Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
File: 5UGkwVK194bWI9hcQUZSmc3aM4k.mft (raw, json)
Hash identifier: 9ESfa44jWCSUQM8fCRZtlbe/PbFsu6KZsUPxtgqqszY=
Subject key identifier: DD:DD:AA:AE:75:35:8E:14:C4:05:F1:A3:DF:FF:F8:78:CB:6B:07:BE
Authority key identifier: E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
Certificate issuer: /CN=e541a4c152b5f786d623d85c41465299cdda3389
Certificate serial: 019747E788ABDD28FDB3FC6A0722D85F4617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 01:00:45 +0000
Manifest this update: Sat 07 Jun 2025 01:00:45 +0000
Manifest next update: Sun 08 Jun 2025 01:00:45 +0000
Files and hashes: 1: 5UGkwVK194bWI9hcQUZSmc3aM4k.crl (hash: SsCdoLV/srdiQ5lzHtyc7x1YeVbMzlVQfrKJsP0NPSM=)
2: kenow9ooVwL0t4IuHSVvvQIsN8M.roa (hash: tJkXtVd1TBPTWkBnhiKcyLiHlQeoQgvy5+UbWV83vUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:88:ab:dd:28:fd:b3:fc:6a:07:22:d8:5f:46:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e541a4c152b5f786d623d85c41465299cdda3389
Validity
Not Before: Jun 7 01:00:45 2025 GMT
Not After : Jun 8 01:00:45 2025 GMT
Subject: CN=ddddaaae75358e14c405f1a3dffff878cb6b07be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:4b:b4:37:7d:0f:c9:d0:18:ef:5b:92:b4:
25:c1:75:2b:0a:b5:36:a0:42:45:e1:58:b5:64:44:
07:c7:95:24:a6:42:bc:c8:ca:8b:74:25:0c:2d:4f:
a2:7d:af:11:76:06:7e:8b:52:bf:e0:46:d8:1b:fd:
83:fc:78:c3:bf:a9:8a:47:ab:7d:6c:ed:30:9a:ea:
1f:3e:04:c4:45:ba:e8:b1:1f:09:9a:37:90:04:8d:
7b:84:29:eb:11:b2:52:2a:90:5e:ef:0c:0e:b5:ec:
00:47:70:42:e1:a4:20:02:19:6a:f2:5e:f5:c3:d8:
3f:4b:4e:f3:a6:24:a8:0e:27:8d:cc:62:55:34:04:
b3:7b:a1:86:3f:d6:65:8b:e4:db:da:4c:f8:bd:84:
7a:ab:20:03:45:5a:b2:42:b8:76:d7:c5:1e:13:15:
e1:15:0b:d8:d2:32:54:3f:45:32:c1:da:1f:e4:b6:
78:c8:83:10:f2:94:d7:ff:c1:b1:4e:8c:52:a7:05:
59:5d:30:c2:31:a5:07:90:11:0b:83:f7:a2:46:cb:
8e:7b:3f:d2:32:4d:6a:03:6e:b5:38:20:0c:a5:20:
a8:43:7a:4f:d8:3b:15:5c:53:74:57:e9:a5:8a:7d:
ad:8b:86:54:70:c7:d7:e6:d1:8a:ed:13:1d:2d:2c:
be:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DD:AA:AE:75:35:8E:14:C4:05:F1:A3:DF:FF:F8:78:CB:6B:07:BE
X509v3 Authority Key Identifier:
keyid:E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:51:4e:ad:4f:e5:40:00:96:b6:ef:0e:58:15:17:a6:95:4d:
d1:0a:1d:72:4c:2b:71:41:c4:61:68:7c:84:9a:54:25:db:fb:
86:5f:79:43:5a:db:30:b4:66:2c:43:94:74:26:12:d8:87:62:
6b:0b:2a:25:ac:34:20:3e:14:c6:bc:e5:14:d3:aa:2f:f1:55:
cd:58:f0:e7:1a:7e:8e:63:62:75:7b:0f:ed:2b:42:e6:43:fa:
4a:24:c1:33:c9:f4:6c:87:35:67:ad:46:de:6a:ca:85:23:d9:
59:62:27:d4:f8:aa:7e:96:cc:aa:e5:7d:b1:98:d1:49:fa:c7:
a5:42:77:6b:39:26:dd:66:7d:3f:ff:8a:f6:0c:7d:8c:21:4e:
ae:97:ec:b1:18:79:e5:8a:32:2a:b2:36:83:4d:a1:8a:07:ff:
33:ef:e8:b1:c9:9a:24:e1:49:62:12:ca:66:f2:d7:52:d4:ea:
dd:27:91:d1:60:61:fc:ef:3d:97:34:cd:63:f6:da:df:a7:52:
e9:81:d1:7a:96:20:3d:b1:ca:dd:41:35:78:5c:c7:ec:29:42:
6c:de:d6:51:03:52:0c:cc:fa:3a:58:80:cc:a6:eb:29:3b:f9:
08:a8:31:50:0a:01:be:d4:d2:75:28:a5:53:d4:08:b0:ba:5f:
73:42:3c:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdH54ir3Sj9s/xqByLYX0YXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NDFhNGMxNTJiNWY3ODZkNjIzZDg1YzQxNDY1Mjk5Y2Rk
YTMzODkwHhcNMjUwNjA3MDEwMDQ1WhcNMjUwNjA4MDEwMDQ1WjAzMTEwLwYDVQQD
EyhkZGRkYWFhZTc1MzU4ZTE0YzQwNWYxYTNkZmZmZjg3OGNiNmIwN2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+JLtDd9D8nQGO9bkrQlwXUrCrU2
oEJF4Vi1ZEQHx5UkpkK8yMqLdCUMLU+ifa8RdgZ+i1K/4EbYG/2D/HjDv6mKR6t9
bO0wmuofPgTERbrosR8JmjeQBI17hCnrEbJSKpBe7wwOtewAR3BC4aQgAhlq8l71
w9g/S07zpiSoDieNzGJVNASze6GGP9Zli+Tb2kz4vYR6qyADRVqyQrh218UeExXh
FQvY0jJUP0Uywdof5LZ4yIMQ8pTX/8GxToxSpwVZXTDCMaUHkBELg/eiRsuOez/S
Mk1qA261OCAMpSCoQ3pP2DsVXFN0V+mlin2ti4ZUcMfX5tGK7RMdLSy+3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3dqq51NY4UxAXxo9//+HjLawe+MB8GA1UdIwQY
MBaAFOVBpMFStfeG1iPYXEFGUpnN2jOJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVVHa3dWSzE5NGJXSTloY1FVWlNtYzNhTTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kNzEyNjktNGI1Ni00NTcyLWE3MTEt
ZDg0ZWNiMjUwNWM0LzEvNVVHa3dWSzE5NGJXSTloY1FVWlNtYzNhTTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9kNzEyNjktNGI1Ni00NTcyLWE3MTEtZDg0ZWNiMjUwNWM0
LzEvNVVHa3dWSzE5NGJXSTloY1FVWlNtYzNhTTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKVFOrU/l
QACWtu8OWBUXppVN0QodckwrcUHEYWh8hJpUJdv7hl95Q1rbMLRmLEOUdCYS2Idi
awsqJaw0ID4UxrzlFNOqL/FVzVjw5xp+jmNidXsP7StC5kP6SiTBM8n0bIc1Z61G
3mrKhSPZWWIn1PiqfpbMquV9sZjRSfrHpUJ3azkm3WZ9P/+K9gx9jCFOrpfssRh5
5YoyKrI2g02higf/M+/oscmaJOFJYhLKZvLXUtTq3SeR0WBh/O89lzTNY/ba36dS
6YHRepYgPbHK3UE1eFzH7ClCbN7WUQNSDMz6OliAzKbrKTv5CKgxUAoBvtTSdSil
U9QIsLpfc0I8AA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:48:48 2025 by rpki-client