Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
File: 5UHTgH6p2K1130eFWJlQnubzKCA.mft (raw, json)
Hash identifier: KzT/1CP9ClgB7zPXnKpAxJwuZt4RI+94Lox7hfPCC6c=
Subject key identifier: B0:12:17:80:03:F4:FF:5A:EB:0C:70:AE:17:BA:CD:45:A5:86:A2:CD
Authority key identifier: E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20
Certificate issuer: /CN=e541d3807ea9d8ad75df47855899509ee6f32820
Certificate serial: 019748FA031F1E0869684A61A0D42A563393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
Manifest number: C8
Signing time: Sat 07 Jun 2025 06:00:33 +0000
Manifest this update: Sat 07 Jun 2025 06:00:33 +0000
Manifest next update: Sun 08 Jun 2025 06:00:33 +0000
Files and hashes: 1: 5UHTgH6p2K1130eFWJlQnubzKCA.crl (hash: QXcMxZn3GJXfcZ7KCMdgxWOgr4EmNStATbvpKdzn8Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:03:1f:1e:08:69:68:4a:61:a0:d4:2a:56:33:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e541d3807ea9d8ad75df47855899509ee6f32820
Validity
Not Before: Jun 7 06:00:33 2025 GMT
Not After : Jun 8 06:00:33 2025 GMT
Subject: CN=b012178003f4ff5aeb0c70ae17bacd45a586a2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e2:b3:32:52:51:53:89:29:e7:b4:b4:25:92:
58:08:3a:9d:01:89:b1:2e:36:21:cc:53:97:12:dd:
e8:45:90:c2:3e:51:a3:0a:ce:17:25:bc:b7:4f:2c:
7d:00:be:06:79:33:92:30:5b:64:00:6f:63:e7:34:
76:f9:01:38:4c:a8:9d:7a:13:d9:bf:b6:38:83:ba:
dc:d0:fb:85:c8:e3:93:eb:bb:40:5b:a7:53:b8:21:
ee:5a:1a:c1:79:81:02:48:34:fd:e0:5f:18:0a:b7:
d0:ae:53:69:de:9b:55:35:d0:1a:5d:45:5a:3b:22:
c7:37:10:84:64:2c:af:4a:2e:65:85:d2:2b:d3:b7:
5a:85:90:f4:2d:b9:99:01:d2:68:06:eb:1a:66:15:
c2:61:9c:0c:c1:58:a3:6a:cc:a1:5c:99:b3:c5:6f:
58:8e:06:53:29:44:ca:0b:20:e6:0d:7c:95:35:f1:
d3:a7:48:f4:64:27:66:a8:f1:a6:92:77:9c:fa:5d:
a8:91:2e:52:13:8f:e3:cb:c4:76:af:60:a9:d0:4a:
e4:57:20:20:11:d1:78:30:a4:1e:2e:5d:06:da:76:
d0:14:97:ac:73:c2:4b:c2:79:3a:eb:d5:da:83:6e:
88:6a:0e:59:2c:df:57:32:b5:d1:05:3a:ea:ee:ef:
24:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:12:17:80:03:F4:FF:5A:EB:0C:70:AE:17:BA:CD:45:A5:86:A2:CD
X509v3 Authority Key Identifier:
keyid:E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5d:28:59:20:ad:20:b6:aa:5c:e0:e5:f9:7c:9c:b6:26:18:
0c:c0:3f:25:ae:fd:6f:97:b4:eb:6b:b5:8b:00:10:71:2d:9e:
fd:dc:cb:24:b1:c3:59:26:c5:96:67:44:c7:fd:ce:f5:39:a7:
9b:29:72:ce:5a:8e:8d:e6:14:fb:0a:5d:de:19:36:51:bb:7c:
10:cf:4e:14:ec:96:09:19:50:14:68:e1:6c:8c:7f:22:ca:23:
9a:f8:25:12:51:66:f1:37:90:20:3e:ab:6f:e6:2c:0e:7a:3e:
88:86:82:39:32:ef:b3:4d:a5:12:ec:5c:e1:49:dd:b8:9e:4f:
2c:fb:7e:0a:1a:7f:02:5b:31:bc:32:60:0d:cc:7b:3d:bc:fb:
fe:30:46:de:b6:6b:f4:c1:95:31:30:be:47:0d:69:08:7c:3c:
c8:af:2f:f6:61:14:19:57:30:12:7a:c5:26:38:1d:f1:b5:32:
75:7a:ff:d3:b3:93:be:80:09:09:00:5c:66:df:c6:ba:75:b2:
38:55:6a:65:18:08:88:66:84:24:9c:cc:23:8d:4b:4e:ce:b7:
2a:24:03:ca:2d:8a:8a:97:fc:11:fd:fa:37:0b:83:9a:bb:d4:
d1:12:d0:27:33:e0:c9:d6:e5:60:60:ce:67:5b:68:05:52:96:
4d:04:ec:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+gMfHghpaEphoNQqVjOTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NDFkMzgwN2VhOWQ4YWQ3NWRmNDc4NTU4OTk1MDllZTZm
MzI4MjAwHhcNMjUwNjA3MDYwMDMzWhcNMjUwNjA4MDYwMDMzWjAzMTEwLwYDVQQD
EyhiMDEyMTc4MDAzZjRmZjVhZWIwYzcwYWUxN2JhY2Q0NWE1ODZhMmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uKzMlJRU4kp57S0JZJYCDqdAYmx
LjYhzFOXEt3oRZDCPlGjCs4XJby3Tyx9AL4GeTOSMFtkAG9j5zR2+QE4TKidehPZ
v7Y4g7rc0PuFyOOT67tAW6dTuCHuWhrBeYECSDT94F8YCrfQrlNp3ptVNdAaXUVa
OyLHNxCEZCyvSi5lhdIr07dahZD0LbmZAdJoBusaZhXCYZwMwVijasyhXJmzxW9Y
jgZTKUTKCyDmDXyVNfHTp0j0ZCdmqPGmknec+l2okS5SE4/jy8R2r2Cp0ErkVyAg
EdF4MKQeLl0G2nbQFJesc8JLwnk669Xag26Iag5ZLN9XMrXRBTrq7u8kqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLASF4AD9P9a6wxwrhe6zUWlhqLNMB8GA1UdIwQY
MBaAFOVB04B+qditdd9HhViZUJ7m8yggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVVIVGdINnAySzExMzBlRldKbFFudWJ6S0NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yYmFlNTAtZmFjYS00ZDRlLWFlMzgt
MmQwNzdiNzgyYzcyLzEvNVVIVGdINnAySzExMzBlRldKbFFudWJ6S0NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yYmFlNTAtZmFjYS00ZDRlLWFlMzgtMmQwNzdiNzgyYzcy
LzEvNVVIVGdINnAySzExMzBlRldKbFFudWJ6S0NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOV0oWSCt
ILaqXODl+XyctiYYDMA/Ja79b5e062u1iwAQcS2e/dzLJLHDWSbFlmdEx/3O9Tmn
mylyzlqOjeYU+wpd3hk2Ubt8EM9OFOyWCRlQFGjhbIx/IsojmvglElFm8TeQID6r
b+YsDno+iIaCOTLvs02lEuxc4UnduJ5PLPt+Chp/AlsxvDJgDcx7Pbz7/jBG3rZr
9MGVMTC+Rw1pCHw8yK8v9mEUGVcwEnrFJjgd8bUydXr/07OTvoAJCQBcZt/GunWy
OFVqZRgIiGaEJJzMI41LTs63KiQDyi2Kipf8Ef36NwuDmrvU0RLQJzPgydblYGDO
Z1toBVKWTQTsPg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:17:47 2025 by rpki-client