Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
File: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft (raw, json)
Hash identifier: A1xGh2cDRqonjW70pyTqHkp6AIa3wd+RQw/tpzn56X4=
Subject key identifier: C1:BA:C5:92:F8:5A:46:FD:66:C1:84:58:99:26:E0:5D:86:15:C8:F7
Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
Certificate issuer: /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Certificate serial: 0197477965D3E73C24F2F0AD30BEBEB1918E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 23:00:27 +0000
Manifest this update: Fri 06 Jun 2025 23:00:27 +0000
Manifest next update: Sat 07 Jun 2025 23:00:27 +0000
Files and hashes: 1: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl (hash: xCqxOHE5dDUWkXUa+4ofu6JdZqL4iK9lhiMzdRcgDxo=)
2: fTo1f8ubRBwfU0xVoHHtzOApYuU.roa (hash: 6qDVE6eG6EbcIMXQ5M9bjDvf2Vx2WIt3k9ZSfVGTUr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:65:d3:e7:3c:24:f2:f0:ad:30:be:be:b1:91:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Validity
Not Before: Jun 6 23:00:27 2025 GMT
Not After : Jun 7 23:00:27 2025 GMT
Subject: CN=c1bac592f85a46fd66c184589926e05d8615c8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:35:38:b9:48:5a:92:18:d6:d3:30:ea:6c:
ea:b3:52:66:01:7b:7a:49:ec:b3:80:8d:5c:28:82:
a8:1e:62:af:9b:8e:7a:6f:65:1d:d1:71:ca:96:bf:
08:12:d9:54:3d:59:dc:55:34:4b:04:5e:5b:c8:1b:
79:40:ad:c9:50:6e:8f:e7:50:c7:70:d1:18:a9:6c:
b2:15:83:b4:be:c3:2e:f3:47:74:c9:20:12:2e:1e:
78:2e:bf:e6:be:1b:be:b1:ca:8e:d7:1e:41:9b:d8:
d3:22:7f:73:c7:eb:fa:2d:d7:58:18:bb:c4:e4:5e:
3b:a9:d0:28:c6:df:31:c1:84:3a:12:ed:37:65:1c:
60:46:33:d2:ad:ce:6b:09:5d:25:e8:9b:18:bf:0a:
0f:6a:6c:13:99:04:d2:89:2e:54:8b:fd:1b:df:1d:
76:f5:c9:50:74:d5:3a:f8:f8:fd:07:19:1b:a6:43:
fa:51:71:12:a4:c9:5a:4c:54:d5:22:20:95:4e:92:
a6:3b:ae:39:eb:cb:2f:29:a8:e3:67:46:35:5d:46:
2e:3a:c4:87:ff:a2:21:7b:95:b8:b8:98:2d:75:51:
bb:b4:40:c5:d3:03:ba:bb:3c:d8:b9:9d:06:c8:ed:
e3:06:7b:92:85:0a:e1:b2:87:7b:cd:dd:49:08:2c:
2a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BA:C5:92:F8:5A:46:FD:66:C1:84:58:99:26:E0:5D:86:15:C8:F7
X509v3 Authority Key Identifier:
keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:8c:c2:fb:c0:cb:58:f5:a6:e6:92:9c:68:fc:f8:bc:38:db:
8f:b5:da:23:e7:04:9a:46:f2:2b:1f:3c:d7:e8:bb:29:ea:0d:
95:0c:1d:06:5b:a7:1f:85:b8:a2:e2:4a:86:eb:ca:bf:ad:ff:
c7:d0:5d:d5:3f:6b:30:6e:8b:f4:ed:63:fc:6b:92:5c:e0:c9:
8b:b8:9f:87:89:68:a2:04:2d:f0:9e:5b:03:d9:c9:43:88:6b:
f2:79:a0:a8:fa:08:96:1d:ed:cf:46:75:e5:d4:02:d2:ab:73:
5e:d4:38:b8:a3:0b:19:ed:c5:db:6c:a4:97:fb:99:98:25:b3:
8a:ac:93:fd:72:ea:fe:cc:9f:e3:f6:05:8b:f7:ea:b4:b9:77:
b3:52:18:6d:c2:e8:d3:f5:0a:4e:bd:8b:aa:9b:50:81:ef:21:
c1:b7:85:07:1f:7c:49:2a:1d:d1:c9:6d:aa:e8:cf:18:bb:f0:
76:d1:29:71:52:17:36:56:a0:d3:ef:47:6b:bf:16:01:34:a2:
ef:f0:92:6a:e4:13:c9:40:5a:bd:34:5d:77:da:e9:6a:fa:4b:
e8:91:68:64:db:55:11:99:88:17:22:e6:94:f1:e1:22:3f:4e:
16:39:37:89:99:40:54:0c:4c:33:d0:d0:8e:54:9c:8d:0d:b6:
05:55:80:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHeWXT5zwk8vCtML6+sZGOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YmE5MWQ2MjY1MDRjY2JjNjRkODk3NDBiNjNjYjJlYjQy
MzRmNzAwHhcNMjUwNjA2MjMwMDI3WhcNMjUwNjA3MjMwMDI3WjAzMTEwLwYDVQQD
EyhjMWJhYzU5MmY4NWE0NmZkNjZjMTg0NTg5OTI2ZTA1ZDg2MTVjOGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr941OLlIWpIY1tMw6mzqs1JmAXt6
SeyzgI1cKIKoHmKvm456b2Ud0XHKlr8IEtlUPVncVTRLBF5byBt5QK3JUG6P51DH
cNEYqWyyFYO0vsMu80d0ySASLh54Lr/mvhu+scqO1x5Bm9jTIn9zx+v6LddYGLvE
5F47qdAoxt8xwYQ6Eu03ZRxgRjPSrc5rCV0l6JsYvwoPamwTmQTSiS5Ui/0b3x12
9clQdNU6+Pj9BxkbpkP6UXESpMlaTFTVIiCVTpKmO64568svKajjZ0Y1XUYuOsSH
/6Ihe5W4uJgtdVG7tEDF0wO6uzzYuZ0GyO3jBnuShQrhsod7zd1JCCwqtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMG6xZL4Wkb9ZsGEWJkm4F2GFcj3MB8GA1UdIwQY
MBaAFOS6kdYmUEzLxk2JdAtjyy60I09wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy84ODdlOTQtZWI5Ny00MTA5LTlkYTgt
Y2JmMThkMmQ2NmMzLzEvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy84ODdlOTQtZWI5Ny00MTA5LTlkYTgtY2JmMThkMmQ2NmMz
LzEvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmIzC+8DL
WPWm5pKcaPz4vDjbj7XaI+cEmkbyKx881+i7KeoNlQwdBlunH4W4ouJKhuvKv63/
x9Bd1T9rMG6L9O1j/GuSXODJi7ifh4loogQt8J5bA9nJQ4hr8nmgqPoIlh3tz0Z1
5dQC0qtzXtQ4uKMLGe3F22ykl/uZmCWziqyT/XLq/syf4/YFi/fqtLl3s1IYbcLo
0/UKTr2LqptQge8hwbeFBx98SSod0cltqujPGLvwdtEpcVIXNlag0+9Ha78WATSi
7/CSauQTyUBavTRdd9rpavpL6JFoZNtVEZmIFyLmlPHhIj9OFjk3iZlAVAxMM9DQ
jlScjQ22BVWAPw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:35:36 2025 by rpki-client