Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
File: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft (raw, json)
Hash identifier: IYkIweS0+yiAYgt9miE1cn7LpJi3/3D6+EHLEz0W51w=
Subject key identifier: F7:4C:58:B8:BA:33:82:D8:C4:5E:4D:7D:64:C5:DE:AD:64:07:85:E9
Authority key identifier: D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
Certificate issuer: /CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Certificate serial: 019747E7AA19C576D3A24A1DF8B1F4109717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
Manifest number: 07A1
Signing time: Sat 07 Jun 2025 01:00:54 +0000
Manifest this update: Sat 07 Jun 2025 01:00:54 +0000
Manifest next update: Sun 08 Jun 2025 01:00:54 +0000
Files and hashes: 1: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl (hash: Fo3z3BZ3pv/1kYOkU8jrpTyNrP0S8bYcQnC9nJQnLeY=)
2: YRQ4Vg3A1i1QaO-e977IcW6KB9E.roa (hash: rc17/JwW2r6jYEgRn/1E0O8jtu0CDbAtQ0C5kFjlEwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:aa:19:c5:76:d3:a2:4a:1d:f8:b1:f4:10:97:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Validity
Not Before: Jun 7 01:00:54 2025 GMT
Not After : Jun 8 01:00:54 2025 GMT
Subject: CN=f74c58b8ba3382d8c45e4d7d64c5dead640785e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:25:ab:4c:31:55:7f:54:47:fc:7a:c6:6a:
58:52:84:25:52:86:03:d8:ef:36:44:9a:2b:ba:46:
f7:28:fb:1c:82:75:73:9b:b1:44:17:81:52:95:60:
13:7d:59:36:47:16:ba:e8:92:b3:c2:94:d4:b6:ce:
c9:ed:7f:81:0a:b5:c0:11:18:17:e3:24:e4:a4:c7:
ba:8c:9b:b7:de:dd:f6:85:49:ac:51:f8:06:95:2f:
0f:da:d9:88:70:64:f9:80:aa:12:ea:d0:84:71:c0:
6a:12:5b:be:43:13:75:f9:d4:16:63:1c:93:12:5f:
b5:b5:97:3c:3d:49:49:3e:40:99:9b:ce:ef:30:2a:
27:29:a9:71:5b:57:a1:38:12:6d:ae:06:76:f2:cc:
f5:fb:ec:4f:b6:7c:ae:ca:90:9d:55:91:ea:c8:d3:
c6:a8:04:26:83:2b:c9:74:da:a2:bc:3a:1c:87:97:
92:8f:06:7a:42:ff:4a:49:45:db:e8:e4:1c:db:a7:
dc:1b:e1:7f:e3:cb:98:05:13:95:2f:23:ff:76:b6:
9c:7b:ed:68:16:39:25:c8:c5:21:71:0a:d5:8f:d9:
d5:ac:32:46:78:10:55:fe:e8:b3:bb:06:e3:15:6d:
8a:f3:5e:77:d7:5b:47:93:d6:2a:ea:e7:01:7a:15:
b1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4C:58:B8:BA:33:82:D8:C4:5E:4D:7D:64:C5:DE:AD:64:07:85:E9
X509v3 Authority Key Identifier:
keyid:D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6a:1e:ce:dc:aa:a5:ed:0a:71:e8:df:51:ed:aa:13:59:47:
02:fc:ff:e5:b7:52:7f:00:8f:cf:13:53:99:0f:20:47:88:6b:
ce:22:12:8e:e2:4f:d8:7c:af:77:fb:49:be:4b:d7:ad:2d:f8:
c1:93:a9:c6:0c:5f:01:03:b1:e4:df:24:22:cf:1c:ce:d8:a4:
96:63:37:66:ac:d3:9c:9a:36:16:6a:0d:f0:4e:f9:19:9a:d0:
8c:8d:91:52:4c:1a:1a:b8:a9:d7:ff:31:45:a9:d7:fa:2c:ba:
75:01:a5:3a:4a:6f:83:09:7f:5e:cd:1a:25:6f:0b:61:f9:55:
9d:4e:e9:f9:ed:da:84:03:18:03:25:3b:c4:78:aa:4a:b6:ff:
56:d9:40:cc:f3:82:78:1a:f9:b1:43:59:b2:02:19:ac:71:6b:
53:98:7c:86:b9:e7:16:9b:df:aa:6b:a5:df:2f:8f:62:63:82:
f0:19:8b:b9:7a:c8:39:c9:d0:8d:74:0f:f5:c2:c9:91:74:e7:
6d:f8:6a:56:bf:98:f8:c9:02:04:35:ff:1d:7f:4c:f6:98:76:
ce:7a:b8:6e:0f:cb:e0:38:4a:df:43:c1:05:db:55:08:59:b2:
c7:4d:d1:1d:09:b5:ba:02:62:4b:ac:48:5c:22:6f:53:ec:e8:
81:69:69:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdH56oZxXbTokod+LH0EJcXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMWU0YThjZDI4OThjNWRlNmQ2NjI1ZjEwYzRiMmU4NWY0
NjFmNzgwHhcNMjUwNjA3MDEwMDU0WhcNMjUwNjA4MDEwMDU0WjAzMTEwLwYDVQQD
EyhmNzRjNThiOGJhMzM4MmQ4YzQ1ZTRkN2Q2NGM1ZGVhZDY0MDc4NWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEslq0wxVX9UR/x6xmpYUoQlUoYD
2O82RJorukb3KPscgnVzm7FEF4FSlWATfVk2Rxa66JKzwpTUts7J7X+BCrXAERgX
4yTkpMe6jJu33t32hUmsUfgGlS8P2tmIcGT5gKoS6tCEccBqElu+QxN1+dQWYxyT
El+1tZc8PUlJPkCZm87vMConKalxW1ehOBJtrgZ28sz1++xPtnyuypCdVZHqyNPG
qAQmgyvJdNqivDoch5eSjwZ6Qv9KSUXb6OQc26fcG+F/48uYBROVLyP/drace+1o
FjklyMUhcQrVj9nVrDJGeBBV/uizuwbjFW2K815311tHk9Yq6ucBehWx/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdMWLi6M4LYxF5NfWTF3q1kB4XpMB8GA1UdIwQY
MBaAFNMeSozSiYxd5tZiXxDEsuhfRh94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHg1S2pOS0pqRjNtMW1KZkVNU3k2RjlHSDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS85ZmFjYWUtZmQ5MC00YjRjLWEyZWMt
OTEyN2U4MTA1Njk5LzEvMHg1S2pOS0pqRjNtMW1KZkVNU3k2RjlHSDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS85ZmFjYWUtZmQ5MC00YjRjLWEyZWMtOTEyN2U4MTA1Njk5
LzEvMHg1S2pOS0pqRjNtMW1KZkVNU3k2RjlHSDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2oeztyq
pe0KcejfUe2qE1lHAvz/5bdSfwCPzxNTmQ8gR4hrziISjuJP2Hyvd/tJvkvXrS34
wZOpxgxfAQOx5N8kIs8cztiklmM3ZqzTnJo2FmoN8E75GZrQjI2RUkwaGrip1/8x
RanX+iy6dQGlOkpvgwl/Xs0aJW8LYflVnU7p+e3ahAMYAyU7xHiqSrb/VtlAzPOC
eBr5sUNZsgIZrHFrU5h8hrnnFpvfqmul3y+PYmOC8BmLuXrIOcnQjXQP9cLJkXTn
bfhqVr+Y+MkCBDX/HX9M9ph2znq4bg/L4DhK30PBBdtVCFmyx03RHQm1ugJiS6xI
XCJvU+zogWlpgw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:16:49 2025 by rpki-client