Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
File: 5RZFNJeeYKVkcBIysuUgCIlUJgY.mft (raw, json)
Hash identifier: zRKuGXHLAa5nKxmoDutzec1205Ldu3XjFZsE7O0aARU=
Subject key identifier: 79:DB:02:34:01:24:FA:76:CF:EA:DD:51:5F:69:CF:E5:1F:1F:C0:4F
Authority key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
Certificate issuer: /CN=e5164534979e60a564701232b2e5200889542606
Certificate serial: 0197684E4B19DF7218B8B57B99DB01023223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
Manifest number: 0639
Signing time: Fri 13 Jun 2025 08:00:50 +0000
Manifest this update: Fri 13 Jun 2025 08:00:50 +0000
Manifest next update: Sat 14 Jun 2025 08:00:50 +0000
Files and hashes: 1: 5RZFNJeeYKVkcBIysuUgCIlUJgY.crl (hash: oEknfzHeZWnmjliCNI53E2Q6o4x/k/Sdw0T2i40TSVc=)
2: d099hTA9N0rBX0a4mIMTtvx7dLM.roa (hash: LT02ny7o04CIcPy2ptlO2f83f/uDQvGL+KruqdAn2tw=)
3: jfgLmk_8BZt8FNL99fA-Isnp7jU.roa (hash: 3hldq5xpp8oSt4a5EF6tgPHwrwLntpc0Iw/stE0N/MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:4b:19:df:72:18:b8:b5:7b:99:db:01:02:32:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5164534979e60a564701232b2e5200889542606
Validity
Not Before: Jun 13 08:00:50 2025 GMT
Not After : Jun 14 08:00:50 2025 GMT
Subject: CN=79db02340124fa76cfeadd515f69cfe51f1fc04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a9:89:ca:6c:9f:f2:9d:da:8a:b6:51:81:28:
f4:58:4a:aa:bf:fe:b7:1c:5d:22:78:55:da:cd:4b:
ee:23:1e:8c:fb:6a:4b:26:62:fd:12:09:0c:53:57:
e2:ab:c5:3b:24:d8:f8:7e:c1:aa:36:f8:7b:96:02:
bd:04:e3:9d:23:e3:c8:24:fa:31:8a:c5:a1:4c:c0:
46:74:fd:3f:5b:e8:a3:13:55:2c:de:e4:49:6d:31:
9b:67:40:a8:f6:1b:5b:4a:f2:77:f8:d0:b5:78:fb:
c5:76:16:62:14:56:77:7d:e0:db:62:92:74:3a:71:
53:c7:c4:d1:aa:bb:20:10:0b:e5:e1:9e:7d:d7:e0:
04:74:db:a8:5d:df:07:97:9d:53:aa:84:32:a9:8a:
76:08:5d:1d:ca:3b:8e:2c:8c:31:76:f9:a8:84:9a:
75:ab:6a:9f:29:d5:76:66:29:11:50:9d:dc:3a:c2:
30:3a:75:c4:12:a5:b7:36:25:2c:99:e7:40:37:7a:
6a:76:b6:6d:33:44:a9:fc:8d:c6:09:dd:54:14:0c:
43:0c:e3:1b:d3:bb:54:22:ee:98:3d:39:8b:ae:04:
13:e0:a2:22:68:3b:26:43:0e:c6:cc:f2:d2:c7:dd:
7e:37:fd:f0:87:19:e2:d1:f2:4c:16:1a:c3:81:0f:
1c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DB:02:34:01:24:FA:76:CF:EA:DD:51:5F:69:CF:E5:1F:1F:C0:4F
X509v3 Authority Key Identifier:
keyid:E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9a:c0:14:40:23:bf:3f:2d:7e:87:c5:09:55:12:8e:78:cd:
0a:81:c7:b7:b4:35:a2:2c:09:7f:92:25:a5:70:e4:ba:0c:06:
8b:bd:f9:0e:2a:88:8c:91:55:7d:ba:2d:b5:f9:72:c6:24:54:
fa:7e:6d:24:d7:15:3d:cd:9b:05:c6:a9:8d:fa:9f:e4:ae:60:
e5:38:13:76:30:3a:eb:90:f3:bd:b3:a9:67:e7:c1:53:96:3b:
9d:b4:73:89:28:c8:48:f1:a4:56:61:4c:83:f6:24:84:27:f0:
3e:b8:83:4e:ef:2c:18:39:86:75:66:9f:a3:bf:20:9d:68:6c:
70:f3:66:f6:3f:83:04:88:8a:7a:fb:f4:fb:44:0f:2c:81:ec:
75:a7:99:57:67:cd:23:6f:79:3e:b4:14:7e:2c:7a:0b:e5:11:
47:7f:53:5f:7e:2c:f8:19:ea:54:37:07:5b:c7:3d:0a:f6:ee:
f0:24:af:ac:9d:19:3f:ff:19:b7:6a:13:6f:9c:74:f5:7e:3b:
b7:c1:f4:9a:09:be:e8:e4:ea:f7:9d:ae:62:c9:86:d3:d9:ec:
d4:e4:e6:2c:4b:e8:53:de:14:c7:2e:b7:3e:34:eb:7e:d3:69:
f0:d2:dc:37:00:02:c2:65:e3:f4:44:fc:d8:37:c6:02:c1:83:
e5:af:d1:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoTksZ33IYuLV7mdsBAjIjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MTY0NTM0OTc5ZTYwYTU2NDcwMTIzMmIyZTUyMDA4ODk1
NDI2MDYwHhcNMjUwNjEzMDgwMDUwWhcNMjUwNjE0MDgwMDUwWjAzMTEwLwYDVQQD
Eyg3OWRiMDIzNDAxMjRmYTc2Y2ZlYWRkNTE1ZjY5Y2ZlNTFmMWZjMDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKmJymyf8p3airZRgSj0WEqqv/63
HF0ieFXazUvuIx6M+2pLJmL9EgkMU1fiq8U7JNj4fsGqNvh7lgK9BOOdI+PIJPox
isWhTMBGdP0/W+ijE1Us3uRJbTGbZ0Co9htbSvJ3+NC1ePvFdhZiFFZ3feDbYpJ0
OnFTx8TRqrsgEAvl4Z591+AEdNuoXd8Hl51TqoQyqYp2CF0dyjuOLIwxdvmohJp1
q2qfKdV2ZikRUJ3cOsIwOnXEEqW3NiUsmedAN3pqdrZtM0Sp/I3GCd1UFAxDDOMb
07tUIu6YPTmLrgQT4KIiaDsmQw7GzPLSx91+N/3whxni0fJMFhrDgQ8cnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnbAjQBJPp2z+rdUV9pz+UfH8BPMB8GA1UdIwQY
MBaAFOUWRTSXnmClZHASMrLlIAiJVCYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVJaRk5KZWVZS1ZrY0JJeXN1VWdDSWxVSmdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lNzdkN2ItYmMwZi00NjM1LTgxMDEt
ZDFlZWIyOWM5NTFiLzEvNVJaRk5KZWVZS1ZrY0JJeXN1VWdDSWxVSmdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lNzdkN2ItYmMwZi00NjM1LTgxMDEtZDFlZWIyOWM5NTFi
LzEvNVJaRk5KZWVZS1ZrY0JJeXN1VWdDSWxVSmdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5rAFEAj
vz8tfofFCVUSjnjNCoHHt7Q1oiwJf5IlpXDkugwGi735DiqIjJFVfbottflyxiRU
+n5tJNcVPc2bBcapjfqf5K5g5TgTdjA665DzvbOpZ+fBU5Y7nbRziSjISPGkVmFM
g/YkhCfwPriDTu8sGDmGdWafo78gnWhscPNm9j+DBIiKevv0+0QPLIHsdaeZV2fN
I295PrQUfix6C+URR39TX34s+BnqVDcHW8c9Cvbu8CSvrJ0ZP/8Zt2oTb5x09X47
t8H0mgm+6OTq952uYsmG09ns1OTmLEvoU94Uxy63PjTrftNp8NLcNwACwmXj9ET8
2DfGAsGD5a/R8g==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:02 2025 by rpki-client