Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File: 5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier: C0CaBtKxE1IBlV5dQrZK3/uW+C8JZi4ESqTxCoEJ3R8=
Subject key identifier: D4:25:0D:F6:5C:CC:1D:2C:52:31:02:7A:6F:54:A7:36:B8:1B:1C:51
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer: /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial: 0197775339DDED73FDA8629A71DE1FF61F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number: 0C21
Signing time: Mon 16 Jun 2025 06:00:32 +0000
Manifest this update: Mon 16 Jun 2025 06:00:32 +0000
Manifest next update: Tue 17 Jun 2025 06:00:32 +0000
Files and hashes: 1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: bYJhwdZsK56otgl0q9G9WRtE/eYCZr9qnNIUFAaojDM=)
2: PPydfwM1qrJ_5LEP2Lu7pEc74lg.roa (hash: pMnth1QdrHrp1n0i0bRqhdBwVaon4su5sBWJ9WYdSts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:53:39:dd:ed:73:fd:a8:62:9a:71:de:1f:f6:1f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
Validity
Not Before: Jun 16 06:00:32 2025 GMT
Not After : Jun 17 06:00:32 2025 GMT
Subject: CN=d4250df65ccc1d2c5231027a6f54a736b81b1c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:0b:ad:96:cd:80:87:a3:6a:99:eb:df:c3:
ed:be:e4:3a:af:79:7f:c8:6c:a0:6e:66:f4:9d:92:
36:49:55:31:2f:75:18:b3:bf:2b:48:4c:3d:3c:ed:
f3:6f:e3:d2:36:20:8b:d2:f9:52:f5:0f:5d:5e:c2:
eb:bf:17:c7:25:c1:58:78:ff:34:cd:a5:95:32:b9:
8a:ce:4f:bd:0c:18:86:8c:f4:4d:e4:a0:f0:83:98:
b2:df:59:94:a9:5e:27:d2:17:b9:fb:e5:46:ce:df:
30:7d:c5:60:2f:b2:df:07:c7:c2:a2:ac:7a:fa:8a:
20:ce:87:32:f5:ee:e4:ac:51:4b:b1:66:0d:a4:41:
a4:28:3b:2d:36:e2:a1:e6:cc:b0:d2:48:f3:d8:14:
38:9c:14:6f:1e:bf:d7:1e:f1:34:f4:48:b4:8c:73:
d6:1c:21:34:0a:af:31:0b:b1:51:95:15:f6:fb:a5:
31:a6:65:7e:4a:09:5c:85:d2:0d:7c:3a:38:c9:44:
2d:da:82:fc:47:b1:18:5c:0c:bc:08:38:32:63:c8:
26:a4:d3:1d:5c:17:16:2b:f0:a6:50:6f:d5:11:bf:
ff:2e:86:e5:71:31:86:59:8b:c6:ae:33:a9:c6:07:
ac:73:9a:f1:0b:06:19:ce:9b:6f:4c:f8:51:09:eb:
f5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:25:0D:F6:5C:CC:1D:2C:52:31:02:7A:6F:54:A7:36:B8:1B:1C:51
X509v3 Authority Key Identifier:
keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:56:39:0a:74:bc:06:02:76:36:08:a0:e6:5c:9d:da:fe:7d:
4b:08:49:61:ca:35:e0:eb:90:20:a3:fb:e2:4d:ac:03:f9:d0:
68:03:0b:34:d8:48:03:30:69:20:84:d0:73:51:82:30:fb:c2:
45:9f:27:9a:e7:12:c3:18:61:1b:a7:19:a0:16:bf:ed:b7:79:
cd:b0:d7:e8:f7:58:54:e0:2a:1d:7f:24:d7:46:b3:1b:f6:2c:
ab:cd:10:c0:c4:b2:ed:52:3b:38:de:91:18:c5:c1:e0:ab:b9:
9b:71:9a:85:e9:da:a4:c4:0e:fa:dc:eb:75:3e:b0:84:21:9e:
78:bd:7a:2d:05:af:fa:18:14:8a:74:60:c8:fe:60:0d:33:af:
2a:f4:bb:9d:ae:46:c7:e6:cd:52:c2:d7:7d:f2:96:74:8b:b9:
c7:c9:2c:78:92:0a:de:25:3a:bc:6d:d7:3d:d7:41:a9:0a:ca:
bb:6f:ea:15:54:e0:2f:68:39:63:54:9f:52:d9:7f:6f:6e:a1:
18:62:5c:93:c5:4b:fb:f3:36:13:cf:f1:eb:97:5e:8f:8b:b1:
80:05:bc:db:44:88:10:01:17:fc:38:e3:48:1a:3c:50:2e:aa:
4f:d3:9c:67:8c:44:0e:6f:29:bc:eb:e0:7b:cd:fd:c9:e8:4a:
97:7b:82:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3Uznd7XP9qGKacd4f9h+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NTAyMjAwYTZlNjNmNzYzOTdhZGI5NGRmZDgzNGMxMTY4
MDliOWYwHhcNMjUwNjE2MDYwMDMyWhcNMjUwNjE3MDYwMDMyWjAzMTEwLwYDVQQD
EyhkNDI1MGRmNjVjY2MxZDJjNTIzMTAyN2E2ZjU0YTczNmI4MWIxYzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv50LrZbNgIejapnr38PtvuQ6r3l/
yGygbmb0nZI2SVUxL3UYs78rSEw9PO3zb+PSNiCL0vlS9Q9dXsLrvxfHJcFYeP80
zaWVMrmKzk+9DBiGjPRN5KDwg5iy31mUqV4n0he5++VGzt8wfcVgL7LfB8fCoqx6
+oogzocy9e7krFFLsWYNpEGkKDstNuKh5syw0kjz2BQ4nBRvHr/XHvE09Ei0jHPW
HCE0Cq8xC7FRlRX2+6UxpmV+SglchdINfDo4yUQt2oL8R7EYXAy8CDgyY8gmpNMd
XBcWK/CmUG/VEb//LoblcTGGWYvGrjOpxgesc5rxCwYZzptvTPhRCev1FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQlDfZczB0sUjECem9Upza4GxxRMB8GA1UdIwQY
MBaAFOZQIgCm5j92OXrblN/YNMEWgJufMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWxBaUFLYm1QM1k1ZXR1VTM5ZzB3UmFBbTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy85ZmY2MDItYjBiZC00YzNmLWFmOTQt
MmZjMzRhZDlkZDQ3LzEvNWxBaUFLYm1QM1k1ZXR1VTM5ZzB3UmFBbTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy85ZmY2MDItYjBiZC00YzNmLWFmOTQtMmZjMzRhZDlkZDQ3
LzEvNWxBaUFLYm1QM1k1ZXR1VTM5ZzB3UmFBbTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArlY5CnS8
BgJ2Ngig5lyd2v59SwhJYco14OuQIKP74k2sA/nQaAMLNNhIAzBpIITQc1GCMPvC
RZ8nmucSwxhhG6cZoBa/7bd5zbDX6PdYVOAqHX8k10azG/Ysq80QwMSy7VI7ON6R
GMXB4Ku5m3GahenapMQO+tzrdT6whCGeeL16LQWv+hgUinRgyP5gDTOvKvS7na5G
x+bNUsLXffKWdIu5x8kseJIK3iU6vG3XPddBqQrKu2/qFVTgL2g5Y1SfUtl/b26h
GGJck8VL+/M2E8/x65dej4uxgAW820SIEAEX/DjjSBo8UC6qT9OcZ4xEDm8pvOvg
e839yehKl3uCPA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 09:25:16 2025 by rpki-client