Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
File: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft (raw, json)
Hash identifier: CgvA5P8XHL7rgXgrCbxzQ2n6p7yXxSuALqplZPj3vyY=
Subject key identifier: 57:10:91:72:47:E4:ED:C2:C9:C0:1A:F5:14:21:19:44:13:28:25:29
Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Certificate serial: 019749D5E1A0F2E661E61CD2655C87720CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
Manifest number: 09ED
Signing time: Sat 07 Jun 2025 10:00:43 +0000
Manifest this update: Sat 07 Jun 2025 10:00:43 +0000
Manifest next update: Sun 08 Jun 2025 10:00:43 +0000
Files and hashes: 1: 0fMiJFl550osRSOwJ53RLThidmY.roa (hash: 62Jum/5Ter4OZqqvtTzk7nbCXv0FL6G77xoVhVQlYjw=)
2: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl (hash: zYGE0lpBDFqPqr9vMAZ+IHK6NK40gmhlHppKCSUDuFY=)
3: L9pi3nyxzTSejNrNKTLFupEkeKc.roa (hash: KRhXEXpB0ZgWCnBzMsYjo3MIerLmYQGo8A6sCf5dI54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:e1:a0:f2:e6:61:e6:1c:d2:65:5c:87:72:0c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Validity
Not Before: Jun 7 10:00:43 2025 GMT
Not After : Jun 8 10:00:43 2025 GMT
Subject: CN=5710917247e4edc2c9c01af51421194413282529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:88:25:e8:01:49:ea:ae:1b:32:fe:39:5c:2e:
73:e1:5f:7e:c5:cb:ec:2d:f9:1e:93:ab:a3:59:e4:
4f:81:6c:21:dd:1e:34:9d:35:e6:2e:00:5e:3d:b4:
e0:da:5d:5e:f2:0f:01:e4:27:a5:b8:57:31:f2:0e:
d9:da:0e:6f:7a:bb:26:47:fc:1b:92:d2:b1:a6:be:
55:85:50:ae:6f:a2:98:e5:c9:11:bd:34:26:fc:5b:
34:82:a6:8e:1a:34:12:73:17:26:ec:1b:44:97:d1:
e2:89:c0:c7:32:be:62:db:90:a1:1a:91:ec:47:a0:
1e:b0:d6:27:9e:fb:db:fa:ec:27:0d:01:00:e0:4f:
7b:59:ed:96:3f:69:ff:ca:97:47:d9:4e:15:26:e5:
62:35:ee:d4:56:0c:d4:a6:f5:c4:ed:d1:90:c7:de:
1d:86:5a:86:fb:22:a9:27:a2:67:16:4c:99:c1:16:
d9:54:ae:95:66:48:f8:ad:20:75:05:10:c2:56:74:
f0:be:c1:c8:01:53:aa:5e:57:05:0a:a1:f2:64:1a:
2e:40:35:44:58:8a:e7:b2:45:67:3b:86:2f:76:ba:
82:2f:d9:cf:6f:33:c3:a9:32:57:70:53:fa:86:98:
db:29:f8:30:f1:34:53:79:b9:ae:11:6f:46:f3:76:
6c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:10:91:72:47:E4:ED:C2:C9:C0:1A:F5:14:21:19:44:13:28:25:29
X509v3 Authority Key Identifier:
keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:cf:9e:a0:48:c3:0a:f0:29:02:b7:f4:9f:73:18:d4:2c:98:
9d:67:4f:8e:58:77:6b:4e:55:7e:a0:2a:ce:75:98:d8:94:4f:
fd:b9:33:e6:79:78:9b:c7:cd:c8:af:ce:9f:b6:88:00:c0:9d:
5d:cb:63:b3:65:06:fd:d1:25:3b:8c:4f:50:9f:53:b3:b0:af:
eb:66:d2:6b:c1:2a:68:3a:21:32:d3:4b:f5:f6:04:e7:01:3a:
60:2b:2b:66:a5:71:d8:e0:da:0a:12:c2:44:0e:09:27:5e:f4:
04:c3:86:8a:3b:31:0f:dd:96:fc:88:45:c1:7c:67:7f:c4:33:
e4:04:2b:3a:e5:86:0e:44:fc:2b:1a:86:c4:61:8b:29:04:e1:
a2:34:4f:38:21:2c:9f:60:8b:12:84:9a:4a:08:89:05:fb:8e:
46:fc:e0:b3:20:32:ab:72:ee:5a:27:9c:bb:da:60:7d:68:97:
00:9f:74:16:c1:90:2a:5d:0f:94:e1:c4:9e:0c:02:e6:78:3f:
8b:be:f6:1a:80:0b:f6:d3:6a:7c:c3:f7:ab:0e:ea:a6:57:fe:
7b:e1:79:27:88:a2:4b:5c:89:5f:9d:c3:aa:bc:db:47:bb:34:
3e:5e:78:e1:b8:33:11:41:01:db:c7:32:f4:a8:86:81:0b:d4:
a9:78:0a:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1eGg8uZh5hzSZVyHcgzYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YzM0MGVlNWI5ZGFmMWE2ODE4ZjBkZjQwN2ZhNTk3NTg4
NmIxMGYwHhcNMjUwNjA3MTAwMDQzWhcNMjUwNjA4MTAwMDQzWjAzMTEwLwYDVQQD
Eyg1NzEwOTE3MjQ3ZTRlZGMyYzljMDFhZjUxNDIxMTk0NDEzMjgyNTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ygl6AFJ6q4bMv45XC5z4V9+xcvs
Lfkek6ujWeRPgWwh3R40nTXmLgBePbTg2l1e8g8B5CeluFcx8g7Z2g5versmR/wb
ktKxpr5VhVCub6KY5ckRvTQm/Fs0gqaOGjQScxcm7BtEl9HiicDHMr5i25ChGpHs
R6AesNYnnvvb+uwnDQEA4E97We2WP2n/ypdH2U4VJuViNe7UVgzUpvXE7dGQx94d
hlqG+yKpJ6JnFkyZwRbZVK6VZkj4rSB1BRDCVnTwvsHIAVOqXlcFCqHyZBouQDVE
WIrnskVnO4YvdrqCL9nPbzPDqTJXcFP6hpjbKfgw8TRTebmuEW9G83ZswwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcQkXJH5O3CycAa9RQhGUQTKCUpMB8GA1UdIwQY
MBaAFOXDQO5bna8aaBjw30B/pZdYhrEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kNTEwNGMtZjY0YS00NGNhLWEzN2It
NmUxZjJmNjg1MWNmLzEvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9kNTEwNGMtZjY0YS00NGNhLWEzN2ItNmUxZjJmNjg1MWNm
LzEvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdM+eoEjD
CvApArf0n3MY1CyYnWdPjlh3a05VfqAqznWY2JRP/bkz5nl4m8fNyK/On7aIAMCd
Xctjs2UG/dElO4xPUJ9Ts7Cv62bSa8EqaDohMtNL9fYE5wE6YCsrZqVx2ODaChLC
RA4JJ170BMOGijsxD92W/IhFwXxnf8Qz5AQrOuWGDkT8KxqGxGGLKQThojRPOCEs
n2CLEoSaSgiJBfuORvzgsyAyq3LuWiecu9pgfWiXAJ90FsGQKl0PlOHEngwC5ng/
i772GoAL9tNqfMP3qw7qplf+e+F5J4iiS1yJX53DqrzbR7s0Pl544bgzEUEB28cy
9KiGgQvUqXgK+g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:52:58 2025 by rpki-client