Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier: 8Z4pG7RCpf8uHxmdWt9l13bnas8oLXthAMPT51ECgNE=
Subject key identifier: 23:D5:1B:0C:8C:59:FB:08:E1:41:56:77:55:E2:02:B2:D2:FE:12:E2
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 019747426D5BD366C03AB95218E8AD9A8A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number: 127F
Signing time: Fri 06 Jun 2025 22:00:24 +0000
Manifest this update: Fri 06 Jun 2025 22:00:24 +0000
Manifest next update: Sat 07 Jun 2025 22:00:24 +0000
Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: hJ96aMJdYsRlY0f33x9OEfi7MEjrpzE2n0gZU2Y9Tro=)
2: JLTWHRuvioIZeiPuQHITq0nguEU.roa (hash: bk5yHjHsl6C1xvyULuJt1KQ0iqgopaEeKAR0yVznkzo=)
3: plwZ9l0lVtWa8erZq6nE-HfiL5Y.roa (hash: pvnWu+3SngeR8hyMQVNUkiZf5MAZJKgs78KtEduSXvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:6d:5b:d3:66:c0:3a:b9:52:18:e8:ad:9a:8a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: Jun 6 22:00:24 2025 GMT
Not After : Jun 7 22:00:24 2025 GMT
Subject: CN=23d51b0c8c59fb08e141567755e202b2d2fe12e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b6:61:26:b2:96:a9:0a:0c:21:37:dd:5b:35:
70:c5:68:8a:92:a7:19:15:ca:a8:8b:6a:36:3f:72:
d4:85:cb:71:cc:ac:cc:1e:aa:81:6b:1d:42:4b:19:
df:bb:3c:5f:ac:c1:06:6c:81:fe:5c:a9:55:12:a0:
15:09:95:8a:d5:ec:70:87:8b:2c:d0:23:3d:ec:1f:
ee:e6:31:2d:7c:13:34:ae:d1:7f:c9:c4:59:54:9d:
86:ea:1c:e4:bb:00:f5:6b:dc:e9:37:00:cc:ff:50:
57:86:6e:c0:5a:2d:46:19:29:90:62:2c:e1:90:5a:
aa:5d:fb:1e:b3:39:68:b7:27:81:10:b3:08:dc:71:
70:58:8c:dd:97:d5:82:2c:8c:a2:68:5c:e2:c0:a4:
7c:9c:93:da:08:b7:93:b7:e0:1e:f7:bb:4a:ce:d1:
03:64:74:4a:3d:22:65:13:f6:96:cb:6d:39:1a:81:
48:94:1d:36:fd:09:c1:0c:61:37:3d:1e:af:75:bf:
c2:3f:56:4b:a7:f1:bc:2a:e5:9b:6c:82:b2:4f:d3:
61:7a:57:e4:cc:99:57:81:7a:b2:60:c5:fd:5a:b7:
f9:c5:e3:ee:81:7b:e7:97:81:d8:20:63:a3:7d:4d:
16:46:6b:87:ec:b2:5a:e8:29:f7:20:fb:0c:7b:6c:
2e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D5:1B:0C:8C:59:FB:08:E1:41:56:77:55:E2:02:B2:D2:FE:12:E2
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:97:9a:06:6d:f4:3c:26:3d:2b:20:3e:2f:d1:33:f5:69:7a:
56:ca:70:26:f6:8e:12:65:ee:ed:32:71:54:eb:93:78:c1:fa:
24:b4:f5:35:58:8f:f8:c9:e3:b7:5a:c1:4d:a0:ea:d4:e2:ce:
73:74:12:c8:de:d7:c2:1a:bb:3a:81:98:14:7a:00:52:53:50:
c5:f6:ad:e6:d9:8f:89:dd:19:db:28:63:99:cd:3d:0d:8e:5a:
62:96:5f:99:93:82:93:86:8a:7f:eb:4e:f8:e8:1b:e4:f2:93:
0b:44:9a:48:63:82:73:7f:52:ee:ca:75:c1:5a:93:38:40:84:
49:65:5d:f6:10:00:f8:b7:f1:03:b2:c1:1a:8e:e9:47:f2:8f:
27:2e:ae:12:50:26:ac:e3:04:be:43:0d:68:e9:90:84:8f:55:
9d:4b:88:2d:ee:ec:e8:39:e6:61:11:9d:7d:bd:e6:65:b8:4e:
01:ed:9b:78:00:1a:9f:8e:ca:a4:ab:0a:69:2b:26:67:93:65:
99:ff:67:de:03:8f:c0:5c:c5:06:be:f3:ff:c9:9e:c8:f8:c0:
ce:b4:8b:08:01:06:d6:b0:5e:20:bb:a2:52:98:f1:58:1d:aa:
e0:4a:6b:b1:6d:94:6b:c6:2a:76:ae:bb:95:b5:2d:61:e1:b6:
93:65:d5:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQm1b02bAOrlSGOitmopNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZWU1ZTcxNDA5YjIxZmQ1YzgyMGYzZDNhYzNmZGMwZmNl
NzVhMGIwHhcNMjUwNjA2MjIwMDI0WhcNMjUwNjA3MjIwMDI0WjAzMTEwLwYDVQQD
EygyM2Q1MWIwYzhjNTlmYjA4ZTE0MTU2Nzc1NWUyMDJiMmQyZmUxMmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rZhJrKWqQoMITfdWzVwxWiKkqcZ
Fcqoi2o2P3LUhctxzKzMHqqBax1CSxnfuzxfrMEGbIH+XKlVEqAVCZWK1exwh4ss
0CM97B/u5jEtfBM0rtF/ycRZVJ2G6hzkuwD1a9zpNwDM/1BXhm7AWi1GGSmQYizh
kFqqXfseszlotyeBELMI3HFwWIzdl9WCLIyiaFziwKR8nJPaCLeTt+Ae97tKztED
ZHRKPSJlE/aWy205GoFIlB02/QnBDGE3PR6vdb/CP1ZLp/G8KuWbbIKyT9Nhelfk
zJlXgXqyYMX9Wrf5xePugXvnl4HYIGOjfU0WRmuH7LJa6Cn3IPsMe2wuCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPVGwyMWfsI4UFWd1XiArLS/hLiMB8GA1UdIwQY
MBaAFCPuXnFAmyH9XIIPPTrD/cD851oLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNGI5M2MtYTAzZC00YWRhLTgzZmMt
YmM2MzdhODUxMmIxLzEvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zNGI5M2MtYTAzZC00YWRhLTgzZmMtYmM2MzdhODUxMmIx
LzEvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5eaBm30
PCY9KyA+L9Ez9Wl6VspwJvaOEmXu7TJxVOuTeMH6JLT1NViP+Mnjt1rBTaDq1OLO
c3QSyN7Xwhq7OoGYFHoAUlNQxfat5tmPid0Z2yhjmc09DY5aYpZfmZOCk4aKf+tO
+Ogb5PKTC0SaSGOCc39S7sp1wVqTOECESWVd9hAA+LfxA7LBGo7pR/KPJy6uElAm
rOMEvkMNaOmQhI9VnUuILe7s6DnmYRGdfb3mZbhOAe2beAAan47KpKsKaSsmZ5Nl
mf9n3gOPwFzFBr7z/8meyPjAzrSLCAEG1rBeILuiUpjxWB2q4EprsW2Ua8Yqdq67
lbUtYeG2k2XV6g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:14 2025 by rpki-client