Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
File: 5J2_PERGjlJBHUhhhWvwvceQY-Q.mft (raw, json)
Hash identifier: vCY7fMCA8NFeROGEi4qxaZvNcdFnspu+jGNL45lMeCI=
Subject key identifier: 73:8F:EB:99:FA:20:D1:BA:8C:B7:A2:EF:94:E1:AF:18:13:4F:35:CB
Authority key identifier: E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
Certificate issuer: /CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Certificate serial: 0197790AEFDE370F5C5B9F1E5BD573B7E9EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
Manifest number: 0D68
Signing time: Mon 16 Jun 2025 14:00:49 +0000
Manifest this update: Mon 16 Jun 2025 14:00:49 +0000
Manifest next update: Tue 17 Jun 2025 14:00:49 +0000
Files and hashes: 1: 5J2_PERGjlJBHUhhhWvwvceQY-Q.crl (hash: bFyGVppapj19DZv9QOG9CiqrsDWHlhlctd1TNJj5Tr4=)
2: 7JvOqf8jCijk_scq8k44QE4ZcJg.roa (hash: Zr9qOX5zC6nd7EBM4UVaMfXBvFyKtR8sioHct77HMic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:0a:ef:de:37:0f:5c:5b:9f:1e:5b:d5:73:b7:e9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Validity
Not Before: Jun 16 14:00:49 2025 GMT
Not After : Jun 17 14:00:49 2025 GMT
Subject: CN=738feb99fa20d1ba8cb7a2ef94e1af18134f35cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:60:bd:dc:68:98:5f:da:05:c5:b5:7c:c0:
7b:bc:fe:f4:1d:08:47:19:1d:48:41:aa:b9:f1:58:
3d:19:6a:15:7f:df:1b:37:db:35:d6:0b:f7:3c:47:
fb:c2:7a:b1:b6:5e:b2:b5:6a:8e:6d:c1:5a:a9:69:
b4:90:c2:19:a3:db:dc:28:91:57:40:9a:22:b9:68:
b6:e1:fe:1c:03:83:15:59:e6:07:6d:59:2a:38:08:
ed:b6:85:06:2a:88:a1:a8:09:48:a0:e1:45:9a:6f:
a9:cd:c2:2b:f8:05:90:0b:5a:57:7b:9e:f6:10:51:
72:ba:c6:82:63:60:15:98:7d:8c:cf:6b:cb:76:33:
e1:9a:b9:a9:f8:f6:d8:e7:96:0a:8f:9b:7a:53:f9:
6b:82:fc:be:87:6f:28:ab:08:02:9d:6b:e2:5b:87:
d6:d6:eb:c5:6e:ca:02:d8:65:87:3a:ec:ed:bf:ee:
68:31:5e:98:c6:d1:24:54:85:78:60:46:2b:9c:9e:
19:ef:81:44:ca:07:5d:60:d6:98:2e:b3:9c:94:fc:
47:b0:32:1a:31:6f:f4:42:c8:90:91:05:2d:24:e8:
5c:31:20:92:38:e1:c7:42:5e:90:cd:53:02:28:d6:
1e:81:27:15:da:4c:3d:f4:1f:05:43:b7:62:34:5a:
03:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8F:EB:99:FA:20:D1:BA:8C:B7:A2:EF:94:E1:AF:18:13:4F:35:CB
X509v3 Authority Key Identifier:
keyid:E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:55:d7:4a:2d:5b:66:81:6d:ee:c9:76:6e:3b:77:12:56:fb:
5b:20:df:31:b0:90:3c:3a:63:2f:77:db:8e:b2:28:72:1c:09:
88:b2:a0:ca:3c:e2:3a:0c:2d:c7:bf:65:53:d8:da:f8:47:78:
4b:62:87:26:a6:df:10:90:27:cd:0e:06:1e:5a:2a:e6:59:ea:
ea:2a:76:3f:b9:85:a8:1a:96:3c:ef:79:5e:c9:21:94:67:97:
d3:2d:6a:54:7f:3b:e2:3c:a6:7f:01:64:36:4c:cf:60:e3:f7:
13:b0:42:fd:45:7f:c9:07:e1:67:10:77:53:dc:78:71:60:9c:
1a:cf:73:4a:bd:af:a2:4f:f6:64:f4:ff:3c:09:df:f3:37:84:
6f:37:32:b8:df:c3:2c:d9:c5:c6:19:55:66:fc:3f:f2:40:4e:
0f:a9:a8:e8:8e:a6:d1:1a:f3:78:e7:3f:14:51:e7:39:ce:6b:
3c:6c:3c:13:d1:2d:54:95:a3:b8:4b:d6:00:a9:56:35:08:18:
de:34:be:9e:ec:31:3e:f0:e4:12:7a:f4:20:c3:8c:52:7b:dd:
08:a8:15:99:94:3d:28:14:56:a4:d5:32:1d:72:0b:5a:85:ca:
97:ad:4a:94:bc:91:d1:51:75:97:4e:2e:f1:73:f5:7a:e7:bc:
87:4d:81:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5Cu/eNw9cW58eW9Vzt+nsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0OWRiZjNjNDQ0NjhlNTI0MTFkNDg2MTg1NmJmMGJkYzc5
MDYzZTQwHhcNMjUwNjE2MTQwMDQ5WhcNMjUwNjE3MTQwMDQ5WjAzMTEwLwYDVQQD
Eyg3MzhmZWI5OWZhMjBkMWJhOGNiN2EyZWY5NGUxYWYxODEzNGYzNWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNxgvdxomF/aBcW1fMB7vP70HQhH
GR1IQaq58Vg9GWoVf98bN9s11gv3PEf7wnqxtl6ytWqObcFaqWm0kMIZo9vcKJFX
QJoiuWi24f4cA4MVWeYHbVkqOAjttoUGKoihqAlIoOFFmm+pzcIr+AWQC1pXe572
EFFyusaCY2AVmH2Mz2vLdjPhmrmp+PbY55YKj5t6U/lrgvy+h28oqwgCnWviW4fW
1uvFbsoC2GWHOuztv+5oMV6YxtEkVIV4YEYrnJ4Z74FEygddYNaYLrOclPxHsDIa
MW/0QsiQkQUtJOhcMSCSOOHHQl6QzVMCKNYegScV2kw99B8FQ7diNFoDwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOP65n6ING6jLei75ThrxgTTzXLMB8GA1UdIwQY
MBaAFOSdvzxERo5SQR1IYYVr8L3HkGPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUoyX1BFUkdqbEpCSFVoaGhXdnd2Y2VRWS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82ZTQ1N2UtMzY2ZC00NDBiLWFmMmMt
NWNhZGJkY2YyMjE1LzEvNUoyX1BFUkdqbEpCSFVoaGhXdnd2Y2VRWS1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS82ZTQ1N2UtMzY2ZC00NDBiLWFmMmMtNWNhZGJkY2YyMjE1
LzEvNUoyX1BFUkdqbEpCSFVoaGhXdnd2Y2VRWS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjlXXSi1b
ZoFt7sl2bjt3Elb7WyDfMbCQPDpjL3fbjrIochwJiLKgyjziOgwtx79lU9ja+Ed4
S2KHJqbfEJAnzQ4GHloq5lnq6ip2P7mFqBqWPO95XskhlGeX0y1qVH874jymfwFk
NkzPYOP3E7BC/UV/yQfhZxB3U9x4cWCcGs9zSr2vok/2ZPT/PAnf8zeEbzcyuN/D
LNnFxhlVZvw/8kBOD6mo6I6m0RrzeOc/FFHnOc5rPGw8E9EtVJWjuEvWAKlWNQgY
3jS+nuwxPvDkEnr0IMOMUnvdCKgVmZQ9KBRWpNUyHXILWoXKl61KlLyR0VF1l04u
8XP1eue8h02BeQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 19:29:43 2025 by rpki-client