Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
File: g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json)
Hash identifier: /5ji+pu34Hq0esTVVm5arx3tnrQ3dMyVKr9eoH6Y0o4=
Subject key identifier: 0C:E3:53:BF:1F:23:C7:55:09:42:4E:DB:65:CA:65:47:BA:1F:2E:B7
Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f
Certificate serial: 019748C3230FAA9174A6CF968ED003B0B1D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 05:00:37 +0000
Manifest this update: Sat 07 Jun 2025 05:00:37 +0000
Manifest next update: Sun 08 Jun 2025 05:00:37 +0000
Files and hashes: 1: L07o_vv656M9OEJjc4BFj7rpTc8.roa (hash: RSQDee8PToqw8SZNKDk+n8QFVV+DzoM0xmaXuyUh35A=)
2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: TingfjbF5DklIHx+HYFYD7yxzlyW7ajBZ961liSn+yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:23:0f:aa:91:74:a6:cf:96:8e:d0:03:b0:b1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f
Validity
Not Before: Jun 7 05:00:37 2025 GMT
Not After : Jun 8 05:00:37 2025 GMT
Subject: CN=0ce353bf1f23c75509424edb65ca6547ba1f2eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:d3:35:91:27:e1:d2:d2:45:3f:95:83:74:
1f:56:f6:7a:31:4e:47:aa:12:88:a5:fb:a8:67:be:
fe:35:f1:ef:e1:7e:12:86:25:2f:71:63:88:e3:be:
ef:46:47:3d:10:5e:7c:29:89:d2:89:3c:a5:67:7e:
73:f2:f2:b2:22:52:ce:1e:f0:2d:2d:56:94:79:9d:
84:a5:ef:39:b9:c8:d2:90:73:70:ba:e2:42:a8:58:
b9:e8:c9:b1:1b:5e:41:38:a4:e3:19:5c:ba:50:47:
64:05:65:cd:84:5e:9b:06:5e:59:9e:ba:67:c2:0f:
45:07:fe:fa:7e:fb:2b:a8:4c:c0:31:93:06:08:b9:
fa:3e:62:55:b4:2a:3d:b7:47:5a:ff:15:35:02:83:
4e:4d:92:ac:be:ce:0c:9a:85:48:5f:8b:26:e0:13:
f1:3d:08:55:28:8c:85:fb:0e:05:41:23:f6:5b:c1:
b1:6c:da:5b:fc:06:d9:db:49:4b:cb:5d:ca:d0:7c:
ba:a8:ec:ff:07:ea:7a:f1:f9:95:d3:b0:3c:65:20:
8c:80:d2:bd:81:d6:6f:70:50:90:51:be:f2:b7:d6:
a9:91:cb:94:04:f2:4a:71:0f:99:2a:94:e2:e1:6d:
86:f6:f5:e8:dd:dd:f1:39:13:45:be:81:67:d4:d4:
ba:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E3:53:BF:1F:23:C7:55:09:42:4E:DB:65:CA:65:47:BA:1F:2E:B7
X509v3 Authority Key Identifier:
keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:77:1f:08:03:24:05:98:95:3c:cc:ad:bf:4d:d4:cc:1a:84:
30:90:3b:71:ee:3d:55:1e:3a:94:36:a5:b8:b1:ad:ea:42:47:
4a:1f:6d:82:c1:77:db:28:cc:8f:7e:ac:35:83:7d:ee:fa:52:
02:4d:72:f1:90:f7:94:e2:67:13:61:5d:50:73:8a:bf:a7:b5:
d5:a1:24:4d:5e:32:2b:e2:24:8b:7b:e7:ae:43:5e:6a:b4:c9:
6e:1f:ee:45:af:47:b3:52:9a:a3:ec:f7:b5:74:f4:40:12:86:
c0:1b:3d:b8:73:23:1c:b0:b0:78:15:f8:e8:0c:dd:15:84:40:
a0:a4:47:b9:14:67:1a:fd:33:0c:07:a2:d3:4f:7a:98:f3:eb:
a4:fe:75:ea:4e:10:37:23:26:e9:51:58:4d:97:6f:31:57:3d:
2c:9f:e2:ed:d4:be:32:1c:53:60:f9:d4:b5:8a:3a:e8:ba:7a:
b3:fc:14:c0:b8:ea:19:49:3c:fa:f3:c5:b2:ca:a6:ed:65:a3:
12:9a:79:e1:62:01:50:1d:2b:3a:56:10:1c:a0:29:56:7c:bf:
64:88:af:1f:c7:18:f9:3d:8b:e7:7a:d9:84:61:73:b5:3e:c9:
e9:47:39:1c:f6:71:24:54:c4:85:ff:82:74:ee:18:97:62:e7:
e8:70:08:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIwyMPqpF0ps+WjtADsLHTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOTBlMTA0MmJhZGQ4OGU5NmU2MzllYWEwYWQwMjMyODdl
YTUwN2YwHhcNMjUwNjA3MDUwMDM3WhcNMjUwNjA4MDUwMDM3WjAzMTEwLwYDVQQD
EygwY2UzNTNiZjFmMjNjNzU1MDk0MjRlZGI2NWNhNjU0N2JhMWYyZWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3vTNZEn4dLSRT+Vg3QfVvZ6MU5H
qhKIpfuoZ77+NfHv4X4ShiUvcWOI477vRkc9EF58KYnSiTylZ35z8vKyIlLOHvAt
LVaUeZ2Epe85ucjSkHNwuuJCqFi56MmxG15BOKTjGVy6UEdkBWXNhF6bBl5Znrpn
wg9FB/76fvsrqEzAMZMGCLn6PmJVtCo9t0da/xU1AoNOTZKsvs4MmoVIX4sm4BPx
PQhVKIyF+w4FQSP2W8GxbNpb/AbZ20lLy13K0Hy6qOz/B+p68fmV07A8ZSCMgNK9
gdZvcFCQUb7yt9apkcuUBPJKcQ+ZKpTi4W2G9vXo3d3xORNFvoFn1NS68wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzjU78fI8dVCUJO22XKZUe6Hy63MB8GA1UdIwQY
MBaAFIOQ4QQrrdiOluY56qCtAjKH6lB/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kODA4YzUtNDA2NC00ZThjLTg3NjYt
NDlmYTU4ZmVkZmYzLzEvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kODA4YzUtNDA2NC00ZThjLTg3NjYtNDlmYTU4ZmVkZmYz
LzEvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHcfCAMk
BZiVPMytv03UzBqEMJA7ce49VR46lDaluLGt6kJHSh9tgsF32yjMj36sNYN97vpS
Ak1y8ZD3lOJnE2FdUHOKv6e11aEkTV4yK+Iki3vnrkNearTJbh/uRa9Hs1Kao+z3
tXT0QBKGwBs9uHMjHLCweBX46AzdFYRAoKRHuRRnGv0zDAei0096mPPrpP516k4Q
NyMm6VFYTZdvMVc9LJ/i7dS+MhxTYPnUtYo66Lp6s/wUwLjqGUk8+vPFssqm7WWj
Epp54WIBUB0rOlYQHKApVny/ZIivH8cY+T2L53rZhGFztT7J6Uc5HPZxJFTEhf+C
dO4Yl2Ln6HAISg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:47:55 2025 by rpki-client