Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: 7yRZOu2sg0/u8GDC/3F2f8AC/gkegZkHUZnNPIqPPOQ=
Subject key identifier: 3A:18:C2:EE:C0:57:88:8E:03:88:9C:0E:92:46:E8:87:7B:25:79:AD
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 019748FA5B0F3CFB676D1F6AFBB2AD2E8CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 060F
Signing time: Sat 07 Jun 2025 06:00:56 +0000
Manifest this update: Sat 07 Jun 2025 06:00:56 +0000
Manifest next update: Sun 08 Jun 2025 06:00:56 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: 87Lf627WIHUNo3lExtQWnSA2bkRZCEts76uV5hiaTYw=)
2: FUn2t9ppYu0Wn0pkoCRZ-HiUy7U.roa (hash: IgKhBAHaInAK8D+wEDHgOoVh2qEqWhDFRzWVOdnNaSE=)
3: H4hpUNA2nrrRur4Tk2W8HjJVqu4.roa (hash: oa7awxP7blKcpEGQ8hgbpBoX6kUOq34Ta41x1XECaFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:5b:0f:3c:fb:67:6d:1f:6a:fb:b2:ad:2e:8c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Jun 7 06:00:56 2025 GMT
Not After : Jun 8 06:00:56 2025 GMT
Subject: CN=3a18c2eec057888e03889c0e9246e8877b2579ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e5:51:d7:c7:08:8c:6b:25:83:4b:3c:8d:1d:
5a:6c:85:43:39:d7:e2:20:3b:f3:0e:65:55:ea:d1:
a1:73:1e:18:50:ef:92:90:48:ea:9b:b0:9e:cd:4a:
2a:2d:23:53:9c:cc:e8:2a:3f:b7:42:ae:4b:ba:83:
b2:40:a3:34:0e:18:c6:31:4b:81:28:d3:c5:3c:34:
cb:3b:3f:6c:ca:99:8f:be:23:3c:1a:f6:dc:9a:ff:
bc:73:59:78:48:ae:5f:4f:9c:05:c9:db:c1:a1:c5:
30:46:ea:60:0d:da:3d:34:f5:ee:3f:5c:e7:03:b8:
28:cb:71:f0:2c:3f:9e:58:ca:fa:0d:6f:bb:27:ee:
ba:db:fc:6b:64:bf:17:75:d2:24:be:9d:87:ef:53:
8b:47:75:2b:89:1d:9f:67:c3:1a:61:9b:14:d1:42:
f4:4b:25:f6:7b:c9:08:84:13:22:d0:a4:e3:88:ee:
a9:e2:51:a4:40:72:df:1c:e1:18:db:0e:b2:12:96:
a2:76:b1:ca:99:d0:82:39:07:b1:af:a9:ad:66:cd:
fd:de:ba:3e:1d:5c:c5:1d:1c:77:68:56:38:89:ca:
ee:34:0a:6d:b5:69:9b:57:85:cc:43:54:64:15:89:
c5:cb:a4:2f:fe:45:a5:30:fd:ae:bb:c3:c5:ff:02:
5e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:18:C2:EE:C0:57:88:8E:03:88:9C:0E:92:46:E8:87:7B:25:79:AD
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:10:42:fd:a5:6f:81:ee:ab:db:d0:f9:e7:0d:e6:03:5f:78:
a4:f4:46:24:cb:58:16:52:44:7c:a2:10:20:25:e0:9a:46:9d:
47:fa:02:ee:38:d6:75:6b:a0:ff:b1:93:19:a0:94:43:24:06:
fb:77:31:58:78:17:d7:cd:ca:cf:4c:38:46:d0:0d:1b:07:6c:
b4:38:2a:cd:e8:4b:34:90:08:25:f8:12:9b:d7:ff:cd:c3:20:
34:7b:56:1b:86:d0:34:ff:b6:4c:c9:43:ea:a2:0a:24:1c:90:
25:48:47:04:bc:93:09:43:c7:ba:e0:b9:28:59:4e:ed:38:19:
e4:19:77:f1:0f:27:45:af:6e:33:ff:1f:14:53:e1:72:0a:13:
08:ef:9b:25:11:6d:f3:7a:22:dc:7c:4c:0f:b2:f4:e3:cc:27:
4d:4f:1c:77:ee:63:94:55:1f:29:31:4b:de:96:f6:17:9e:ce:
1c:9f:6a:70:ee:bb:b9:02:45:ff:ae:21:f6:a6:5f:8a:ae:9d:
7c:b6:d8:43:e0:94:8b:c2:ef:a0:82:b8:8d:52:fd:7e:c8:b7:
43:76:85:a1:1c:0b:e9:df:35:d0:c7:b8:6e:29:5c:d6:09:26:
fc:c3:f3:69:5d:c7:25:3d:e4:5a:46:cc:f0:d5:5e:c9:67:c2:
02:15:83:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+lsPPPtnbR9q+7KtLozyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0M2JhYWZjNjRiMzNlNDNkYjc4ZGM3YWVkNjA1ZWY3MDQw
NmQ5YWYwHhcNMjUwNjA3MDYwMDU2WhcNMjUwNjA4MDYwMDU2WjAzMTEwLwYDVQQD
EygzYTE4YzJlZWMwNTc4ODhlMDM4ODljMGU5MjQ2ZTg4NzdiMjU3OWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uVR18cIjGslg0s8jR1abIVDOdfi
IDvzDmVV6tGhcx4YUO+SkEjqm7CezUoqLSNTnMzoKj+3Qq5LuoOyQKM0DhjGMUuB
KNPFPDTLOz9sypmPviM8Gvbcmv+8c1l4SK5fT5wFydvBocUwRupgDdo9NPXuP1zn
A7goy3HwLD+eWMr6DW+7J+662/xrZL8XddIkvp2H71OLR3UriR2fZ8MaYZsU0UL0
SyX2e8kIhBMi0KTjiO6p4lGkQHLfHOEY2w6yEpaidrHKmdCCOQexr6mtZs393ro+
HVzFHRx3aFY4icruNApttWmbV4XMQ1RkFYnFy6Qv/kWlMP2uu8PF/wJeiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoYwu7AV4iOA4icDpJG6Id7JXmtMB8GA1UdIwQY
MBaAFOQ7qvxksz5D23jceu1gXvcEBtmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTIt
ZTY4MTJkYWI2OTk5LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTItZTY4MTJkYWI2OTk5
LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBBC/aVv
ge6r29D55w3mA194pPRGJMtYFlJEfKIQICXgmkadR/oC7jjWdWug/7GTGaCUQyQG
+3cxWHgX183Kz0w4RtANGwdstDgqzehLNJAIJfgSm9f/zcMgNHtWG4bQNP+2TMlD
6qIKJByQJUhHBLyTCUPHuuC5KFlO7TgZ5Bl38Q8nRa9uM/8fFFPhcgoTCO+bJRFt
83oi3HxMD7L048wnTU8cd+5jlFUfKTFL3pb2F57OHJ9qcO67uQJF/64h9qZfiq6d
fLbYQ+CUi8LvoIK4jVL9fsi3Q3aFoRwL6d810Me4bilc1gkm/MPzaV3HJT3kWkbM
8NVeyWfCAhWDSg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:26:18 2025 by rpki-client