Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
File: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft (raw, json)
Hash identifier: d/6215Xvq/4DX1zd70IJnoYx6wSL5nXOks6WghLtoqw=
Subject key identifier: AA:E3:48:11:58:8A:8D:13:04:F7:5A:F4:6F:90:C9:38:DE:0F:BD:34
Authority key identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
Certificate issuer: /CN=e578bc065072b40baf08416e216a1307b24bc44b
Certificate serial: 01974E57B0EE65563ED656CCA33345271407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 07:00:59 +0000
Manifest this update: Sun 08 Jun 2025 07:00:59 +0000
Manifest next update: Mon 09 Jun 2025 07:00:59 +0000
Files and hashes: 1: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl (hash: J9zEXs9QRzzV6yt7ChlAx2ZUA1ICryVxvSemuT/RHZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:b0:ee:65:56:3e:d6:56:cc:a3:33:45:27:14:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e578bc065072b40baf08416e216a1307b24bc44b
Validity
Not Before: Jun 8 07:00:59 2025 GMT
Not After : Jun 9 07:00:59 2025 GMT
Subject: CN=aae34811588a8d1304f75af46f90c938de0fbd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:33:45:b7:87:92:0c:7c:38:48:5f:10:ab:aa:
74:fb:a4:66:8f:e6:a4:22:d2:2e:30:22:a3:c3:d1:
c9:11:83:1d:1e:13:f1:a5:8e:cc:c7:2e:e3:63:2e:
83:65:60:84:29:b4:09:41:c7:f3:a0:d5:3b:b0:b1:
98:65:a9:9b:95:07:c3:b6:27:01:cc:d1:e9:3f:a0:
a1:bb:41:a2:91:91:54:04:c3:76:17:25:08:97:39:
95:b6:02:91:87:29:eb:e5:a7:2b:30:1a:a0:05:41:
56:aa:be:9b:80:bb:85:c1:40:a4:23:be:5d:50:d5:
0a:17:47:86:3a:bf:ee:c9:83:f8:80:08:41:f4:51:
0b:3a:b7:70:6d:c1:5b:c7:db:39:81:bd:0e:50:27:
77:5d:2f:47:69:11:55:b2:74:3a:ec:c6:df:7a:59:
40:eb:a2:45:44:4e:5b:a6:3d:58:d6:a8:e9:a6:17:
0b:f0:c4:45:55:25:49:5f:a3:d1:ef:df:ad:a0:c6:
af:ca:82:62:3f:6e:0e:44:a3:5a:0a:93:86:63:09:
57:1c:41:37:a7:43:79:25:70:55:44:e8:ae:6f:a6:
f3:cf:08:ff:6c:ac:5a:ca:9c:19:db:a4:92:39:94:
41:69:f0:7a:9b:39:ff:05:5e:eb:4b:7d:3f:ad:1c:
b1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E3:48:11:58:8A:8D:13:04:F7:5A:F4:6F:90:C9:38:DE:0F:BD:34
X509v3 Authority Key Identifier:
keyid:E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c5:bc:46:fc:d8:23:2f:08:8c:76:e7:f3:f3:f3:c9:6a:fd:
a0:5f:ed:70:7b:82:bc:69:41:2c:e5:28:dc:f8:e1:db:c3:9a:
c2:eb:bd:f1:ff:37:ff:1b:a9:6b:95:5f:3d:21:5c:d8:c9:d1:
3b:08:14:48:48:14:53:0b:1f:1d:e6:fa:d9:e1:83:e1:f4:5e:
0d:7a:7e:80:3f:8c:3b:21:b8:f4:2a:90:d4:c9:1d:88:de:3d:
53:4f:23:29:c6:e7:2d:63:e3:ef:9e:b5:39:d9:8c:a3:2f:ab:
36:c2:19:5f:0b:16:9c:05:24:be:a0:3f:a9:a8:85:8a:aa:3e:
83:6e:73:40:fd:10:ae:6c:2c:b4:b6:f2:46:d7:07:4b:8d:9d:
e6:93:a8:7b:ae:35:b5:b9:fd:db:6d:f4:80:fa:46:0b:df:bb:
c0:5e:21:87:64:f9:a0:8d:00:18:c3:31:47:a1:af:ac:d0:0f:
3b:2c:a2:37:a9:2b:3b:78:2b:b6:21:52:44:f9:14:15:5b:bc:
d5:ea:68:a7:0a:6b:f5:d4:98:f0:9b:3a:8f:19:f9:54:be:01:
0b:49:dc:4a:40:ba:e5:a7:20:d8:29:2a:f5:f8:fb:81:ca:e0:
4d:d8:0d:5f:86:89:dd:ce:4d:df:ac:c1:2b:b3:d6:9a:72:a3:
c1:33:fe:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOV7DuZVY+1lbMozNFJxQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzhiYzA2NTA3MmI0MGJhZjA4NDE2ZTIxNmExMzA3YjI0
YmM0NGIwHhcNMjUwNjA4MDcwMDU5WhcNMjUwNjA5MDcwMDU5WjAzMTEwLwYDVQQD
EyhhYWUzNDgxMTU4OGE4ZDEzMDRmNzVhZjQ2ZjkwYzkzOGRlMGZiZDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jNFt4eSDHw4SF8Qq6p0+6Rmj+ak
ItIuMCKjw9HJEYMdHhPxpY7Mxy7jYy6DZWCEKbQJQcfzoNU7sLGYZamblQfDticB
zNHpP6Chu0GikZFUBMN2FyUIlzmVtgKRhynr5acrMBqgBUFWqr6bgLuFwUCkI75d
UNUKF0eGOr/uyYP4gAhB9FELOrdwbcFbx9s5gb0OUCd3XS9HaRFVsnQ67MbfellA
66JFRE5bpj1Y1qjpphcL8MRFVSVJX6PR79+toMavyoJiP24ORKNaCpOGYwlXHEE3
p0N5JXBVROiub6bzzwj/bKxaypwZ26SSOZRBafB6mzn/BV7rS30/rRyxpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrjSBFYio0TBPda9G+QyTjeD700MB8GA1UdIwQY
MBaAFOV4vAZQcrQLrwhBbiFqEweyS8RLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83OWU1ODktYTJjMi00YjBhLWJmMWEt
ZmJmZjYwY2ZiOTZhLzEvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS83OWU1ODktYTJjMi00YjBhLWJmMWEtZmJmZjYwY2ZiOTZh
LzEvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsW8RvzY
Iy8IjHbn8/PzyWr9oF/tcHuCvGlBLOUo3Pjh28Oawuu98f83/xupa5VfPSFc2MnR
OwgUSEgUUwsfHeb62eGD4fReDXp+gD+MOyG49CqQ1MkdiN49U08jKcbnLWPj7561
OdmMoy+rNsIZXwsWnAUkvqA/qaiFiqo+g25zQP0QrmwstLbyRtcHS42d5pOoe641
tbn92230gPpGC9+7wF4hh2T5oI0AGMMxR6GvrNAPOyyiN6krO3grtiFSRPkUFVu8
1epopwpr9dSY8Js6jxn5VL4BC0ncSkC65acg2Ckq9fj7gcrgTdgNX4aJ3c5N36zB
K7PWmnKjwTP+Ng==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:57:52 2025 by rpki-client