Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
File: 5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft (raw, json)
Hash identifier: sLDhGyJJWvDKkAMHV226hSmRtak3IyNbWzyy3vDpAaQ=
Subject key identifier: E2:BA:56:13:16:4E:44:59:1B:0B:6D:EB:D1:AB:4F:45:5E:A3:0E:D2
Authority key identifier: E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA
Certificate issuer: /CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
Certificate serial: 01976A05AD6CE437575CA8E8C3CA46EFC542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 16:00:46 +0000
Manifest this update: Fri 13 Jun 2025 16:00:46 +0000
Manifest next update: Sat 14 Jun 2025 16:00:46 +0000
Files and hashes: 1: 5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl (hash: vukh3uL3nrjqeXj+5k93aW2sMChltOrOd6ulbFXjgFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:ad:6c:e4:37:57:5c:a8:e8:c3:ca:46:ef:c5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
Validity
Not Before: Jun 13 16:00:46 2025 GMT
Not After : Jun 14 16:00:46 2025 GMT
Subject: CN=e2ba5613164e44591b0b6debd1ab4f455ea30ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cb:0c:97:2b:dc:9c:c0:aa:83:bc:04:59:1f:
d0:8e:07:5d:e2:90:5d:62:42:98:a2:f6:51:93:8d:
e0:de:4c:f9:8b:83:a5:7f:ab:0c:bf:66:d1:c3:12:
cb:0f:83:f8:50:6a:f0:16:45:67:08:78:b7:38:64:
ad:48:af:1c:f2:d3:42:b3:5b:fa:ed:37:1e:63:53:
b6:27:e2:99:7b:0a:bd:d8:25:95:14:0c:63:2e:9b:
ba:ef:d6:98:b0:de:30:98:18:fc:14:9c:13:b1:9b:
2a:02:62:35:6e:35:02:a4:fe:5c:b9:68:8c:c7:b5:
33:c3:f1:0c:40:49:6d:3d:98:bf:f5:8e:47:5f:ff:
c9:0f:41:0a:5d:43:e6:45:af:8e:0a:f2:13:64:2a:
e0:b0:cd:9c:35:c9:aa:2c:2c:82:5c:b1:31:94:75:
f3:ca:72:ba:36:45:7a:a4:59:22:99:9a:78:8a:fa:
0d:ec:1d:3e:9a:c9:59:9c:71:b6:e1:85:be:42:45:
df:58:d3:76:46:3f:aa:79:8d:bf:13:5c:83:16:a6:
a7:be:75:d2:5a:f2:d8:de:3a:66:e7:72:7e:d1:d1:
cb:da:10:59:ea:44:62:6a:98:53:59:93:e4:51:af:
05:c9:2c:73:33:49:81:8a:e6:c1:29:19:1e:aa:ab:
5a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BA:56:13:16:4E:44:59:1B:0B:6D:EB:D1:AB:4F:45:5E:A3:0E:D2
X509v3 Authority Key Identifier:
keyid:E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ea:82:72:b5:ef:bb:e8:5d:40:e6:22:b8:f1:37:4b:ef:ff:
7b:fa:98:52:f6:b1:9d:94:73:1b:75:ff:ee:dc:f7:f3:fa:7c:
3a:04:7e:e1:34:76:e9:2e:2d:c8:f6:dc:df:4b:bd:ed:44:21:
88:0e:bc:6f:6f:63:23:f6:46:2b:c1:72:db:74:08:83:d9:28:
da:80:35:03:bb:47:47:39:1f:aa:2a:05:06:fb:9d:89:e1:0f:
38:53:da:3f:86:fd:d1:11:f7:9c:ad:99:5d:1e:e9:3c:ae:df:
44:83:1c:cd:04:8c:d0:a2:10:16:aa:06:cd:59:09:c6:bd:6c:
a2:44:cf:a5:62:8d:fa:39:2e:36:40:86:99:ef:cd:35:c2:24:
85:9e:cb:b9:13:b7:6f:ae:fc:37:e8:25:54:59:d4:b9:f0:8f:
e4:38:7c:9b:e3:03:55:da:22:72:f3:79:40:00:51:ed:59:05:
fa:7f:be:8a:f8:2e:f0:34:27:f5:c8:a0:2f:a5:15:b9:2d:73:
7d:76:2f:8f:61:2f:07:86:9f:75:97:f4:17:1b:a0:a0:47:92:
9d:28:17:c1:20:21:0c:40:d5:ec:b2:0e:0b:9f:af:19:72:d5:
66:8a:bf:7b:e1:d5:be:bb:4d:4d:52:ba:31:ac:cb:c0:90:f7:
5f:83:10:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqBa1s5DdXXKjow8pG78VCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MzNiMmVhYjdlMjM0Njg3YmU5N2Y4YzM1ZDZlNmNjM2Uy
ZGZjYmEwHhcNMjUwNjEzMTYwMDQ2WhcNMjUwNjE0MTYwMDQ2WjAzMTEwLwYDVQQD
EyhlMmJhNTYxMzE2NGU0NDU5MWIwYjZkZWJkMWFiNGY0NTVlYTMwZWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8sMlyvcnMCqg7wEWR/Qjgdd4pBd
YkKYovZRk43g3kz5i4Olf6sMv2bRwxLLD4P4UGrwFkVnCHi3OGStSK8c8tNCs1v6
7TceY1O2J+KZewq92CWVFAxjLpu679aYsN4wmBj8FJwTsZsqAmI1bjUCpP5cuWiM
x7Uzw/EMQEltPZi/9Y5HX//JD0EKXUPmRa+OCvITZCrgsM2cNcmqLCyCXLExlHXz
ynK6NkV6pFkimZp4ivoN7B0+mslZnHG24YW+QkXfWNN2Rj+qeY2/E1yDFqanvnXS
WvLY3jpm53J+0dHL2hBZ6kRiaphTWZPkUa8FySxzM0mBiubBKRkeqqtalQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOK6VhMWTkRZGwtt69GrT0Veow7SMB8GA1UdIwQY
MBaAFOczsuq34jRoe+l/jDXW5sw+Lfy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXpPeTZyZmlOR2g3NlgtTU5kYm16RDR0X0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85MzYwZjUtMWRlYi00YjQzLWEzMmYt
YWM0NGJjNTY5YTc4LzEvNXpPeTZyZmlOR2g3NlgtTU5kYm16RDR0X0xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85MzYwZjUtMWRlYi00YjQzLWEzMmYtYWM0NGJjNTY5YTc4
LzEvNXpPeTZyZmlOR2g3NlgtTU5kYm16RDR0X0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOqCcrXv
u+hdQOYiuPE3S+//e/qYUvaxnZRzG3X/7tz38/p8OgR+4TR26S4tyPbc30u97UQh
iA68b29jI/ZGK8Fy23QIg9ko2oA1A7tHRzkfqioFBvudieEPOFPaP4b90RH3nK2Z
XR7pPK7fRIMczQSM0KIQFqoGzVkJxr1sokTPpWKN+jkuNkCGme/NNcIkhZ7LuRO3
b678N+glVFnUufCP5Dh8m+MDVdoicvN5QABR7VkF+n++ivgu8DQn9cigL6UVuS1z
fXYvj2EvB4afdZf0FxugoEeSnSgXwSAhDEDV7LIOC5+vGXLVZoq/e+HVvrtNTVK6
MazLwJD3X4MQiw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:52 2025 by rpki-client