
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
File: 5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json)
Hash identifier: +wWptks6j74jaY2p/h1IFmO+CWmIqhguiRu/hEvGr84=
Subject key identifier: 54:70:64:B2:35:48:BF:AF:FB:16:71:27:91:EA:A8:24:BD:F5:30:43
Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
Certificate issuer: /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Certificate serial: 01974FA0EFB12C2283CFDCE005E8F726A130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
Manifest number: 06DB
Signing time: Sun 08 Jun 2025 13:00:36 +0000
Manifest this update: Sun 08 Jun 2025 13:00:36 +0000
Manifest next update: Mon 09 Jun 2025 13:00:36 +0000
Files and hashes: 1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: cgSNuLNdoeVMjJjv6jf8iCXTDMhADkRz8g2etBuW/xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a0:ef:b1:2c:22:83:cf:dc:e0:05:e8:f7:26:a1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Validity
Not Before: Jun 8 13:00:36 2025 GMT
Not After : Jun 9 13:00:36 2025 GMT
Subject: CN=547064b23548bfaffb16712791eaa824bdf53043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:89:cf:41:8c:ab:db:24:88:e2:d5:06:29:0e:
c8:9f:55:16:19:a5:85:e2:39:3f:44:2b:c6:79:f0:
e6:56:ee:fa:8a:4c:09:97:bb:c6:11:9a:c6:3e:56:
87:ab:9e:24:c1:be:8c:11:37:64:fa:9d:d8:8a:a0:
ca:f4:fc:42:08:95:c8:1c:70:bc:5b:e2:d1:de:72:
8c:1d:31:33:d0:c3:7c:c2:f4:92:54:49:d1:39:66:
53:60:5c:81:72:23:07:e9:ff:09:cb:6d:76:7d:ba:
db:28:b6:1e:39:ac:b1:ef:ef:93:45:74:8f:99:de:
0c:71:25:ce:2a:17:a9:40:30:c4:38:c7:0c:89:43:
7d:4f:90:55:44:1b:7d:32:38:2e:e5:32:66:9f:fb:
19:17:db:80:c7:4f:d4:b6:b2:3d:49:b9:5c:2f:ac:
79:14:e9:4c:aa:dd:97:40:1a:3c:76:aa:0f:c0:bd:
0c:b2:8a:7e:da:64:66:d6:76:67:ac:88:7d:c3:4a:
5c:84:59:02:ab:72:da:ae:76:e0:55:62:17:f2:3c:
7e:87:e5:84:58:8b:f9:d9:49:6d:90:c3:5c:67:a8:
8f:10:b6:93:fb:eb:6c:f0:69:04:3e:77:ee:cc:fc:
eb:1d:61:58:74:5d:90:9c:a0:8a:cc:e0:51:e6:98:
ce:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:70:64:B2:35:48:BF:AF:FB:16:71:27:91:EA:A8:24:BD:F5:30:43
X509v3 Authority Key Identifier:
keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0e:ff:22:c3:33:34:58:83:9b:95:5d:c6:60:44:51:34:ad:
ef:f2:26:17:59:3a:db:db:04:51:5f:2d:91:e6:df:df:83:26:
f2:fe:b6:ae:16:fe:48:fc:04:29:52:47:06:35:be:d6:99:98:
78:52:a7:23:46:2e:36:9f:58:e8:a6:ad:2b:d7:5a:fb:61:16:
2c:30:c4:4a:24:39:89:3c:fb:c5:4f:5d:57:f3:65:6e:71:81:
ed:7b:39:58:b2:55:10:34:ab:68:c8:2b:1f:55:76:b3:6a:d0:
84:11:71:52:02:11:07:ab:66:bc:5d:9f:79:31:51:55:df:0c:
ab:5b:37:67:f5:69:b9:b0:34:fb:5b:1a:be:3a:67:c9:db:29:
c4:5c:d3:35:e6:1a:f8:88:3b:fa:5b:47:38:93:57:ac:df:32:
92:74:d1:c2:80:ae:12:fe:85:b8:2f:7b:df:18:42:0f:72:3f:
d1:73:15:e2:94:76:16:ad:c1:17:14:76:2d:f1:85:d4:17:28:
85:59:ba:5b:a4:e2:e4:f7:80:d8:0a:16:96:9a:68:3f:93:af:
3b:b4:23:4b:a4:dd:3e:da:7f:02:fa:7d:b0:55:46:05:4e:79:
26:22:a6:04:51:7f:85:00:e7:e5:b7:08:dc:9b:3f:51:ed:80:
17:3d:78:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPoO+xLCKDz9zgBej3JqEwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Mzg2YzE3YjQ1NjEwYjU4YmJlMDljZDMwY2E5ZmIwYzE5
NjFmZDMwHhcNMjUwNjA4MTMwMDM2WhcNMjUwNjA5MTMwMDM2WjAzMTEwLwYDVQQD
Eyg1NDcwNjRiMjM1NDhiZmFmZmIxNjcxMjc5MWVhYTgyNGJkZjUzMDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYnPQYyr2ySI4tUGKQ7In1UWGaWF
4jk/RCvGefDmVu76ikwJl7vGEZrGPlaHq54kwb6METdk+p3YiqDK9PxCCJXIHHC8
W+LR3nKMHTEz0MN8wvSSVEnROWZTYFyBciMH6f8Jy212fbrbKLYeOayx7++TRXSP
md4McSXOKhepQDDEOMcMiUN9T5BVRBt9Mjgu5TJmn/sZF9uAx0/UtrI9SblcL6x5
FOlMqt2XQBo8dqoPwL0Msop+2mRm1nZnrIh9w0pchFkCq3LarnbgVWIX8jx+h+WE
WIv52UltkMNcZ6iPELaT++ts8GkEPnfuzPzrHWFYdF2QnKCKzOBR5pjOFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRwZLI1SL+v+xZxJ5HqqCS99TBDMB8GA1UdIwQY
MBaAFOc4bBe0VhC1i74JzTDKn7DBlh/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXpoc0Y3UldFTFdMdmduTk1NcWZzTUdXSDlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80YTM2ZGYtNDgwOC00OGU2LTg5NmYt
NmJiZDY4NWQ5MjMxLzEvNXpoc0Y3UldFTFdMdmduTk1NcWZzTUdXSDlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC80YTM2ZGYtNDgwOC00OGU2LTg5NmYtNmJiZDY4NWQ5MjMx
LzEvNXpoc0Y3UldFTFdMdmduTk1NcWZzTUdXSDlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHA7/IsMz
NFiDm5VdxmBEUTSt7/ImF1k629sEUV8tkebf34Mm8v62rhb+SPwEKVJHBjW+1pmY
eFKnI0YuNp9Y6KatK9da+2EWLDDESiQ5iTz7xU9dV/NlbnGB7Xs5WLJVEDSraMgr
H1V2s2rQhBFxUgIRB6tmvF2feTFRVd8Mq1s3Z/VpubA0+1savjpnydspxFzTNeYa
+Ig7+ltHOJNXrN8yknTRwoCuEv6FuC973xhCD3I/0XMV4pR2Fq3BFxR2LfGF1Bco
hVm6W6Ti5PeA2AoWlppoP5OvO7QjS6TdPtp/Avp9sFVGBU55JiKmBFF/hQDn5bcI
3Js/Ue2AFz143g==
-----END CERTIFICATE-----
Generated at Sun Jun 8 19:16:03 2025 by rpki-client