Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
File: 5-QyokmU5XnrJJmh9vNMZSEY40Q.mft (raw, json)
Hash identifier: 6QANfBY5I+vCNsHIqGE/HC/RJtvZbtDzwBhftBX0Lu8=
Subject key identifier: E5:F3:81:E4:80:AA:AC:8D:D1:1E:0E:10:CF:DB:BB:A9:67:19:1F:A2
Authority key identifier: E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
Certificate issuer: /CN=e7e432a24994e579eb2499a1f6f34c652118e344
Certificate serial: 0197488C12B59B33E6A996B3A162A9A24E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
Manifest number: 150F
Signing time: Sat 07 Jun 2025 04:00:28 +0000
Manifest this update: Sat 07 Jun 2025 04:00:28 +0000
Manifest next update: Sun 08 Jun 2025 04:00:28 +0000
Files and hashes: 1: 1ap-zhjP2xlpcyvljzd4At-hRqs.roa (hash: vy++CPahIzqV0ojk71CI64hyqugiBwjMnM2TKCrxcDM=)
2: 5-QyokmU5XnrJJmh9vNMZSEY40Q.crl (hash: v09wuv1HCOZnVGSKG+uRz2a+fvDL9O5YYzriqHxRrJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:12:b5:9b:33:e6:a9:96:b3:a1:62:a9:a2:4e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e432a24994e579eb2499a1f6f34c652118e344
Validity
Not Before: Jun 7 04:00:28 2025 GMT
Not After : Jun 8 04:00:28 2025 GMT
Subject: CN=e5f381e480aaac8dd11e0e10cfdbbba967191fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f3:cc:2d:6f:fb:aa:c5:0d:57:9f:4d:c0:e2:
06:17:65:8d:09:90:3a:98:84:23:86:27:9f:e2:50:
2a:7d:a9:23:d7:e7:77:22:f7:e0:5c:ca:01:ee:a1:
7b:0b:56:95:e1:93:76:e2:22:35:7d:6c:9a:eb:6a:
d3:41:53:ca:e4:92:ed:2a:41:78:a2:15:4e:da:24:
df:29:d0:d1:ea:d1:e0:e1:8f:5b:b6:07:05:70:f2:
bf:e6:59:24:c5:d3:b3:16:cd:83:f9:9f:c0:1d:d0:
bf:19:ad:c5:ff:bf:13:0a:03:16:36:0f:6c:43:39:
6d:4c:31:0e:ae:27:81:47:c3:e2:4f:17:0e:2d:51:
93:f5:1c:e1:b4:6b:6e:11:28:4a:8c:ce:bf:3f:e0:
e5:69:84:ab:14:22:72:5e:ad:34:50:6f:60:63:6b:
10:34:3a:db:3c:ab:18:6c:9f:a5:be:55:87:b1:c0:
fa:2f:b0:82:04:61:77:e9:39:60:0c:7f:d7:47:a7:
11:6b:ae:ff:ea:92:31:f0:73:41:00:1f:76:43:6a:
0e:9b:7c:88:10:a7:0e:43:24:46:d8:51:44:c6:25:
bb:da:27:d5:2b:25:2c:e2:ac:25:d2:79:08:94:18:
7e:ea:24:5b:40:f4:60:38:63:4c:40:93:0c:79:4a:
f5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F3:81:E4:80:AA:AC:8D:D1:1E:0E:10:CF:DB:BB:A9:67:19:1F:A2
X509v3 Authority Key Identifier:
keyid:E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6a:be:28:82:2b:db:51:1a:19:cb:e3:d1:f4:10:bf:35:c9:
3a:c0:39:48:31:1b:2f:54:ec:e7:cb:59:78:20:a9:33:b7:46:
aa:32:17:2f:5d:31:07:03:87:e5:e4:f2:1d:2d:0f:02:9d:42:
13:ac:04:21:b2:62:d7:cf:d0:ce:de:1f:76:e6:61:5d:18:2e:
01:f5:ce:fb:e9:47:b8:42:e9:95:c1:81:e1:95:fc:20:7d:4e:
c5:1c:d1:2c:04:73:11:ba:98:de:d2:e2:1d:57:d5:7f:31:52:
bc:5c:a5:d4:a5:55:70:fa:32:be:1b:00:51:ec:6e:47:16:af:
58:f1:94:1e:b0:0a:c8:7d:97:b2:41:10:a1:9c:ca:ae:af:e5:
23:09:b1:2f:9c:dd:f8:0c:78:a0:64:22:9c:59:99:b4:81:e7:
56:cc:bc:17:44:64:f1:f8:51:73:fe:2c:03:93:bf:ad:f1:99:
8e:f8:19:f1:1d:04:90:35:a0:1f:9f:51:35:c2:70:0b:bb:23:
f8:b5:ef:46:f4:dd:dc:03:6d:55:cb:f0:bb:52:d4:24:3a:9e:
5c:07:8e:db:6b:a4:bf:30:c5:a3:b9:06:15:86:97:c7:a1:21:
7d:64:fd:25:12:b1:4d:7b:44:1f:f8:c7:3d:f0:b2:07:4b:67:
91:b0:20:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjBK1mzPmqZazoWKpok4TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZTQzMmEyNDk5NGU1NzllYjI0OTlhMWY2ZjM0YzY1MjEx
OGUzNDQwHhcNMjUwNjA3MDQwMDI4WhcNMjUwNjA4MDQwMDI4WjAzMTEwLwYDVQQD
EyhlNWYzODFlNDgwYWFhYzhkZDExZTBlMTBjZmRiYmJhOTY3MTkxZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPPMLW/7qsUNV59NwOIGF2WNCZA6
mIQjhief4lAqfakj1+d3IvfgXMoB7qF7C1aV4ZN24iI1fWya62rTQVPK5JLtKkF4
ohVO2iTfKdDR6tHg4Y9btgcFcPK/5lkkxdOzFs2D+Z/AHdC/Ga3F/78TCgMWNg9s
QzltTDEOrieBR8PiTxcOLVGT9RzhtGtuEShKjM6/P+DlaYSrFCJyXq00UG9gY2sQ
NDrbPKsYbJ+lvlWHscD6L7CCBGF36TlgDH/XR6cRa67/6pIx8HNBAB92Q2oOm3yI
EKcOQyRG2FFExiW72ifVKyUs4qwl0nkIlBh+6iRbQPRgOGNMQJMMeUr1fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXzgeSAqqyN0R4OEM/bu6lnGR+iMB8GA1UdIwQY
MBaAFOfkMqJJlOV56ySZofbzTGUhGONEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wNjNlYmUtNjdmMC00MGU5LWJiZmYt
YTQwOWNhMzdhM2VhLzEvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wNjNlYmUtNjdmMC00MGU5LWJiZmYtYTQwOWNhMzdhM2Vh
LzEvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2q+KIIr
21EaGcvj0fQQvzXJOsA5SDEbL1Ts58tZeCCpM7dGqjIXL10xBwOH5eTyHS0PAp1C
E6wEIbJi18/Qzt4fduZhXRguAfXO++lHuELplcGB4ZX8IH1OxRzRLARzEbqY3tLi
HVfVfzFSvFyl1KVVcPoyvhsAUexuRxavWPGUHrAKyH2XskEQoZzKrq/lIwmxL5zd
+Ax4oGQinFmZtIHnVsy8F0Rk8fhRc/4sA5O/rfGZjvgZ8R0EkDWgH59RNcJwC7sj
+LXvRvTd3ANtVcvwu1LUJDqeXAeO22ukvzDFo7kGFYaXx6EhfWT9JRKxTXtEH/jH
PfCyB0tnkbAgnA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:47:42 2025 by rpki-client