Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
File: s5xw9844MbjyzOidsUon3aoOmcI.mft (raw, json)
Hash identifier: WKMXsCB+qkuEcFkxZ5xMWKCJeINFkp3LC0E2Sn7Mwoo=
Subject key identifier: C2:B1:CA:C4:55:3B:53:1F:B1:10:B4:90:1D:F6:37:6D:BD:A7:83:07
Authority key identifier: B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
Certificate issuer: /CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Certificate serial: 01973FF764C8CA7BB8D75D38C84BFA0D5E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
Manifest number: 1577
Signing time: Thu 05 Jun 2025 12:01:07 +0000
Manifest this update: Thu 05 Jun 2025 12:01:07 +0000
Manifest next update: Fri 06 Jun 2025 12:01:07 +0000
Files and hashes: 1: LrWKN25r7tthSunY280tDynhnBc.roa (hash: ub2N6aH2MytmGSybvR7g8dPW4ivkCLOi0sBC/uuJMOY=)
2: PQmLIVoeSOIwIoKz3RvYJrpb2xM.roa (hash: hlojli+o3fpj5DjUXvEZS5bdJMfuplLhFYrIdheEs5Q=)
3: cIwYeOItEbowyL16Fsd6dW6MTNw.roa (hash: 51f1FdiiRo4Oc5gbYzr2w1gPQFtv0wp9QesOtcNGq5w=)
4: s5xw9844MbjyzOidsUon3aoOmcI.crl (hash: AuIzkBuXx43Izqx2rJaV4N43PrJMNfgpu4wF3dVIBS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:f7:64:c8:ca:7b:b8:d7:5d:38:c8:4b:fa:0d:5e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Validity
Not Before: Jun 5 12:01:07 2025 GMT
Not After : Jun 6 12:01:07 2025 GMT
Subject: CN=c2b1cac4553b531fb110b4901df6376dbda78307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:91:c3:11:74:c6:99:df:18:0d:68:9f:9c:36:
fa:10:ac:79:02:64:78:1d:11:d7:92:02:44:59:6f:
e6:6b:4c:a9:52:d9:31:5f:b8:d6:7a:4b:ce:7f:ca:
67:c1:1f:8b:59:c9:ef:43:3f:09:41:df:41:c8:7c:
7f:fd:89:f1:1f:77:c4:a0:8d:ca:06:77:c7:c8:a4:
76:36:35:eb:bc:00:57:70:52:61:7d:b7:24:eb:32:
33:d4:d2:d5:a5:84:95:e3:07:94:11:17:65:93:3f:
85:a7:a3:c6:89:99:a7:cb:5f:4c:71:80:52:48:68:
37:f0:d7:4c:84:d3:7c:81:ca:f1:1d:c5:c6:29:d3:
7e:2b:0e:a0:bb:12:2c:01:98:9c:de:22:31:e2:6c:
66:8d:99:de:a1:29:43:71:31:8d:87:6a:ac:4c:85:
a6:52:e8:5c:42:00:74:f6:9f:07:4b:5e:65:f6:61:
35:15:96:cb:55:c3:2f:e6:11:c3:e5:07:94:a0:fb:
ab:63:31:c0:83:2d:ad:02:79:94:11:bf:30:9c:73:
d5:82:28:88:27:16:41:5c:27:c3:4d:1f:e6:83:c4:
54:b8:97:f0:58:6a:25:03:42:87:f1:35:a7:82:7f:
02:ca:20:91:db:20:7f:8a:7f:d7:a7:dd:3e:d0:0a:
78:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B1:CA:C4:55:3B:53:1F:B1:10:B4:90:1D:F6:37:6D:BD:A7:83:07
X509v3 Authority Key Identifier:
keyid:B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:6a:d7:58:05:1f:ff:e2:73:84:c4:70:29:9c:a6:20:b7:fa:
12:2d:d7:c1:fa:93:12:2e:32:13:e1:6c:5c:53:d3:dc:7e:87:
83:bc:00:1a:98:95:8a:1b:3a:ab:89:2a:45:d3:89:35:71:d0:
cb:2f:d0:a9:79:17:4a:ac:5b:00:57:61:19:24:47:1f:98:06:
fd:fe:8e:2b:41:47:05:90:35:f6:d3:08:d6:83:f2:03:e9:e0:
15:54:b8:a8:5b:56:df:8e:95:7e:b2:1a:f6:99:a6:b2:f9:f1:
e6:30:12:fd:7d:65:6f:bb:63:93:fa:09:21:02:68:b8:69:e2:
23:ea:9d:ab:d9:11:06:01:a3:3a:9a:ac:7e:27:ac:d7:f4:e6:
58:f7:04:1d:76:ce:9b:4b:07:90:a7:fc:5c:1e:96:7b:fb:e3:
9c:15:1e:e9:60:01:18:24:45:8c:68:97:f4:2c:77:d9:60:a7:
60:f8:59:a8:b0:36:8e:44:a7:f5:65:e3:6b:8f:11:95:8f:0f:
03:c4:42:03:c0:c8:a0:d2:3d:d5:46:ec:77:3b:ad:3c:25:bd:
58:6c:bd:dc:f4:d1:94:83:76:71:82:91:b1:d7:9d:41:4f:26:
e0:b1:53:2e:89:8b:2b:ba:17:68:cd:d8:37:3e:eb:84:17:85:
9b:6e:8d:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc/92TIynu41104yEv6DV6DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOWM3MGY3Y2UzODMxYjhmMmNjZTg5ZGIxNGEyN2RkYWEw
ZTk5YzIwHhcNMjUwNjA1MTIwMTA3WhcNMjUwNjA2MTIwMTA3WjAzMTEwLwYDVQQD
EyhjMmIxY2FjNDU1M2I1MzFmYjExMGI0OTAxZGY2Mzc2ZGJkYTc4MzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JHDEXTGmd8YDWifnDb6EKx5AmR4
HRHXkgJEWW/ma0ypUtkxX7jWekvOf8pnwR+LWcnvQz8JQd9ByHx//YnxH3fEoI3K
BnfHyKR2NjXrvABXcFJhfbck6zIz1NLVpYSV4weUERdlkz+Fp6PGiZmny19McYBS
SGg38NdMhNN8gcrxHcXGKdN+Kw6guxIsAZic3iIx4mxmjZneoSlDcTGNh2qsTIWm
UuhcQgB09p8HS15l9mE1FZbLVcMv5hHD5QeUoPurYzHAgy2tAnmUEb8wnHPVgiiI
JxZBXCfDTR/mg8RUuJfwWGolA0KH8TWngn8CyiCR2yB/in/Xp90+0Ap47wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKxysRVO1MfsRC0kB32N229p4MHMB8GA1UdIwQY
MBaAFLOccPfOODG48szonbFKJ92qDpnCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczV4dzk4NDRNYmp5ek9pZHNVb24zYW9PbWNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lOTE4MTMtOTI3ZS00N2E1LWI3MDIt
ZGU1Mzc4NDYxZmVlLzEvczV4dzk4NDRNYmp5ek9pZHNVb24zYW9PbWNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lOTE4MTMtOTI3ZS00N2E1LWI3MDItZGU1Mzc4NDYxZmVl
LzEvczV4dzk4NDRNYmp5ek9pZHNVb24zYW9PbWNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA32rXWAUf
/+JzhMRwKZymILf6Ei3XwfqTEi4yE+FsXFPT3H6Hg7wAGpiVihs6q4kqRdOJNXHQ
yy/QqXkXSqxbAFdhGSRHH5gG/f6OK0FHBZA19tMI1oPyA+ngFVS4qFtW346VfrIa
9pmmsvnx5jAS/X1lb7tjk/oJIQJouGniI+qdq9kRBgGjOpqsfies1/TmWPcEHXbO
m0sHkKf8XB6We/vjnBUe6WABGCRFjGiX9Cx32WCnYPhZqLA2jkSn9WXja48RlY8P
A8RCA8DIoNI91UbsdzutPCW9WGy93PTRlIN2cYKRsdedQU8m4LFTLomLK7oXaM3Y
Nz7rhBeFm26N8Q==
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:14:16 2025 by rpki-client