae:0f:16:fc:1e:13:63:03:10:cd:19:f2:17:35:
86:3c:26:5e:4d:6d:9c:0b:3e:fc:a1:76:b5:7e:3f:
89:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B5:E9:AB:1A:0F:C0:0C:7E:A6:74:07:9D:77:0B:1E:62:A3:19:7F
X509v3 Authority Key Identifier:
keyid:E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:69:88:4e:33:fd:ec:c4:e7:88:f8:f8:11:7b:bd:98:e1:98:
40:49:50:ad:f3:2e:9e:60:4b:54:b8:d2:8c:ba:e8:7b:bf:b5:
23:6a:6a:ce:3e:61:3e:da:f2:ad:78:4e:af:50:c7:cf:50:d5:
cc:91:cb:3a:dd:3e:eb:b4:75:02:cf:b9:6c:9c:76:5e:97:86:
92:9f:79:60:aa:f3:59:81:8b:a2:d9:ca:62:8e:79:a9:5d:09:
70:22:db:cb:d8:31:55:57:d3:97:6d:9d:48:99:27:79:b3:81:
fa:77:9f:29:51:e8:32:58:53:eb:55:35:8e:af:cb:15:12:5d:
69:48:cb:da:55:65:ef:79:a2:72:c3:3f:15:05:57:61:2a:08:
fa:4e:64:50:41:05:15:1a:55:a9:1e:12:af:a3:e6:5e:83:82:
22:1b:f6:f3:1e:37:f4:3e:05:37:f3:72:91:51:99:eb:c1:87:
a9:9a:97:7d:ea:2f:c1:b5:de:78:fe:39:a0:e1:db:07:8b:e1:
16:15:66:12:b3:db:fe:3b:70:46:6c:a2:71:fb:6d:b1:ba:43:
37:0e:ab:4a:22:37:e3:e7:9a:e6:7f:33:88:8c:f4:e1:45:47:
70:f2:70:41:92:11:bf:44:b7:36:9c:b8:ad:98:1c:ee:42:b2:
9a:4f:df:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMn7dqXr7xSkQeRz2loCOqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmUyMmY1NTFlOTViMGYxNTAzM2M1MDM1NTJlNDliY2E2
MTdjNmEwHhcNMjUwNjA3MjMwMDI0WhcNMjUwNjA4MjMwMDI0WjAzMTEwLwYDVQQD
Eyg2NWI1ZTlhYjFhMGZjMDBjN2VhNjc0MDc5ZDc3MGIxZTYyYTMxOTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoewB05GViRzRhA5h1nm+b5YJqpV6
6fy6JYQSPKdi6BRQFCwoBiCoylkQoZ48sleR8eJwACHP2iFqn0gRB3AB1Q7sdy3b
UCaRN4sXexq5vKDPpitpGD3ZvLDY5wXkIeEPjJqqCgwZ/rQYNpaq05z2Zti7b4IW
72koQrFa8FLlJpsGSrkZw4LV/A5oEaXah+S9S3nULyWoys/ChpA/um93F0nGg1z6
PHzZF6QDNOTDemiU8YzwZrqnboOUsKD/rVuF1ZRQ490OURHYEWUs+qxyd3gIaZeR
sbz2djxKxraNOn7krg8W/B4TYwMQzRnyFzWGPCZeTW2cCz78oXa1fj+JkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGW16asaD8AMfqZ0B513Cx5ioxl/MB8GA1UdIwQY
MBaAFOf+IvVR6VsPFQM8UDVS5JvKYXxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kNjEyZTMtOTRlYi00ODY2LWI0M2Mt
ZTQwYjMwMTQwMWE5LzEvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9kNjEyZTMtOTRlYi00ODY2LWI0M2MtZTQwYjMwMTQwMWE5
LzEvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQmmITjP9
7MTniPj4EXu9mOGYQElQrfMunmBLVLjSjLroe7+1I2pqzj5hPtryrXhOr1DHz1DV
zJHLOt0+67R1As+5bJx2XpeGkp95YKrzWYGLotnKYo55qV0JcCLby9gxVVfTl22d
SJknebOB+nefKVHoMlhT61U1jq/LFRJdaUjL2lVl73micsM/FQVXYSoI+k5kUEEF
FRpVqR4Sr6PmXoOCIhv28x439D4FN/NykVGZ68GHqZqXfeovwbXeeP45oOHbB4vh
FhVmErPb/jtwRmyicfttsbpDNw6rSiI34+ea5n8ziIz04UVHcPJwQZIRv0S3Npy4
rZgc7kKymk/fqw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:40:36 2025 by rpki-client