Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
File: i5zFfKhHI67ChBFF9vfTAb3zW6w.mft (raw, json)
Hash identifier: KnfvyUNpyELKHU1MS+zKidTCE0znbyNgjTG9RORbn/I=
Subject key identifier: C8:B1:5F:63:7D:80:19:08:31:C2:E9:EE:15:43:54:26:C1:F0:7B:E7
Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
Certificate issuer: /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Certificate serial: 0197499F3596625A0FD858699151B8B8D49A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
Manifest number: 03AB
Signing time: Sat 07 Jun 2025 09:00:59 +0000
Manifest this update: Sat 07 Jun 2025 09:00:59 +0000
Manifest next update: Sun 08 Jun 2025 09:00:59 +0000
Files and hashes: 1: i5zFfKhHI67ChBFF9vfTAb3zW6w.crl (hash: J3cpXfda+cf43HI30AVmOkU2/lgnLhYE36e5nxmtSu0=)
2: tCW9fwISpjkcZibIaKBsjXs7N7A.roa (hash: NwxiC6aogmrL5itM5Y4be2nBp9O9LLOH8w2QrDP5u38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:35:96:62:5a:0f:d8:58:69:91:51:b8:b8:d4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Validity
Not Before: Jun 7 09:00:59 2025 GMT
Not After : Jun 8 09:00:59 2025 GMT
Subject: CN=c8b15f637d80190831c2e9ee15435426c1f07be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:76:99:a4:e1:d2:5d:ae:3e:69:f9:51:8d:
86:ef:96:05:5f:33:b6:85:14:64:eb:fc:fc:bf:7f:
73:fb:c2:48:0a:c8:74:1b:d0:48:69:fd:25:57:e4:
ac:ab:a0:36:c7:d9:83:b7:50:60:45:2b:d0:cb:fe:
49:25:a7:54:d5:79:fd:6c:25:98:22:aa:37:99:7a:
ee:23:98:ca:a3:1f:02:ef:34:84:e0:ed:49:aa:8f:
79:4b:b9:64:b8:e2:1f:e6:d3:88:0e:4b:ec:7d:00:
47:88:82:5b:cf:de:d0:4a:42:ac:b2:d0:3c:22:f7:
a6:15:c0:46:f7:a1:70:7e:ae:f8:7e:40:39:ba:48:
62:70:ef:94:88:91:be:bb:e2:24:37:e7:f0:05:71:
9d:6d:a9:63:3f:d8:e7:45:a9:98:18:1d:f5:d1:a1:
32:b9:db:98:47:60:ee:e5:3d:91:99:03:c3:e1:85:
10:30:80:1a:6c:8c:4c:33:0e:e6:8b:ce:95:12:82:
29:10:ec:03:38:a1:22:ac:68:05:83:bb:2d:84:a3:
9d:95:10:1c:1a:5b:75:44:49:20:8c:a0:5a:22:76:
23:9e:de:b4:a4:e0:ca:57:e4:13:2a:85:40:8c:5b:
9d:4e:b1:8d:5b:ba:46:f0:81:46:de:e7:19:40:29:
57:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B1:5F:63:7D:80:19:08:31:C2:E9:EE:15:43:54:26:C1:F0:7B:E7
X509v3 Authority Key Identifier:
keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8f:c1:04:c8:67:9f:7a:be:95:ec:8d:b7:f3:ec:ec:78:92:
ab:e3:e0:88:25:6b:fa:21:a2:12:b7:57:69:12:ff:07:3a:5f:
e8:8d:3e:15:66:38:4f:a9:b0:fc:46:4d:45:9e:8f:de:90:21:
00:ed:05:d8:ea:b8:f3:26:4e:b6:e8:6b:5c:26:44:d6:0e:23:
a5:21:cb:dd:fa:01:b4:31:33:cb:40:11:3a:3c:be:03:02:e2:
c2:97:8d:ae:a8:72:6a:ed:bb:6a:28:c6:3d:61:27:e5:68:1b:
04:6b:f0:6f:5f:4b:2b:79:e1:e5:2b:69:fe:52:ac:e7:69:45:
8c:b1:bd:a9:5a:d9:63:6c:b0:19:b9:9b:bc:bc:83:f0:d4:22:
6c:27:3c:6a:57:13:c9:2b:3d:b7:1b:0c:bb:32:71:60:d5:37:
d4:a8:b5:cb:d7:94:91:48:a2:5c:8c:86:81:a5:30:c7:ff:d7:
ca:48:a4:2c:19:cd:0d:48:32:00:b9:fc:f6:7f:8e:a0:61:1d:
11:6b:84:91:3e:7d:9c:f1:ee:ba:ed:6b:0d:65:e4:09:59:93:
99:a9:b1:ce:68:ca:03:fc:a3:1c:f8:2c:80:fa:74:33:dc:00:
2b:04:6b:2b:e1:f0:1c:1b:9e:35:d1:9b:4f:26:91:fb:45:6a:
f2:78:eb:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJnzWWYloP2FhpkVG4uNSaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOWNjNTdjYTg0NzIzYWVjMjg0MTE0NWY2ZjdkMzAxYmRm
MzViYWMwHhcNMjUwNjA3MDkwMDU5WhcNMjUwNjA4MDkwMDU5WjAzMTEwLwYDVQQD
EyhjOGIxNWY2MzdkODAxOTA4MzFjMmU5ZWUxNTQzNTQyNmMxZjA3YmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykB2maTh0l2uPmn5UY2G75YFXzO2
hRRk6/z8v39z+8JICsh0G9BIaf0lV+Ssq6A2x9mDt1BgRSvQy/5JJadU1Xn9bCWY
Iqo3mXruI5jKox8C7zSE4O1Jqo95S7lkuOIf5tOIDkvsfQBHiIJbz97QSkKsstA8
IvemFcBG96Fwfq74fkA5ukhicO+UiJG+u+IkN+fwBXGdbaljP9jnRamYGB310aEy
uduYR2Du5T2RmQPD4YUQMIAabIxMMw7mi86VEoIpEOwDOKEirGgFg7sthKOdlRAc
Glt1REkgjKBaInYjnt60pODKV+QTKoVAjFudTrGNW7pG8IFG3ucZQClXJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMixX2N9gBkIMcLp7hVDVCbB8HvnMB8GA1UdIwQY
MBaAFIucxXyoRyOuwoQRRfb30wG981usMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTV6RmZLaEhJNjdDaEJGRjl2ZlRBYjN6VzZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zOGU2ZjctNGUzNS00YzJkLTk5Nzct
MDk3Y2I4ZGYyYTI0LzEvaTV6RmZLaEhJNjdDaEJGRjl2ZlRBYjN6VzZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zOGU2ZjctNGUzNS00YzJkLTk5NzctMDk3Y2I4ZGYyYTI0
LzEvaTV6RmZLaEhJNjdDaEJGRjl2ZlRBYjN6VzZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbI/BBMhn
n3q+leyNt/Ps7HiSq+PgiCVr+iGiErdXaRL/Bzpf6I0+FWY4T6mw/EZNRZ6P3pAh
AO0F2Oq48yZOtuhrXCZE1g4jpSHL3foBtDEzy0AROjy+AwLiwpeNrqhyau27aijG
PWEn5WgbBGvwb19LK3nh5Stp/lKs52lFjLG9qVrZY2ywGbmbvLyD8NQibCc8alcT
ySs9txsMuzJxYNU31Ki1y9eUkUiiXIyGgaUwx//XykikLBnNDUgyALn89n+OoGEd
EWuEkT59nPHuuu1rDWXkCVmTmamxzmjKA/yjHPgsgPp0M9wAKwRrK+HwHBueNdGb
TyaR+0Vq8njrvQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:28:39 2025 by rpki-client