Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
File: mrL5l1qR5xN52hAOyEvUSgooDZs.mft (raw, json)
Hash identifier: Zkwg5akt0Q5O/Ph/Me1/hN+ziZdjX6Pay0aDtf/5USg=
Subject key identifier: 0C:90:85:55:24:CA:74:5D:17:D4:19:79:26:9D:76:A8:98:3B:E2:F0
Authority key identifier: 9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B
Certificate issuer: /CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b
Certificate serial: 019768F2F38970B3DD222158F23DE2C7C18F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
Manifest number: 12D1
Signing time: Fri 13 Jun 2025 11:00:41 +0000
Manifest this update: Fri 13 Jun 2025 11:00:41 +0000
Manifest next update: Sat 14 Jun 2025 11:00:41 +0000
Files and hashes: 1: PbBhRej558nP-vCP2i5bq2vF02I.roa (hash: k4y0Lkz3mWSRjZ9l7iXnliVmD502EHJIpmvxtHIQNOU=)
2: mrL5l1qR5xN52hAOyEvUSgooDZs.crl (hash: k5wxSfyENPeKJ37P1w7zjyA4l5fztLdO1ipeSVgJnE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:f3:89:70:b3:dd:22:21:58:f2:3d:e2:c7:c1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b
Validity
Not Before: Jun 13 11:00:41 2025 GMT
Not After : Jun 14 11:00:41 2025 GMT
Subject: CN=0c90855524ca745d17d41979269d76a8983be2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:54:97:af:bd:48:85:e6:24:a5:bf:2a:08:8f:
ab:1b:fa:fe:01:77:19:a2:17:21:e8:d1:e4:7f:f4:
93:2f:a1:57:75:98:6b:45:45:49:02:c4:3f:db:2d:
7c:e3:ef:da:27:24:da:9f:dd:1c:87:88:1a:cf:99:
b7:fb:61:fe:78:92:ec:93:0f:a6:1f:94:3d:8d:17:
9e:27:57:46:7c:cd:b0:c5:0c:29:03:c9:2a:53:21:
ca:a3:af:88:fc:05:6a:5c:77:ac:98:c2:1f:fa:2b:
8d:3e:9c:c8:a5:b2:e4:22:5e:88:54:95:35:15:fd:
70:21:5c:75:d9:33:63:75:4c:78:d7:40:f2:b4:b8:
4c:ac:51:74:16:13:36:a8:8c:5b:e9:d5:71:5f:00:
d6:85:58:a7:19:f1:e9:12:3d:26:58:b7:f0:a3:8d:
cd:6a:4b:fc:e8:4e:55:a9:15:c8:24:01:d1:29:56:
91:06:c6:8e:ff:8f:7d:d2:d4:e4:b1:b4:9e:4c:3d:
b2:56:54:81:d9:9f:43:cc:9e:fb:e4:88:af:07:54:
79:97:3c:d4:b3:a0:78:ed:7c:31:77:29:05:96:af:
e1:43:66:eb:50:1f:84:a8:42:82:b1:a8:e1:da:dc:
c3:9c:59:d1:4f:2c:31:2d:0f:70:f2:55:4b:ab:0a:
44:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:90:85:55:24:CA:74:5D:17:D4:19:79:26:9D:76:A8:98:3B:E2:F0
X509v3 Authority Key Identifier:
keyid:9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e7:50:7c:db:75:af:c5:c8:ae:df:4b:4c:b7:b1:e0:53:f9:
81:43:e7:89:8d:33:67:dd:04:94:0b:dc:4f:37:74:97:24:77:
15:42:a9:b1:0c:05:3e:4d:20:57:3f:0b:ae:fc:4c:c2:50:4f:
0f:a9:69:6a:96:1f:a4:d4:1b:70:c2:0e:ab:fd:d1:55:20:d6:
74:bc:3a:db:99:3d:ca:85:1a:ab:83:2d:2d:80:59:84:e7:e1:
dc:da:3b:66:58:37:c0:fe:b1:aa:a1:23:3e:e7:be:6f:a6:7c:
6a:10:7c:55:e4:f2:65:83:0c:4a:79:dd:cf:36:20:28:96:8a:
79:2d:0d:27:b3:bf:96:8d:8f:fb:09:e5:7c:63:c1:c0:37:65:
fd:55:19:bb:9b:17:ee:c9:15:a2:dc:3f:c6:5d:9a:79:46:33:
cd:c9:16:52:ee:37:05:85:97:54:8e:49:5c:61:f7:50:d2:a6:
f7:35:74:b0:b4:e2:3c:be:6c:2d:f9:1b:1f:88:ae:21:d9:55:
07:af:bc:d0:8f:01:b6:e1:49:84:b4:18:a1:c3:e4:43:0d:71:
95:50:3f:81:91:60:04:05:9d:d0:c6:b6:2e:a4:6d:ad:49:13:
e6:df:c5:ce:cc:0c:27:c6:e5:b5:c7:56:6b:b2:5f:3b:a2:3c:
ca:09:3c:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdo8vOJcLPdIiFY8j3ix8GPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYjJmOTk3NWE5MWU3MTM3OWRhMTAwZWM4NGJkNDRhMGEy
ODBkOWIwHhcNMjUwNjEzMTEwMDQxWhcNMjUwNjE0MTEwMDQxWjAzMTEwLwYDVQQD
EygwYzkwODU1NTI0Y2E3NDVkMTdkNDE5NzkyNjlkNzZhODk4M2JlMmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1SXr71IheYkpb8qCI+rG/r+AXcZ
ohch6NHkf/STL6FXdZhrRUVJAsQ/2y184+/aJyTan90ch4gaz5m3+2H+eJLskw+m
H5Q9jReeJ1dGfM2wxQwpA8kqUyHKo6+I/AVqXHesmMIf+iuNPpzIpbLkIl6IVJU1
Ff1wIVx12TNjdUx410DytLhMrFF0FhM2qIxb6dVxXwDWhVinGfHpEj0mWLfwo43N
akv86E5VqRXIJAHRKVaRBsaO/4990tTksbSeTD2yVlSB2Z9DzJ775IivB1R5lzzU
s6B47XwxdykFlq/hQ2brUB+EqEKCsajh2tzDnFnRTywxLQ9w8lVLqwpEcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyQhVUkynRdF9QZeSaddqiYO+LwMB8GA1UdIwQY
MBaAFJqy+ZdakecTedoQDshL1EoKKA2bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXJMNWwxcVI1eE41MmhBT3lFdlVTZ29vRFpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wN2E0ODctMjZjYi00YjE4LWJiMzkt
MTVmZTA2ZmZmOGJjLzEvbXJMNWwxcVI1eE41MmhBT3lFdlVTZ29vRFpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8wN2E0ODctMjZjYi00YjE4LWJiMzktMTVmZTA2ZmZmOGJj
LzEvbXJMNWwxcVI1eE41MmhBT3lFdlVTZ29vRFpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOdQfNt1
r8XIrt9LTLex4FP5gUPniY0zZ90ElAvcTzd0lyR3FUKpsQwFPk0gVz8LrvxMwlBP
D6lpapYfpNQbcMIOq/3RVSDWdLw625k9yoUaq4MtLYBZhOfh3No7Zlg3wP6xqqEj
Pue+b6Z8ahB8VeTyZYMMSnndzzYgKJaKeS0NJ7O/lo2P+wnlfGPBwDdl/VUZu5sX
7skVotw/xl2aeUYzzckWUu43BYWXVI5JXGH3UNKm9zV0sLTiPL5sLfkbH4iuIdlV
B6+80I8BtuFJhLQYocPkQw1xlVA/gZFgBAWd0Ma2LqRtrUkT5t/FzswMJ8bltcdW
a7JfO6I8ygk8Ew==
-----END CERTIFICATE-----
Generated at Fri Jun 13 20:14:14 2025 by rpki-client