Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
File: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft (raw, json)
Hash identifier: siXdHicv+iiOjiwKu8dSR0wY2tMdtwlHZqCtMcfgk20=
Subject key identifier: 02:69:0E:D9:DA:D1:3A:01:6A:8A:22:35:81:96:3A:3D:23:C1:0F:B1
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Certificate issuer: /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial: 01976884BFFB22EE778340821C7935C973BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 09:00:19 +0000
Manifest this update: Fri 13 Jun 2025 09:00:19 +0000
Manifest next update: Sat 14 Jun 2025 09:00:19 +0000
Files and hashes: 1: 3cpoDZVsvW-d4pgtfjxgApATZ7Y.roa (hash: xAPK20pv8js5ddYc90CC85IhpMi19I8Q/fSeN00Op6M=)
2: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl (hash: fJuCPDSdKnpgP/Y5yTBrodoehuEpv3S0x8Smr+B6Jhg=)
3: 9Np_qqUHNhRugA_1xB2ZI6GkPRc.roa (hash: VZhCCAUVQwLPClsCIIsWXL6uNJYCuqsQS18/K+wYTxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:bf:fb:22:ee:77:83:40:82:1c:79:35:c9:73:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
Validity
Not Before: Jun 13 09:00:19 2025 GMT
Not After : Jun 14 09:00:19 2025 GMT
Subject: CN=02690ed9dad13a016a8a223581963a3d23c10fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5a:ce:33:1b:04:3d:88:87:30:52:bf:c7:f9:
e4:84:67:7d:e9:be:2c:ee:df:cd:72:3f:23:52:d5:
e7:bd:d8:ff:77:fc:e2:bc:06:1f:12:c5:47:46:e5:
7d:a9:b5:31:a0:3b:a4:07:88:3e:d5:76:99:69:96:
2f:97:ee:2a:4a:d2:b3:7d:4b:d9:56:5c:fd:c5:0c:
07:7e:c7:97:c7:15:e5:39:96:cb:b6:31:8b:06:93:
e9:7f:5d:65:da:65:be:57:09:67:68:72:d7:03:61:
cb:7a:b7:df:a7:98:21:90:00:b6:29:31:cf:67:23:
4f:a0:de:34:a0:d6:32:91:0d:89:18:29:03:c4:d5:
c2:2c:14:83:00:74:ba:58:8b:c4:e2:7b:36:05:5c:
12:1b:61:87:14:d6:65:88:11:a7:d3:fd:73:57:d6:
bb:83:8e:de:75:89:1b:cf:7b:13:dc:2c:61:30:2f:
22:86:78:61:67:70:9a:0e:0b:1a:42:f8:2f:26:a7:
8e:e6:b6:7d:2c:c4:d4:7f:00:af:f2:c2:c8:42:56:
a5:88:84:34:fc:3b:19:64:b0:99:9f:30:0c:0f:81:
6f:c9:6f:30:17:31:3e:f5:91:74:78:f6:5b:90:2f:
3d:41:24:69:14:d6:eb:d8:32:6a:f4:03:1d:74:43:
ec:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:69:0E:D9:DA:D1:3A:01:6A:8A:22:35:81:96:3A:3D:23:C1:0F:B1
X509v3 Authority Key Identifier:
keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:24:db:d4:da:f9:a9:58:b4:2e:0f:85:2a:7c:db:02:3c:d6:
de:8d:e6:14:83:c2:8b:a0:07:b6:45:52:9d:72:4a:8f:76:f9:
a8:a4:0b:9c:4f:f1:e9:2a:ba:69:7d:e7:9d:ad:e1:f7:72:3b:
e0:33:38:e7:e7:09:1b:e0:a5:16:3a:da:c6:63:b0:9b:b9:ef:
48:b1:fe:c0:25:0a:c1:3b:a0:6d:7b:ab:b0:2c:2f:28:8b:ff:
37:ca:f3:2c:c7:9f:2e:42:25:59:72:56:1a:b7:22:72:14:57:
79:17:f8:79:a4:87:66:38:d4:8b:ce:dc:d8:14:a0:3e:8c:88:
16:3f:03:cc:35:ab:a7:12:50:20:73:12:0f:59:bf:18:fb:48:
b5:cd:99:f7:ba:50:22:0f:7a:e3:50:dc:8e:61:4b:14:8b:92:
5f:bb:25:37:fc:2a:e4:c8:49:49:cf:42:b2:55:2e:39:2b:64:
e5:9a:55:19:43:f6:0f:7b:45:59:06:79:22:3a:c2:bb:c7:d4:
d0:4b:3d:1e:95:1a:3d:ca:d3:18:80:a3:f1:eb:ce:c4:09:15:
e8:0b:74:a6:3b:fa:e9:cc:5b:da:5b:ab:0b:6e:4f:ad:c9:fc:
e4:2f:98:b8:cd:70:25:4d:9f:0e:e2:57:e3:03:2e:fd:96:1f:
6f:bb:1c:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdohL/7Iu53g0CCHHk1yXO8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0M2RkNDI0Mzg0NzU5YjVlODU1OTU4MjUwMTliNjlmZTli
ZjkyMjAwHhcNMjUwNjEzMDkwMDE5WhcNMjUwNjE0MDkwMDE5WjAzMTEwLwYDVQQD
EygwMjY5MGVkOWRhZDEzYTAxNmE4YTIyMzU4MTk2M2EzZDIzYzEwZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlrOMxsEPYiHMFK/x/nkhGd96b4s
7t/Ncj8jUtXnvdj/d/zivAYfEsVHRuV9qbUxoDukB4g+1XaZaZYvl+4qStKzfUvZ
Vlz9xQwHfseXxxXlOZbLtjGLBpPpf11l2mW+VwlnaHLXA2HLerffp5ghkAC2KTHP
ZyNPoN40oNYykQ2JGCkDxNXCLBSDAHS6WIvE4ns2BVwSG2GHFNZliBGn0/1zV9a7
g47edYkbz3sT3CxhMC8ihnhhZ3CaDgsaQvgvJqeO5rZ9LMTUfwCv8sLIQlaliIQ0
/DsZZLCZnzAMD4FvyW8wFzE+9ZF0ePZbkC89QSRpFNbr2DJq9AMddEPsWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJpDtna0ToBaooiNYGWOj0jwQ+xMB8GA1UdIwQY
MBaAFOQ91CQ4R1m16FWVglAZtp/pv5IgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUQzVUpEaEhXYlhvVlpXQ1VCbTJuLW1fa2lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80YjJjZjktZDhlZC00YTI3LTkzYmEt
OTNiNjkxZWUxY2NlLzEvNUQzVUpEaEhXYlhvVlpXQ1VCbTJuLW1fa2lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy80YjJjZjktZDhlZC00YTI3LTkzYmEtOTNiNjkxZWUxY2Nl
LzEvNUQzVUpEaEhXYlhvVlpXQ1VCbTJuLW1fa2lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxSTb1Nr5
qVi0Lg+FKnzbAjzW3o3mFIPCi6AHtkVSnXJKj3b5qKQLnE/x6Sq6aX3nna3h93I7
4DM45+cJG+ClFjraxmOwm7nvSLH+wCUKwTugbXursCwvKIv/N8rzLMefLkIlWXJW
GrcichRXeRf4eaSHZjjUi87c2BSgPoyIFj8DzDWrpxJQIHMSD1m/GPtItc2Z97pQ
Ig9641DcjmFLFIuSX7slN/wq5MhJSc9CslUuOStk5ZpVGUP2D3tFWQZ5IjrCu8fU
0Es9HpUaPcrTGICj8evOxAkV6At0pjv66cxb2lurC25Prcn85C+YuM1wJU2fDuJX
4wMu/ZYfb7scgA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:53 2025 by rpki-client