Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
File: S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft (raw, json)
Hash identifier: +KzUDWcOiMzUx1SRGZyu8OovT24kvjMhx1n/Tt6H4GI=
Subject key identifier: A1:77:80:A0:28:4C:88:BE:D1:50:CE:C3:7A:E5:11:4B:D1:EC:94:49
Authority key identifier: 4B:93:C6:A1:0D:14:1F:00:AE:FA:DE:01:BC:D3:49:2F:75:4F:4E:83
Certificate issuer: /CN=4b93c6a10d141f00aefade01bcd3492f754f4e83
Certificate serial: 01976F9A0E313138D8271449E42C88C1F0A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
Manifest number: 14E9
Signing time: Sat 14 Jun 2025 18:00:56 +0000
Manifest this update: Sat 14 Jun 2025 18:00:56 +0000
Manifest next update: Sun 15 Jun 2025 18:00:56 +0000
Files and hashes: 1: S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl (hash: MfIiuNBz0V0keb3VIMmfKKvp5M9j9xudtfHLNOH8POo=)
2: v6SZGiKR24BVvAjZdd8cz7dRNVo.roa (hash: SrmYXvyqUl8YVIgTkfPYRcexlIdDbvR6648X1c8kcVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:0e:31:31:38:d8:27:14:49:e4:2c:88:c1:f0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b93c6a10d141f00aefade01bcd3492f754f4e83
Validity
Not Before: Jun 14 18:00:56 2025 GMT
Not After : Jun 15 18:00:56 2025 GMT
Subject: CN=a17780a0284c88bed150cec37ae5114bd1ec9449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:74:c5:9d:a2:99:4e:ac:5d:16:db:06:88:0e:
cc:9a:59:66:29:bd:e1:23:8e:93:44:55:01:36:82:
e8:49:74:9a:75:b5:d1:86:d1:e8:b2:d8:3f:a2:3a:
b6:4c:8d:06:24:59:3b:79:75:42:56:fc:bd:28:94:
ed:98:4a:f5:b0:e9:e1:d2:85:52:34:53:fa:12:6b:
43:9c:c7:cb:ee:2b:25:20:f4:32:02:64:69:be:d3:
06:a5:3c:4f:45:42:87:e7:eb:94:dc:30:c1:c7:ff:
80:83:86:57:b2:65:e8:30:37:57:4f:f1:b0:3b:e0:
01:f0:e5:50:01:4a:1f:ad:99:46:9d:82:4f:4d:75:
31:99:fc:16:f0:c7:80:26:a2:5c:b1:40:88:51:73:
de:43:0d:4f:c4:dc:a5:91:bf:90:42:19:09:4c:d2:
5f:56:ef:40:d6:0b:be:79:71:ac:40:4d:aa:49:c9:
d6:62:90:b1:19:54:12:1c:be:2d:de:05:67:08:cb:
ce:5a:14:7b:23:2f:06:6a:33:51:3e:29:9d:c5:63:
de:4d:96:51:75:77:f7:38:16:83:2a:6c:12:c0:69:
4f:7e:54:61:64:13:24:09:f1:21:d2:4d:71:8b:66:
60:e5:27:f7:b0:a1:dd:30:36:c1:5a:30:17:f6:76:
41:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:77:80:A0:28:4C:88:BE:D1:50:CE:C3:7A:E5:11:4B:D1:EC:94:49
X509v3 Authority Key Identifier:
keyid:4B:93:C6:A1:0D:14:1F:00:AE:FA:DE:01:BC:D3:49:2F:75:4F:4E:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:98:20:81:8e:ad:11:58:8c:a4:b5:3c:41:dd:aa:d3:8d:15:
26:69:7e:c4:a3:26:b2:6b:8e:00:e7:26:fe:50:8b:e0:5f:57:
3a:ae:41:86:e6:8c:1f:1e:85:50:25:a7:ad:7c:90:72:e3:88:
ea:f6:57:c1:6b:1b:d2:12:3f:7f:e4:b7:94:8a:4c:46:37:16:
e5:aa:7b:2f:3f:aa:9a:ab:70:d8:b3:eb:d9:c3:84:df:e5:75:
93:f4:bc:87:bb:1a:b0:e3:22:e4:bb:d9:8b:c3:f5:a9:d4:5b:
10:3a:64:29:26:93:8e:5a:40:d0:02:15:be:26:20:e4:1e:8a:
3f:86:10:35:76:36:aa:dc:32:7e:77:0c:98:f5:bf:f9:8d:8a:
de:ee:d7:bd:6f:f5:5b:d0:c4:05:05:f6:a1:c0:c7:cd:a2:65:
5a:77:27:b3:64:87:d9:9d:4e:06:f7:ca:69:27:92:3d:48:9e:
19:43:82:e3:1f:c2:42:28:5b:9e:12:92:dc:25:85:1a:ac:a4:
55:ab:27:21:1d:9e:ed:97:0b:79:c2:33:23:2f:d5:0a:41:2e:
bc:e2:c8:4a:20:05:ff:94:91:61:6f:d6:a7:f6:3f:4a:ae:ae:
71:65:ac:8a:10:34:ae:8b:a2:85:31:45:ce:03:d0:17:3b:8e:
4a:a9:4c:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmg4xMTjYJxRJ5CyIwfClMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOTNjNmExMGQxNDFmMDBhZWZhZGUwMWJjZDM0OTJmNzU0
ZjRlODMwHhcNMjUwNjE0MTgwMDU2WhcNMjUwNjE1MTgwMDU2WjAzMTEwLwYDVQQD
EyhhMTc3ODBhMDI4NGM4OGJlZDE1MGNlYzM3YWU1MTE0YmQxZWM5NDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XTFnaKZTqxdFtsGiA7MmllmKb3h
I46TRFUBNoLoSXSadbXRhtHostg/ojq2TI0GJFk7eXVCVvy9KJTtmEr1sOnh0oVS
NFP6EmtDnMfL7islIPQyAmRpvtMGpTxPRUKH5+uU3DDBx/+Ag4ZXsmXoMDdXT/Gw
O+AB8OVQAUofrZlGnYJPTXUxmfwW8MeAJqJcsUCIUXPeQw1PxNylkb+QQhkJTNJf
Vu9A1gu+eXGsQE2qScnWYpCxGVQSHL4t3gVnCMvOWhR7Iy8GajNRPimdxWPeTZZR
dXf3OBaDKmwSwGlPflRhZBMkCfEh0k1xi2Zg5Sf3sKHdMDbBWjAX9nZBDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKF3gKAoTIi+0VDOw3rlEUvR7JRJMB8GA1UdIwQY
MBaAFEuTxqENFB8ArvreAbzTSS91T06DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVQR29RMFVId0N1LXQ0QnZOTkpMM1ZQVG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8yODg0YTEtYzEyNC00NTY1LWI4NDEt
ZTEwNGM5ODJkN2EwLzEvUzVQR29RMFVId0N1LXQ0QnZOTkpMM1ZQVG9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8yODg0YTEtYzEyNC00NTY1LWI4NDEtZTEwNGM5ODJkN2Ew
LzEvUzVQR29RMFVId0N1LXQ0QnZOTkpMM1ZQVG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpgggY6t
EViMpLU8Qd2q040VJml+xKMmsmuOAOcm/lCL4F9XOq5BhuaMHx6FUCWnrXyQcuOI
6vZXwWsb0hI/f+S3lIpMRjcW5ap7Lz+qmqtw2LPr2cOE3+V1k/S8h7sasOMi5LvZ
i8P1qdRbEDpkKSaTjlpA0AIVviYg5B6KP4YQNXY2qtwyfncMmPW/+Y2K3u7XvW/1
W9DEBQX2ocDHzaJlWncns2SH2Z1OBvfKaSeSPUieGUOC4x/CQihbnhKS3CWFGqyk
VasnIR2e7ZcLecIzIy/VCkEuvOLISiAF/5SRYW/Wp/Y/Sq6ucWWsihA0rouihTFF
zgPQFzuOSqlMCw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:07:39 2025 by rpki-client