Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
File: F5WshDzYupAYj3MTZSu1YSmbKW8.mft (raw, json)
Hash identifier: ROw7e0iIA9VaCqt+KC0qcvLqueiD7btt7IxLfQe2Tr4=
Subject key identifier: 5F:A2:08:B5:31:F4:18:DC:31:99:BF:B4:6C:45:22:A7:45:A7:1B:33
Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
Certificate issuer: /CN=1795ac843cd8ba90188f7313652bb561299b296f
Certificate serial: 0197594938CA4EAE3BDF495710DAA9255F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
Manifest number: 158C
Signing time: Tue 10 Jun 2025 10:01:00 +0000
Manifest this update: Tue 10 Jun 2025 10:01:00 +0000
Manifest next update: Wed 11 Jun 2025 10:01:00 +0000
Files and hashes: 1: 1n1Q04zTdHaXs9Co2veuwtfoAuY.roa (hash: afUxzktY8K6iIw5yy9bhALlArbdcu4aXL49GknMT04Q=)
2: F5WshDzYupAYj3MTZSu1YSmbKW8.crl (hash: 58z+S2qQP86oXag6sVOnxgRoZl84834X6c0rbLpx4KU=)
3: LkE6OmvUvLDEPLVXvhD8kSWchgI.roa (hash: TIEViqlGaXbwRIzS3a8WhThpumMDQCKC4sJFBNgCRkg=)
4: ZFdBgXtGzTSyBGSw60XB32cB-AA.roa (hash: 9AZAjPuYZlr2IIMZY508T3D+XaoUBtHO/4Z0E+AyZEw=)
5: _OFNw-GBnd-o_UkPPoF8Y7s25zo.roa (hash: YjFqSfXiAolAj9dxHs/dwz/o2yt4XxRKBGVbY9zdKmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:49:38:ca:4e:ae:3b:df:49:57:10:da:a9:25:5f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f
Validity
Not Before: Jun 10 10:01:00 2025 GMT
Not After : Jun 11 10:01:00 2025 GMT
Subject: CN=5fa208b531f418dc3199bfb46c4522a745a71b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c0:6f:91:a3:8d:1a:29:a1:7f:37:d1:2f:88:
0c:43:9a:b5:61:4f:6e:6e:e3:f5:1b:4b:fe:b8:39:
98:89:2a:9d:7e:a4:24:da:2d:2e:cf:b8:b8:59:01:
c0:d5:83:36:3d:c5:bb:f3:d4:c2:c9:99:92:de:ff:
99:3c:23:81:91:47:2b:92:43:4e:71:b4:59:5b:37:
98:e5:8d:57:ad:85:ba:ac:c0:f8:53:8c:b8:e6:eb:
d1:1e:c2:72:8b:62:83:9c:5d:67:cd:0f:6c:42:0c:
05:4d:02:c6:dc:3f:92:a5:4d:80:a3:a4:45:cb:da:
d6:ef:11:de:f9:a0:a4:b0:b6:8f:e3:f5:10:db:9f:
f1:b9:73:9a:11:e0:df:80:7b:95:9d:05:c1:5c:3d:
a5:1d:97:a4:73:f0:bf:aa:98:49:08:20:39:cf:01:
9a:8c:5d:15:60:1d:e8:8b:ce:e9:fa:b0:bf:44:63:
08:98:7e:3d:c2:5d:c3:e7:cf:4a:24:63:94:e9:da:
d4:37:05:91:9b:d4:3f:13:2d:52:ff:a7:b6:2e:21:
be:fa:10:64:2e:ab:93:48:f6:5d:02:08:de:4f:21:
04:34:63:94:45:e9:7b:46:9f:fa:46:c7:21:02:21:
0d:d3:ee:39:ac:ad:b2:67:61:88:64:07:33:bf:f6:
9b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A2:08:B5:31:F4:18:DC:31:99:BF:B4:6C:45:22:A7:45:A7:1B:33
X509v3 Authority Key Identifier:
keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fd:2b:1c:01:c9:7f:23:d4:5c:98:55:4d:b1:66:8e:0a:40:
52:94:c5:ab:7b:65:24:04:ca:0d:63:20:74:76:47:be:26:58:
23:d4:ef:13:38:0a:ad:41:8e:64:52:72:fe:85:fa:3f:6a:f4:
87:fa:11:07:aa:70:e7:c8:d2:bb:59:97:f3:e3:b2:2c:a1:a2:
59:0e:75:8c:7a:ea:c1:4a:93:dd:38:db:d0:ba:d7:ef:8c:81:
2e:ef:01:13:51:ea:b4:51:3b:c3:18:b0:4e:0c:8e:5d:c8:14:
5e:05:fa:51:04:6f:a6:f8:16:21:6e:65:21:2e:01:c3:32:6f:
77:43:14:8b:32:fe:04:d1:65:6e:1b:27:58:e5:9f:a1:9a:5a:
8a:6e:b3:6f:60:d4:d6:a1:1f:11:81:6e:2d:22:fc:6e:0a:c4:
74:36:c7:1e:4f:9e:69:25:be:dd:0c:d2:66:52:a1:33:85:f9:
51:0f:85:da:8c:47:02:d8:72:6e:38:f1:6f:d1:1d:bd:11:90:
b7:e1:dd:24:6d:89:8a:b8:04:40:f8:29:1b:e7:95:23:a8:47:
e8:ee:27:23:34:cb:db:04:92:2c:1e:ba:3b:25:d3:09:f5:ac:
76:1b:bf:ed:c4:39:58:10:56:ec:a1:60:3f:72:f7:14:33:42:
fb:2a:33:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZSTjKTq4730lXENqpJV8aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTVhYzg0M2NkOGJhOTAxODhmNzMxMzY1MmJiNTYxMjk5
YjI5NmYwHhcNMjUwNjEwMTAwMTAwWhcNMjUwNjExMTAwMTAwWjAzMTEwLwYDVQQD
Eyg1ZmEyMDhiNTMxZjQxOGRjMzE5OWJmYjQ2YzQ1MjJhNzQ1YTcxYjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsBvkaONGimhfzfRL4gMQ5q1YU9u
buP1G0v+uDmYiSqdfqQk2i0uz7i4WQHA1YM2PcW789TCyZmS3v+ZPCOBkUcrkkNO
cbRZWzeY5Y1XrYW6rMD4U4y45uvRHsJyi2KDnF1nzQ9sQgwFTQLG3D+SpU2Ao6RF
y9rW7xHe+aCksLaP4/UQ25/xuXOaEeDfgHuVnQXBXD2lHZekc/C/qphJCCA5zwGa
jF0VYB3oi87p+rC/RGMImH49wl3D589KJGOU6drUNwWRm9Q/Ey1S/6e2LiG++hBk
LquTSPZdAgjeTyEENGOURel7Rp/6RschAiEN0+45rK2yZ2GIZAczv/abxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+iCLUx9BjcMZm/tGxFIqdFpxszMB8GA1UdIwQY
MBaAFBeVrIQ82LqQGI9zE2UrtWEpmylvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS82NjgzZjQtM2VlYy00ZGNiLTg3ODct
NzMxYWJjNmY3NWNhLzEvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS82NjgzZjQtM2VlYy00ZGNiLTg3ODctNzMxYWJjNmY3NWNh
LzEvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/0rHAHJ
fyPUXJhVTbFmjgpAUpTFq3tlJATKDWMgdHZHviZYI9TvEzgKrUGOZFJy/oX6P2r0
h/oRB6pw58jSu1mX8+OyLKGiWQ51jHrqwUqT3Tjb0LrX74yBLu8BE1HqtFE7wxiw
TgyOXcgUXgX6UQRvpvgWIW5lIS4BwzJvd0MUizL+BNFlbhsnWOWfoZpaim6zb2DU
1qEfEYFuLSL8bgrEdDbHHk+eaSW+3QzSZlKhM4X5UQ+F2oxHAthybjjxb9EdvRGQ
t+HdJG2JirgEQPgpG+eVI6hH6O4nIzTL2wSSLB66OyXTCfWsdhu/7cQ5WBBW7KFg
P3L3FDNC+yoz0g==
-----END CERTIFICATE-----
Generated at Tue Jun 10 13:31:01 2025 by rpki-client