Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier: 1OzI2L9E+4tJ75prMO5lwwWzALRz6mUsJKhLFfTsQMk=
Subject key identifier: 68:23:3A:AB:FD:DB:DC:6B:1A:1A:99:BB:E4:74:38:3E:ED:67:D8:EE
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 01977753A61B96621E3777734F935E4E2CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number: 1595
Signing time: Mon 16 Jun 2025 06:01:00 +0000
Manifest this update: Mon 16 Jun 2025 06:01:00 +0000
Manifest next update: Tue 17 Jun 2025 06:01:00 +0000
Files and hashes: 1: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: L1Lz/V7lkw6YoN830ZTRtgTRVb/hWQSo+JvRpXFz5Hc=)
2: FR3a7fbq59iIo0zAlvy5kzi1iZU.roa (hash: Z35c/JbC3hZCBf85VdNEpndC+c0TUxZMQxPjJSIsAQ0=)
3: suPxSfpNrh7z5_Ta2x6TjwnQ2sY.roa (hash: jrCuL3fpLVTl6VSsAmka/tgQrfuz/laa7SHWrZ9+ExE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:53:a6:1b:96:62:1e:37:77:73:4f:93:5e:4e:2c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Jun 16 06:01:00 2025 GMT
Not After : Jun 17 06:01:00 2025 GMT
Subject: CN=68233aabfddbdc6b1a1a99bbe474383eed67d8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:be:16:34:e6:1e:95:25:74:fe:8b:37:d9:d1:
fd:2b:73:c6:7b:16:70:89:49:28:41:50:c2:62:c7:
62:d0:4b:a0:a5:c4:0e:0c:8d:78:6c:64:40:a7:0c:
b4:af:cb:87:38:61:8e:01:2e:73:5c:d6:80:67:f1:
88:4c:dc:bf:4d:b8:e0:e0:02:33:5d:ca:ed:fe:9b:
e1:72:4f:8c:dc:91:9c:57:bc:1e:9e:52:15:7e:95:
e5:16:11:06:e7:74:f2:c4:ca:c6:a8:c7:ff:21:59:
4e:4f:e6:1c:86:cb:e7:e7:66:a4:3f:91:bb:f5:e3:
65:4f:88:a1:ee:a8:df:90:6c:9b:b6:a2:b7:ca:e9:
4d:a5:8a:62:96:35:78:ab:3c:b4:52:fc:2d:20:75:
7a:0a:04:f2:30:e7:eb:e4:ed:08:07:b3:f7:06:ba:
ab:e8:10:66:a6:4e:78:90:41:c6:14:69:be:24:e9:
a9:d1:24:88:64:19:eb:0d:3f:4e:91:c4:25:ce:59:
86:86:d6:ef:ed:da:1e:26:35:ad:81:65:e4:6d:05:
0b:3a:a3:d5:f1:9c:9f:78:8a:57:41:33:80:cf:fc:
81:57:63:b6:2f:f5:14:54:f4:8b:3b:8e:c9:a5:6c:
14:1c:ce:c2:bc:f5:7a:92:17:fa:a9:e1:13:eb:ff:
f9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:23:3A:AB:FD:DB:DC:6B:1A:1A:99:BB:E4:74:38:3E:ED:67:D8:EE
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f5:37:4f:0d:b1:36:07:a2:4a:84:67:52:56:04:a6:f6:4c:
a6:13:9d:87:43:f6:b1:d5:c4:6c:62:3a:27:f6:f9:24:44:5e:
61:40:a0:38:ab:a3:5b:02:e4:6f:df:04:cd:00:7c:1f:2e:c9:
f6:37:0f:bd:15:87:18:5c:17:71:15:76:72:5e:57:13:40:c9:
76:13:0d:e8:ed:78:83:e4:af:64:69:f4:4a:7c:b5:e4:b8:0d:
64:4f:60:57:df:0f:dc:cb:48:e7:41:07:4e:3d:27:17:f8:43:
08:2e:c5:3a:6e:1e:8e:90:ea:d4:57:bc:ef:b7:a3:61:7a:80:
84:0b:9d:19:40:f2:46:fe:03:fb:e5:04:dc:b3:ec:34:e2:10:
52:66:f6:d3:31:61:2d:fd:c1:0c:61:19:eb:61:01:55:5a:01:
0f:24:24:8e:e2:19:c0:62:c5:f2:51:1c:29:e7:ee:33:b5:8a:
dc:3f:fb:a6:f4:40:a2:6f:17:b1:7f:91:0b:13:6e:08:27:4f:
3f:d2:aa:b4:f5:05:7e:19:9a:29:c7:45:a4:24:b1:91:e1:f9:
cb:4f:1d:a9:88:eb:aa:a4:15:20:be:d4:2c:31:29:5a:f6:0b:
9e:a5:e3:61:fe:88:03:7b:a4:48:eb:02:7f:22:d4:da:85:df:
fb:27:99:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3U6YblmIeN3dzT5NeTiz/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1M2FkOWI0MzJiYjgzZDE0MWM0ODBkZWU3OGJjMzVmZjQ3
Y2I3MmMwHhcNMjUwNjE2MDYwMTAwWhcNMjUwNjE3MDYwMTAwWjAzMTEwLwYDVQQD
Eyg2ODIzM2FhYmZkZGJkYzZiMWExYTk5YmJlNDc0MzgzZWVkNjdkOGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA074WNOYelSV0/os32dH9K3PGexZw
iUkoQVDCYsdi0EugpcQODI14bGRApwy0r8uHOGGOAS5zXNaAZ/GITNy/Tbjg4AIz
Xcrt/pvhck+M3JGcV7wenlIVfpXlFhEG53TyxMrGqMf/IVlOT+Ychsvn52akP5G7
9eNlT4ih7qjfkGybtqK3yulNpYpiljV4qzy0UvwtIHV6CgTyMOfr5O0IB7P3Brqr
6BBmpk54kEHGFGm+JOmp0SSIZBnrDT9OkcQlzlmGhtbv7doeJjWtgWXkbQULOqPV
8ZyfeIpXQTOAz/yBV2O2L/UUVPSLO47JpWwUHM7CvPV6khf6qeET6//5RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgjOqv929xrGhqZu+R0OD7tZ9juMB8GA1UdIwQY
MBaAFOU62bQyu4PRQcSA3ueLw1/0fLcsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lOGJkMGItZjM2ZC00NWY1LWI5ODUt
MDliYjUyODc1MzFiLzEvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9lOGJkMGItZjM2ZC00NWY1LWI5ODUtMDliYjUyODc1MzFi
LzEvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvU3Tw2x
NgeiSoRnUlYEpvZMphOdh0P2sdXEbGI6J/b5JEReYUCgOKujWwLkb98EzQB8Hy7J
9jcPvRWHGFwXcRV2cl5XE0DJdhMN6O14g+SvZGn0Sny15LgNZE9gV98P3MtI50EH
Tj0nF/hDCC7FOm4ejpDq1Fe877ejYXqAhAudGUDyRv4D++UE3LPsNOIQUmb20zFh
Lf3BDGEZ62EBVVoBDyQkjuIZwGLF8lEcKefuM7WK3D/7pvRAom8XsX+RCxNuCCdP
P9KqtPUFfhmaKcdFpCSxkeH5y08dqYjrqqQVIL7ULDEpWvYLnqXjYf6IA3ukSOsC
fyLU2oXf+yeZdg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:49:24 2025 by rpki-client