Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
File: 5z_jNRpeYmSh-BKcECUdnolugGI.mft (raw, json)
Hash identifier: L6g2WKhazlxjl3T3YDZxrXAyd9di4RV8VTOsGs93Ek0=
Subject key identifier: 88:C1:34:72:95:8F:5A:DB:71:6F:2C:4D:21:9D:CF:EF:50:C2:F2:CF
Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
Certificate issuer: /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Certificate serial: 0197493120A58F42763B7076CC81D10E0874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
Manifest number: 1578
Signing time: Sat 07 Jun 2025 07:00:45 +0000
Manifest this update: Sat 07 Jun 2025 07:00:45 +0000
Manifest next update: Sun 08 Jun 2025 07:00:45 +0000
Files and hashes: 1: 5z_jNRpeYmSh-BKcECUdnolugGI.crl (hash: 2aZFDx8s9boaskedD6awz6CShFYt8GVt5RihFf3WNOw=)
2: mjZQqpBxq3tzElUxwYWj6w8CYqw.roa (hash: xWY5CwFTzA7VILUdMDaL5WQ8VyRltqo8AcwsKQ6Bk2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:20:a5:8f:42:76:3b:70:76:cc:81:d1:0e:08:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Validity
Not Before: Jun 7 07:00:45 2025 GMT
Not After : Jun 8 07:00:45 2025 GMT
Subject: CN=88c13472958f5adb716f2c4d219dcfef50c2f2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b8:db:da:a6:8e:4f:6d:1d:44:db:a5:25:61:
b0:2e:30:e3:e6:bc:c9:ff:39:66:d8:f5:11:30:06:
35:44:42:28:66:ac:e1:0a:74:71:67:d3:a0:ac:75:
a7:4c:a9:0f:8f:83:10:c0:94:a4:59:40:35:0e:15:
06:45:9f:5e:e2:e8:b6:3b:37:9c:a3:74:c8:47:6a:
31:e1:0a:0f:e5:e7:21:58:46:51:a0:e6:03:77:8d:
83:26:0d:8d:4a:76:9e:c8:b4:b4:fb:c9:2b:82:ab:
ed:36:15:b6:26:7e:30:e0:08:67:a9:f1:fc:d8:bd:
cc:43:34:9f:52:e7:7e:c0:53:54:14:a4:7d:55:88:
04:b4:60:31:5c:ac:2b:dd:d3:55:65:cb:f7:66:49:
69:c3:e6:68:f8:f2:68:93:35:67:e9:aa:0a:32:f8:
3d:c7:01:93:67:4e:d0:a5:34:ef:22:50:f5:dc:25:
7d:e4:e9:0c:b4:1f:e6:7a:95:61:c6:53:2d:22:fb:
e9:56:d9:b6:87:88:48:2e:99:f5:2d:ec:f2:a7:42:
47:58:3e:43:9b:44:62:2c:bf:0c:65:f0:11:90:53:
ae:7a:87:31:3e:2a:f4:38:5b:3e:44:a8:2c:23:4a:
21:14:32:88:2a:10:8c:21:8a:06:f8:b6:11:ea:fd:
c9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C1:34:72:95:8F:5A:DB:71:6F:2C:4D:21:9D:CF:EF:50:C2:F2:CF
X509v3 Authority Key Identifier:
keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:04:59:ff:f1:8f:26:71:91:c8:49:14:16:1a:52:a9:f3:2e:
b6:cf:38:b4:5b:fc:f1:4f:49:2c:8a:c0:e7:96:64:56:27:5a:
e8:ba:a5:ea:17:d7:8c:9a:68:db:3a:61:cb:8a:7f:8e:20:5d:
33:9a:65:ed:75:5b:94:a1:da:5b:6c:fd:4f:cc:fe:eb:fe:5e:
90:e5:8b:df:2d:8c:1a:7a:63:e1:6d:c1:a5:ba:cc:95:63:18:
ed:f1:c8:45:9c:76:17:e6:5d:ef:1a:ee:3a:44:84:80:e7:7f:
bd:30:c3:93:e6:67:af:ba:28:95:73:8a:4b:5d:da:31:01:c9:
48:49:d5:80:50:6c:c2:7f:96:ec:14:03:08:0e:4d:76:19:26:
7f:2c:70:28:09:ea:dd:7e:08:28:6a:b7:ad:d1:27:44:20:43:
e4:b9:51:63:a4:2c:97:02:fa:46:f2:50:60:ff:30:79:52:b6:
2f:5f:c5:04:92:a7:c7:dc:25:15:59:a6:c4:26:da:e4:a3:4c:
f7:7d:4f:3d:41:22:f4:1f:ba:e5:9a:25:fd:07:6d:d9:62:48:
74:4d:b3:d9:bd:c0:90:5c:42:57:1a:e0:c5:60:11:43:8e:f5:
e5:71:3b:2a:4e:ac:73:ff:95:e9:ab:fe:7f:33:5a:c4:fa:d6:
16:51:64:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMSClj0J2O3B2zIHRDgh0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3M2ZlMzM1MWE1ZTYyNjRhMWY4MTI5YzEwMjUxZDllODk2
ZTgwNjIwHhcNMjUwNjA3MDcwMDQ1WhcNMjUwNjA4MDcwMDQ1WjAzMTEwLwYDVQQD
Eyg4OGMxMzQ3Mjk1OGY1YWRiNzE2ZjJjNGQyMTlkY2ZlZjUwYzJmMmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rjb2qaOT20dRNulJWGwLjDj5rzJ
/zlm2PURMAY1REIoZqzhCnRxZ9OgrHWnTKkPj4MQwJSkWUA1DhUGRZ9e4ui2Ozec
o3TIR2ox4QoP5echWEZRoOYDd42DJg2NSnaeyLS0+8krgqvtNhW2Jn4w4AhnqfH8
2L3MQzSfUud+wFNUFKR9VYgEtGAxXKwr3dNVZcv3Zklpw+Zo+PJokzVn6aoKMvg9
xwGTZ07QpTTvIlD13CV95OkMtB/mepVhxlMtIvvpVtm2h4hILpn1Lezyp0JHWD5D
m0RiLL8MZfARkFOueocxPir0OFs+RKgsI0ohFDKIKhCMIYoG+LYR6v3JOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjBNHKVj1rbcW8sTSGdz+9QwvLPMB8GA1UdIwQY
MBaAFOc/4zUaXmJkofgSnBAlHZ6JboBiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXpfak5ScGVZbVNoLUJLY0VDVWRub2x1Z0dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hZWIyMjQtOGM4OS00NDY2LTliMzgt
MDI0YzFlZGQ2MmVjLzEvNXpfak5ScGVZbVNoLUJLY0VDVWRub2x1Z0dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9hZWIyMjQtOGM4OS00NDY2LTliMzgtMDI0YzFlZGQ2MmVj
LzEvNXpfak5ScGVZbVNoLUJLY0VDVWRub2x1Z0dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQRZ//GP
JnGRyEkUFhpSqfMuts84tFv88U9JLIrA55ZkVida6Lql6hfXjJpo2zphy4p/jiBd
M5pl7XVblKHaW2z9T8z+6/5ekOWL3y2MGnpj4W3BpbrMlWMY7fHIRZx2F+Zd7xru
OkSEgOd/vTDDk+Znr7oolXOKS13aMQHJSEnVgFBswn+W7BQDCA5NdhkmfyxwKAnq
3X4IKGq3rdEnRCBD5LlRY6QslwL6RvJQYP8weVK2L1/FBJKnx9wlFVmmxCba5KNM
931PPUEi9B+65Zol/Qdt2WJIdE2z2b3AkFxCVxrgxWARQ4715XE7Kk6sc/+V6av+
fzNaxPrWFlFkJA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:42:03 2025 by rpki-client