Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
File: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft (raw, json)
Hash identifier: GVlkAEbIzU3ZwywoNA7++q/vZHh2pf53+t+2Aq7269E=
Subject key identifier: F6:67:05:2E:18:57:7B:DE:E6:AE:D2:CE:EC:C4:FB:F9:1A:A0:70:DE
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Certificate issuer: /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial: 01974B8DAAC12AD9339BCD6AD67E7E112841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 18:01:04 +0000
Manifest this update: Sat 07 Jun 2025 18:01:04 +0000
Manifest next update: Sun 08 Jun 2025 18:01:04 +0000
Files and hashes: 1: 3cpoDZVsvW-d4pgtfjxgApATZ7Y.roa (hash: xAPK20pv8js5ddYc90CC85IhpMi19I8Q/fSeN00Op6M=)
2: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl (hash: zuqu8NjoRf3NqykAGuK+tkuasplfdTeig6kFk7z9PGU=)
3: 9Np_qqUHNhRugA_1xB2ZI6GkPRc.roa (hash: VZhCCAUVQwLPClsCIIsWXL6uNJYCuqsQS18/K+wYTxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:aa:c1:2a:d9:33:9b:cd:6a:d6:7e:7e:11:28:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
Validity
Not Before: Jun 7 18:01:04 2025 GMT
Not After : Jun 8 18:01:04 2025 GMT
Subject: CN=f667052e18577bdee6aed2ceecc4fbf91aa070de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b1:31:60:b3:c7:07:ef:37:1e:3a:fb:a4:c0:
05:95:3c:df:e4:fb:7d:a9:d1:74:65:d3:f1:a8:d0:
b1:e8:7f:82:52:38:cf:e4:e0:c0:57:f9:0a:5f:1b:
91:dd:77:f8:e5:8b:30:9b:8f:27:1a:1c:89:67:fc:
00:25:6b:34:f6:67:8a:70:4e:4f:47:ab:b5:72:e5:
a8:9b:63:e9:8b:38:ce:6b:f3:5a:18:6d:eb:f9:cb:
c7:12:24:1e:3f:6a:92:2e:f4:29:0b:7b:b7:85:e7:
fe:50:29:34:b9:b5:ab:e0:33:4a:70:55:15:a1:16:
06:09:b5:41:b7:e4:de:04:2a:b1:ec:8e:59:e3:4a:
a2:f6:1f:2d:88:75:c5:c3:82:77:eb:f2:b0:b2:72:
86:0e:c2:27:6a:37:e8:28:cd:2a:e4:e7:0f:56:5e:
54:26:27:fb:88:1e:56:be:0e:1b:dc:ee:d5:58:7d:
6f:28:df:e9:f7:a6:de:c0:ab:94:39:3d:e7:0e:35:
b2:40:9d:3b:73:b7:51:7b:9e:57:b2:9e:af:09:d0:
71:e2:f8:fe:87:7e:31:c5:36:1a:ae:b7:0a:9b:77:
4e:2d:f6:97:99:8b:16:d2:9e:0b:e3:ea:21:f3:21:
5f:1f:e2:f8:2b:c1:c4:4a:78:ec:9a:f4:b3:c7:05:
53:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:67:05:2E:18:57:7B:DE:E6:AE:D2:CE:EC:C4:FB:F9:1A:A0:70:DE
X509v3 Authority Key Identifier:
keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:61:43:4a:16:ce:96:a9:65:f2:93:20:4e:6e:68:e4:22:28:
95:20:d9:ef:5d:ed:77:57:7c:6d:6a:a0:cd:2c:57:9f:ce:43:
a6:5c:b1:ce:21:3e:9a:2e:dc:2b:4e:24:2e:ee:ca:1d:1f:43:
85:f2:83:c8:d9:be:fd:86:d1:4f:83:16:97:b7:a7:7b:cd:c4:
df:10:a3:38:7c:b9:99:fd:74:61:fa:42:60:18:97:9e:e1:74:
e8:b4:1c:82:b0:2a:18:ca:67:37:82:c0:40:21:eb:84:a1:83:
30:32:2e:ed:28:87:87:b3:26:94:0b:0b:9c:69:b3:05:00:2e:
11:1d:62:b4:fe:d2:5c:e7:d4:39:10:db:f7:57:10:cc:df:c4:
3f:e6:6d:7e:95:92:55:15:1e:bc:d6:41:36:c9:ba:f7:2a:29:
46:96:75:41:dd:6e:7b:2f:f4:cb:7a:23:f7:27:2f:fe:0c:a2:
ee:24:92:9f:6b:9b:5b:bd:f9:6d:91:d6:e5:dd:22:ad:1d:f9:
2c:c3:82:a6:c5:c4:78:f8:78:a4:6d:8e:03:e4:83:c7:a9:1c:
33:65:20:af:9d:81:06:19:21:ac:6f:0b:69:3f:44:1a:f1:1a:
d5:49:c1:38:72:fd:1b:61:bc:e4:c8:9a:8f:e9:3d:1f:f0:17:
be:57:d2:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjarBKtkzm81q1n5+EShBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0M2RkNDI0Mzg0NzU5YjVlODU1OTU4MjUwMTliNjlmZTli
ZjkyMjAwHhcNMjUwNjA3MTgwMTA0WhcNMjUwNjA4MTgwMTA0WjAzMTEwLwYDVQQD
EyhmNjY3MDUyZTE4NTc3YmRlZTZhZWQyY2VlY2M0ZmJmOTFhYTA3MGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbExYLPHB+83Hjr7pMAFlTzf5Pt9
qdF0ZdPxqNCx6H+CUjjP5ODAV/kKXxuR3Xf45Yswm48nGhyJZ/wAJWs09meKcE5P
R6u1cuWom2PpizjOa/NaGG3r+cvHEiQeP2qSLvQpC3u3hef+UCk0ubWr4DNKcFUV
oRYGCbVBt+TeBCqx7I5Z40qi9h8tiHXFw4J36/KwsnKGDsInajfoKM0q5OcPVl5U
Jif7iB5Wvg4b3O7VWH1vKN/p96bewKuUOT3nDjWyQJ07c7dRe55Xsp6vCdBx4vj+
h34xxTYarrcKm3dOLfaXmYsW0p4L4+oh8yFfH+L4K8HESnjsmvSzxwVTXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZnBS4YV3ve5q7SzuzE+/kaoHDeMB8GA1UdIwQY
MBaAFOQ91CQ4R1m16FWVglAZtp/pv5IgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUQzVUpEaEhXYlhvVlpXQ1VCbTJuLW1fa2lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80YjJjZjktZDhlZC00YTI3LTkzYmEt
OTNiNjkxZWUxY2NlLzEvNUQzVUpEaEhXYlhvVlpXQ1VCbTJuLW1fa2lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy80YjJjZjktZDhlZC00YTI3LTkzYmEtOTNiNjkxZWUxY2Nl
LzEvNUQzVUpEaEhXYlhvVlpXQ1VCbTJuLW1fa2lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0WFDShbO
lqll8pMgTm5o5CIolSDZ713td1d8bWqgzSxXn85DplyxziE+mi7cK04kLu7KHR9D
hfKDyNm+/YbRT4MWl7ene83E3xCjOHy5mf10YfpCYBiXnuF06LQcgrAqGMpnN4LA
QCHrhKGDMDIu7SiHh7MmlAsLnGmzBQAuER1itP7SXOfUORDb91cQzN/EP+ZtfpWS
VRUevNZBNsm69yopRpZ1Qd1uey/0y3oj9ycv/gyi7iSSn2ubW735bZHW5d0irR35
LMOCpsXEePh4pG2OA+SDx6kcM2Ugr52BBhkhrG8LaT9EGvEa1UnBOHL9G2G85Mia
j+k9H/AXvlfSkw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:10:37 2025 by rpki-client