Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
File: 5o9MhddoNjPDOOA92OykR78_Z4U.mft (raw, json)
Hash identifier: 7Rt5NSwbkgnoJ2GdUu5LYHDISL77BM5R8G8ND2VL304=
Subject key identifier: 33:D8:EF:A9:93:CF:9B:FF:BF:EA:46:70:F6:EE:EF:DA:5B:C7:B9:29
Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
Certificate issuer: /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Certificate serial: 019772D1739C0EFD5D67015AB04A6D06FEFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
Manifest number: 0AD5
Signing time: Sun 15 Jun 2025 09:00:18 +0000
Manifest this update: Sun 15 Jun 2025 09:00:18 +0000
Manifest next update: Mon 16 Jun 2025 09:00:18 +0000
Files and hashes: 1: 5o9MhddoNjPDOOA92OykR78_Z4U.crl (hash: FQX3cjyo+ScCuHgaQ+KCuo5S4Mh32n60rNo/MlbKIjU=)
2: n9muJIRBw4eBvZP1hvt-YKWhQ1g.roa (hash: MB5Zeb9aar2OAVcUrab3R1409lEJyOeTnWEExzpIcts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:d1:73:9c:0e:fd:5d:67:01:5a:b0:4a:6d:06:fe:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Validity
Not Before: Jun 15 09:00:18 2025 GMT
Not After : Jun 16 09:00:18 2025 GMT
Subject: CN=33d8efa993cf9bffbfea4670f6eeefda5bc7b929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ee:49:0a:45:0c:66:11:a0:74:56:f7:55:ca:
57:56:b4:58:26:41:e3:88:d8:48:01:87:5a:93:82:
91:6f:ec:a1:02:4a:1c:e3:1d:52:56:d8:cb:c9:4a:
af:0f:a4:cd:49:a5:b0:2a:11:7d:29:51:26:3b:b8:
3b:a2:70:5e:0d:80:61:7c:7b:31:a8:a7:15:0a:e5:
9b:a3:cd:b0:a8:61:09:15:53:c9:71:ef:01:ea:3f:
27:34:0b:19:77:1d:41:ae:6e:c3:0b:12:1f:7f:11:
c6:84:39:43:bb:03:44:5d:fd:5c:f7:cd:c6:27:9c:
c3:f5:50:3c:f7:68:fc:08:e7:76:57:73:22:1a:48:
de:ba:0b:3b:c5:59:f4:49:1d:5d:cc:8f:72:08:81:
9a:0d:27:a8:be:b5:24:31:63:d4:08:be:6d:b5:91:
1e:3b:15:bd:6c:ea:fd:32:0f:63:a7:f2:38:da:0a:
67:e4:34:0f:22:58:5c:f0:4b:b4:9a:33:92:f5:5b:
1b:77:97:fa:9e:c2:98:eb:33:58:0f:19:bc:7a:36:
13:a6:8b:f4:f8:5f:17:13:b7:2a:76:13:57:ea:45:
7b:a2:a5:77:d3:d9:9a:7f:bf:c5:5c:c7:28:19:6a:
50:4c:33:19:76:94:ac:58:be:2a:5b:46:d0:e3:7e:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D8:EF:A9:93:CF:9B:FF:BF:EA:46:70:F6:EE:EF:DA:5B:C7:B9:29
X509v3 Authority Key Identifier:
keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6d:0c:90:a3:46:5e:e6:a2:9a:fb:c3:16:df:04:e0:c8:65:
e5:86:0d:08:28:57:52:4d:c6:d0:4a:8d:e8:0e:b2:6b:9b:b1:
52:53:cc:de:db:3f:77:f5:0c:ab:1c:3d:2c:36:ba:ac:09:85:
d0:46:d4:4f:62:1c:e5:e9:5f:8a:19:e9:1f:cd:81:32:24:78:
12:00:56:56:cd:95:f1:45:a6:6a:1a:b6:c7:44:e4:a0:70:50:
d8:df:6f:e4:ef:e3:72:32:90:3e:ba:16:a2:31:20:90:b4:b1:
65:0a:52:17:03:7c:ae:e6:fa:6a:ac:9e:bc:74:17:da:52:a5:
6b:20:fc:f1:02:61:0a:21:70:57:a8:65:aa:82:48:c4:54:a2:
b4:44:b3:58:a1:4c:a6:58:db:78:45:18:36:c6:0f:8a:da:31:
8a:87:87:ac:8b:3b:e0:c2:ca:7c:16:b3:be:26:79:51:a3:f8:
80:c3:c9:11:06:31:d9:a7:5e:91:09:e4:59:c1:fe:bd:9b:5f:
55:a2:73:89:38:60:35:5d:55:b3:70:57:f2:75:2c:8a:e3:44:
7a:1a:0c:05:8a:65:7c:e3:20:0d:5f:59:96:c0:f2:59:00:c0:
3d:86:93:cd:2e:9b:35:81:59:88:ca:51:2e:f7:7b:74:1f:2b:
d9:4d:ec:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdy0XOcDv1dZwFasEptBv78MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2OGY0Yzg1ZDc2ODM2MzNjMzM4ZTAzZGQ4ZWNhNDQ3YmYz
ZjY3ODUwHhcNMjUwNjE1MDkwMDE4WhcNMjUwNjE2MDkwMDE4WjAzMTEwLwYDVQQD
EygzM2Q4ZWZhOTkzY2Y5YmZmYmZlYTQ2NzBmNmVlZWZkYTViYzdiOTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu5JCkUMZhGgdFb3VcpXVrRYJkHj
iNhIAYdak4KRb+yhAkoc4x1SVtjLyUqvD6TNSaWwKhF9KVEmO7g7onBeDYBhfHsx
qKcVCuWbo82wqGEJFVPJce8B6j8nNAsZdx1Brm7DCxIffxHGhDlDuwNEXf1c983G
J5zD9VA892j8COd2V3MiGkjeugs7xVn0SR1dzI9yCIGaDSeovrUkMWPUCL5ttZEe
OxW9bOr9Mg9jp/I42gpn5DQPIlhc8Eu0mjOS9Vsbd5f6nsKY6zNYDxm8ejYTpov0
+F8XE7cqdhNX6kV7oqV309maf7/FXMcoGWpQTDMZdpSsWL4qW0bQ434deQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPY76mTz5v/v+pGcPbu79pbx7kpMB8GA1UdIwQY
MBaAFOaPTIXXaDYzwzjgPdjspEe/P2eFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW85TWhkZG9OalBET09BOTJPeWtSNzhfWjRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81YmJlYmMtY2YzNi00M2E0LTk5NzQt
OWI2Y2ZkOGEyYWEzLzEvNW85TWhkZG9OalBET09BOTJPeWtSNzhfWjRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy81YmJlYmMtY2YzNi00M2E0LTk5NzQtOWI2Y2ZkOGEyYWEz
LzEvNW85TWhkZG9OalBET09BOTJPeWtSNzhfWjRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG20MkKNG
XuaimvvDFt8E4Mhl5YYNCChXUk3G0EqN6A6ya5uxUlPM3ts/d/UMqxw9LDa6rAmF
0EbUT2Ic5elfihnpH82BMiR4EgBWVs2V8UWmahq2x0TkoHBQ2N9v5O/jcjKQProW
ojEgkLSxZQpSFwN8rub6aqyevHQX2lKlayD88QJhCiFwV6hlqoJIxFSitESzWKFM
pljbeEUYNsYPitoxioeHrIs74MLKfBazviZ5UaP4gMPJEQYx2adekQnkWcH+vZtf
VaJziThgNV1Vs3BX8nUsiuNEehoMBYplfOMgDV9ZlsDyWQDAPYaTzS6bNYFZiMpR
Lvd7dB8r2U3sLw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 12:24:29 2025 by rpki-client