Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
File: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft (raw, json)
Hash identifier: UytLnKlEY+nnZ+7KJdRx5iWceTAu/fbZp2uGlLUFYo4=
Subject key identifier: 5E:25:45:75:25:8D:B8:60:EF:C3:58:8B:1D:CE:CA:CB:F4:B8:DD:B3
Authority key identifier: E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
Certificate issuer: /CN=e6a54852077a007838303c1f61c84387cccdd684
Certificate serial: 0197654D1A66D13BC12D15B29C7774E71445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
Manifest number: 0316
Signing time: Thu 12 Jun 2025 18:00:41 +0000
Manifest this update: Thu 12 Jun 2025 18:00:41 +0000
Manifest next update: Fri 13 Jun 2025 18:00:41 +0000
Files and hashes: 1: 3cGSK8NVA9eNtztBrAr51UavoEk.roa (hash: pMEP1TJfXu1V+w800yX1v0YDExi+6bPx0cct+Fh5aw4=)
2: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl (hash: gkwm1uQ4+PXmZ3B3xmlVynL7vA/TEHoM1pBOU5w9qio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:4d:1a:66:d1:3b:c1:2d:15:b2:9c:77:74:e7:14:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a54852077a007838303c1f61c84387cccdd684
Validity
Not Before: Jun 12 18:00:41 2025 GMT
Not After : Jun 13 18:00:41 2025 GMT
Subject: CN=5e254575258db860efc3588b1dcecacbf4b8ddb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:d0:f2:f0:dd:bc:d2:d1:42:5b:8e:67:74:
6c:c6:16:5d:4b:e9:a4:75:52:fe:16:89:0d:97:5a:
db:6d:8e:e4:27:c0:94:08:95:03:7c:40:d0:57:84:
97:7c:05:92:22:32:11:81:03:bd:b4:54:3d:fc:3b:
12:12:da:5a:7c:87:31:a9:4e:a6:91:90:15:5e:a3:
e7:9f:f3:c6:6c:4e:1a:61:ae:45:6e:7d:ab:f9:e2:
dd:96:8a:35:5b:bf:a6:70:ce:5a:61:c2:60:e3:2a:
40:cc:d4:8e:b1:0e:91:90:91:c0:80:85:75:20:d0:
fd:b0:43:c0:ec:11:77:28:06:53:4b:01:9b:a6:14:
ab:6b:13:68:0a:58:67:f0:e2:67:b2:81:9a:a1:55:
66:1a:33:f2:f0:83:8e:03:0d:0a:fc:b8:9b:b7:cb:
6e:44:ae:00:81:64:c9:ae:1b:e9:9b:91:cc:98:fb:
d3:c9:ff:b1:91:81:f8:cc:af:fc:bf:b9:6b:8c:8c:
6a:3a:fc:18:70:57:b8:e5:54:0c:05:71:1e:fa:ed:
4e:60:36:5f:a6:ac:4d:63:12:6f:19:e6:c6:3e:f5:
08:1a:e2:7f:b8:0e:87:f1:74:cc:f8:e6:8d:0b:54:
c5:81:cd:bd:3b:62:1f:c7:aa:77:c1:38:03:ef:4b:
34:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:25:45:75:25:8D:B8:60:EF:C3:58:8B:1D:CE:CA:CB:F4:B8:DD:B3
X509v3 Authority Key Identifier:
keyid:E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c8:a8:e6:d8:10:8f:a9:b2:ab:2c:3c:28:23:94:0d:df:8f:
27:71:fa:91:77:5e:f8:86:15:b8:3e:ea:6b:0d:91:24:ae:df:
95:77:b0:26:c6:be:aa:da:1b:14:7d:cb:46:65:f3:fd:65:df:
35:17:dd:55:07:07:eb:95:c0:62:c8:39:18:ed:a8:c7:98:84:
74:68:84:3d:13:f4:af:4d:1b:51:92:64:ed:98:97:f2:33:07:
b1:20:f2:f8:c1:3a:6f:0b:70:0a:e7:fc:db:4c:7c:91:43:4a:
2e:cf:35:c6:1c:09:2e:11:95:4f:6f:e5:c0:36:40:86:24:a8:
ca:44:0f:ca:7c:7d:8b:46:e1:0f:57:be:57:a7:23:bc:31:f9:
90:cb:44:77:10:f0:34:e5:4d:36:0d:cb:a6:47:6e:76:19:4b:
c6:03:5b:f1:6b:9b:a9:00:46:2a:68:df:e6:3f:3e:fe:3f:93:
f6:e3:54:45:27:65:ee:4d:33:31:93:b7:b2:96:1c:d4:80:d9:
a8:60:24:49:e9:d5:7b:00:6f:4e:fb:02:96:e0:3f:d5:4d:8e:
2c:c5:66:97:f0:96:be:cd:53:09:87:9e:ca:5c:a5:8f:e3:ff:
9f:3e:9d:79:ed:84:3c:35:0f:79:8e:80:14:7a:28:cd:1e:bf:
6a:b6:64:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdlTRpm0TvBLRWynHd05xRFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YTU0ODUyMDc3YTAwNzgzODMwM2MxZjYxYzg0Mzg3Y2Nj
ZGQ2ODQwHhcNMjUwNjEyMTgwMDQxWhcNMjUwNjEzMTgwMDQxWjAzMTEwLwYDVQQD
Eyg1ZTI1NDU3NTI1OGRiODYwZWZjMzU4OGIxZGNlY2FjYmY0YjhkZGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSXQ8vDdvNLRQluOZ3RsxhZdS+mk
dVL+FokNl1rbbY7kJ8CUCJUDfEDQV4SXfAWSIjIRgQO9tFQ9/DsSEtpafIcxqU6m
kZAVXqPnn/PGbE4aYa5Fbn2r+eLdloo1W7+mcM5aYcJg4ypAzNSOsQ6RkJHAgIV1
IND9sEPA7BF3KAZTSwGbphSraxNoClhn8OJnsoGaoVVmGjPy8IOOAw0K/Libt8tu
RK4AgWTJrhvpm5HMmPvTyf+xkYH4zK/8v7lrjIxqOvwYcFe45VQMBXEe+u1OYDZf
pqxNYxJvGebGPvUIGuJ/uA6H8XTM+OaNC1TFgc29O2Ifx6p3wTgD70s0oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4lRXUljbhg78NYix3Oysv0uN2zMB8GA1UdIwQY
MBaAFOalSFIHegB4ODA8H2HIQ4fMzdaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXFWSVVnZDZBSGc0TUR3ZlljaERoOHpOMW9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mYzgwM2YtOTY3NS00MzU1LTgwZjYt
Nzc3MzAxNTljOGQ0LzEvNXFWSVVnZDZBSGc0TUR3ZlljaERoOHpOMW9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mYzgwM2YtOTY3NS00MzU1LTgwZjYtNzc3MzAxNTljOGQ0
LzEvNXFWSVVnZDZBSGc0TUR3ZlljaERoOHpOMW9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8io5tgQ
j6myqyw8KCOUDd+PJ3H6kXde+IYVuD7qaw2RJK7flXewJsa+qtobFH3LRmXz/WXf
NRfdVQcH65XAYsg5GO2ox5iEdGiEPRP0r00bUZJk7ZiX8jMHsSDy+ME6bwtwCuf8
20x8kUNKLs81xhwJLhGVT2/lwDZAhiSoykQPynx9i0bhD1e+V6cjvDH5kMtEdxDw
NOVNNg3LpkdudhlLxgNb8WubqQBGKmjf5j8+/j+T9uNURSdl7k0zMZO3spYc1IDZ
qGAkSenVewBvTvsCluA/1U2OLMVml/CWvs1TCYeeylylj+P/nz6dee2EPDUPeY6A
FHoozR6/arZkvg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 03:58:53 2025 by rpki-client