Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
File: R5govcbQWedVFZLePuKetBv3vaU.mft (raw, json)
Hash identifier: fYY7tRVtnvgfKNxvHoJIB4MSOQGMS3R/7GFIonmmOv8=
Subject key identifier: E9:9B:BF:C4:D7:7C:72:92:E4:CE:AC:86:01:49:A6:CE:20:26:01:37
Authority key identifier: 47:98:28:BD:C6:D0:59:E7:55:15:92:DE:3E:E2:9E:B4:1B:F7:BD:A5
Certificate issuer: /CN=479828bdc6d059e7551592de3ee29eb41bf7bda5
Certificate serial: 01976D744D9277815F9BB939555284E9298F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
Manifest number: 12C7
Signing time: Sat 14 Jun 2025 08:00:27 +0000
Manifest this update: Sat 14 Jun 2025 08:00:27 +0000
Manifest next update: Sun 15 Jun 2025 08:00:27 +0000
Files and hashes: 1: 6tr1rrCgjeuxrkgAXDLatxAPpWk.roa (hash: A5u3qVfZdPKR2rtZPYyIhEzH3krbvs2KLzMm8FE26Yo=)
2: R5govcbQWedVFZLePuKetBv3vaU.crl (hash: QXYuz6Vei4y2gFmw+uQWForRabHn6BpZPVn243s/IuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:4d:92:77:81:5f:9b:b9:39:55:52:84:e9:29:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=479828bdc6d059e7551592de3ee29eb41bf7bda5
Validity
Not Before: Jun 14 08:00:27 2025 GMT
Not After : Jun 15 08:00:27 2025 GMT
Subject: CN=e99bbfc4d77c7292e4ceac860149a6ce20260137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:71:93:ad:98:c2:c7:45:c8:6a:af:be:be:
a2:05:bc:71:35:cd:d5:12:c8:73:56:52:35:b2:a8:
d8:78:22:cb:95:1a:c6:02:da:68:f3:26:2f:71:b3:
b5:f2:8d:5f:ae:d1:7c:6d:c2:34:37:37:d5:fd:b7:
2d:08:66:bf:72:29:fe:37:bb:f6:86:33:f9:73:d9:
d4:e8:12:c8:2c:e0:98:c7:79:3e:cb:b9:55:8b:f5:
d4:cb:0a:87:bd:2c:c8:8f:07:d2:08:ee:47:84:e3:
a5:11:55:50:b0:13:02:0c:d1:3f:b5:e6:2d:5f:e6:
be:7c:24:90:97:8f:09:24:5f:dd:54:82:d5:ab:8c:
e0:72:91:7b:63:8e:d5:25:fe:ef:03:b7:9f:a6:4a:
34:7e:c3:e0:98:7e:1d:3e:e9:e5:94:0e:e7:db:84:
5e:ee:f2:4e:9b:8f:2f:81:d0:75:8e:b4:bf:fa:03:
69:f8:4f:d3:59:47:91:c9:7f:d2:9a:70:dd:f8:91:
2c:93:c4:35:ea:9d:e9:5c:fc:46:94:c2:a9:c5:20:
cf:a8:75:06:63:3d:f4:4b:a5:99:5c:40:e1:c4:b5:
b6:a5:b4:07:9e:37:f5:60:58:00:4c:00:d7:ad:cb:
3b:67:17:d7:b6:54:a1:9a:6e:3d:30:75:a7:61:69:
bc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9B:BF:C4:D7:7C:72:92:E4:CE:AC:86:01:49:A6:CE:20:26:01:37
X509v3 Authority Key Identifier:
keyid:47:98:28:BD:C6:D0:59:E7:55:15:92:DE:3E:E2:9E:B4:1B:F7:BD:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2a:78:50:e0:45:e6:e3:be:e5:87:1d:a6:9b:51:13:b6:9e:
18:db:fb:93:30:68:93:5d:90:06:b8:ab:39:f0:06:68:ac:61:
90:51:02:a9:fa:7f:c9:d0:09:66:4c:d6:f0:fa:41:11:23:90:
b8:31:52:28:6d:c3:fe:8b:bc:b3:ec:e4:1a:16:66:21:bc:db:
94:71:cf:5d:57:dd:8b:75:cf:f9:27:e7:2a:ab:79:69:17:64:
bc:e5:c8:70:65:be:7c:cb:a5:fb:3b:23:52:2d:a4:4f:72:66:
2a:a6:01:58:5c:55:bc:8a:e6:50:ef:50:c9:36:6e:b4:12:83:
07:59:d3:aa:fb:d4:7b:5b:6e:28:a3:a4:12:85:83:04:f6:7d:
b4:06:76:74:75:78:86:51:6d:2f:66:99:d6:fc:87:f6:0b:5a:
c8:42:1c:c8:0c:7d:21:08:bc:a3:93:f5:02:e1:ac:58:75:55:
72:d7:de:62:5e:9f:52:f3:c3:a2:b0:4a:d6:48:76:cf:9c:b6:
b0:bb:da:4c:49:09:bc:ff:90:6b:17:d5:43:2a:5d:cf:48:6d:
6d:f2:9c:26:22:4e:73:21:e0:7b:67:37:c5:b5:9b:fe:df:8b:
42:bf:46:ea:da:0c:03:00:98:24:b9:23:29:32:ab:f8:df:45:
04:61:c2:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtdE2Sd4Ffm7k5VVKE6SmPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3OTgyOGJkYzZkMDU5ZTc1NTE1OTJkZTNlZTI5ZWI0MWJm
N2JkYTUwHhcNMjUwNjE0MDgwMDI3WhcNMjUwNjE1MDgwMDI3WjAzMTEwLwYDVQQD
EyhlOTliYmZjNGQ3N2M3MjkyZTRjZWFjODYwMTQ5YTZjZTIwMjYwMTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNtxk62YwsdFyGqvvr6iBbxxNc3V
EshzVlI1sqjYeCLLlRrGAtpo8yYvcbO18o1frtF8bcI0NzfV/bctCGa/cin+N7v2
hjP5c9nU6BLILOCYx3k+y7lVi/XUywqHvSzIjwfSCO5HhOOlEVVQsBMCDNE/teYt
X+a+fCSQl48JJF/dVILVq4zgcpF7Y47VJf7vA7efpko0fsPgmH4dPunllA7n24Re
7vJOm48vgdB1jrS/+gNp+E/TWUeRyX/SmnDd+JEsk8Q16p3pXPxGlMKpxSDPqHUG
Yz30S6WZXEDhxLW2pbQHnjf1YFgATADXrcs7ZxfXtlShmm49MHWnYWm8/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmbv8TXfHKS5M6shgFJps4gJgE3MB8GA1UdIwQY
MBaAFEeYKL3G0FnnVRWS3j7inrQb972lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjVnb3ZjYlFXZWRWRlpMZVB1S2V0QnYzdmFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni81NDRiZGEtYTRlZi00MjU0LWJhMTkt
M2MxNGFkMmI4M2Q3LzEvUjVnb3ZjYlFXZWRWRlpMZVB1S2V0QnYzdmFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni81NDRiZGEtYTRlZi00MjU0LWJhMTktM2MxNGFkMmI4M2Q3
LzEvUjVnb3ZjYlFXZWRWRlpMZVB1S2V0QnYzdmFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCp4UOBF
5uO+5YcdpptRE7aeGNv7kzBok12QBrirOfAGaKxhkFECqfp/ydAJZkzW8PpBESOQ
uDFSKG3D/ou8s+zkGhZmIbzblHHPXVfdi3XP+SfnKqt5aRdkvOXIcGW+fMul+zsj
Ui2kT3JmKqYBWFxVvIrmUO9QyTZutBKDB1nTqvvUe1tuKKOkEoWDBPZ9tAZ2dHV4
hlFtL2aZ1vyH9gtayEIcyAx9IQi8o5P1AuGsWHVVctfeYl6fUvPDorBK1kh2z5y2
sLvaTEkJvP+QaxfVQypdz0htbfKcJiJOcyHge2c3xbWb/t+LQr9G6toMAwCYJLkj
KTKr+N9FBGHCzw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:04:20 2025 by rpki-client