Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
File: 5tM83lfaCcfZM3ce6hQllAdvmiM.mft (raw, json)
Hash identifier: IkvsZRCfAIjReZzXGy4waZE1FJX6LQAotPdUZabubf0=
Subject key identifier: 5F:B1:2C:83:29:0D:8A:F8:9A:54:94:03:01:75:78:99:76:0A:FE:F9
Authority key identifier: E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
Certificate issuer: /CN=e6d33cde57da09c7d933771eea142594076f9a23
Certificate serial: 01976C98F3BB7588D7ADF6DDD47C9CBF9A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
Manifest number: 158B
Signing time: Sat 14 Jun 2025 04:00:52 +0000
Manifest this update: Sat 14 Jun 2025 04:00:52 +0000
Manifest next update: Sun 15 Jun 2025 04:00:52 +0000
Files and hashes: 1: 5tM83lfaCcfZM3ce6hQllAdvmiM.crl (hash: UxdQjZP7pGmYkIJlCPGh53HKy+iF0OHqgc7dOmsighw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:f3:bb:75:88:d7:ad:f6:dd:d4:7c:9c:bf:9a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6d33cde57da09c7d933771eea142594076f9a23
Validity
Not Before: Jun 14 04:00:52 2025 GMT
Not After : Jun 15 04:00:52 2025 GMT
Subject: CN=5fb12c83290d8af89a54940301757899760afef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:27:7e:57:07:a6:bd:15:a7:7f:bc:05:b3:
8a:60:47:2a:39:0c:c6:6a:19:80:35:4b:d3:03:40:
99:c8:bc:29:3a:52:a2:f1:d3:08:98:b9:0b:17:f6:
19:45:90:91:7a:f9:f2:f6:2b:a1:58:9c:ec:b5:b1:
71:a3:8c:f7:44:a7:da:7a:c7:4c:d2:9c:44:2e:6d:
5e:4d:67:25:fe:af:7c:7a:a9:bd:4e:ed:e7:d2:8c:
6b:73:55:fd:47:6c:2a:51:30:1b:2c:30:60:6a:90:
2a:f1:e0:df:f6:a0:62:fb:33:f0:fb:0c:c5:ab:89:
7a:4c:12:18:62:b5:0f:32:5d:c0:c9:62:8f:e8:45:
d2:5c:0f:d3:37:cd:05:62:7f:98:5a:aa:43:4b:a7:
60:84:96:c3:56:94:60:15:c0:ed:6c:17:23:49:a9:
d4:aa:20:7e:ac:ec:68:86:ef:f6:9f:b5:3a:b6:3a:
fc:60:86:69:00:ff:e8:51:11:bf:78:fd:70:1e:68:
7d:fe:d0:0f:cb:6b:63:21:61:36:b4:85:d6:0d:eb:
aa:9b:66:1a:10:8a:c8:68:a0:50:33:67:40:9c:01:
9b:45:62:07:ac:3e:bb:a1:df:48:e3:42:af:be:79:
a3:d3:42:3b:e7:aa:1c:5e:38:68:89:7d:53:67:85:
aa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B1:2C:83:29:0D:8A:F8:9A:54:94:03:01:75:78:99:76:0A:FE:F9
X509v3 Authority Key Identifier:
keyid:E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:90:c8:1d:dc:c0:9f:7b:8f:23:a4:fb:34:09:6e:a0:69:89:
99:85:34:5f:21:50:7b:e9:0f:b9:42:b6:e2:39:99:33:8f:bb:
9a:0b:ab:7d:7b:13:ff:a0:06:6b:a1:bd:1f:bb:3a:e6:03:08:
f5:22:03:53:62:a7:c7:6c:03:76:63:6c:04:a7:35:e6:4c:24:
6a:8b:51:e3:9d:f8:33:11:23:f2:59:25:d9:5b:44:81:f9:1d:
68:9f:6c:e7:dc:1d:3d:45:e7:6f:03:77:bc:d4:c2:2d:82:25:
3a:be:e9:87:10:4c:18:8c:3b:2d:8b:96:ef:72:8f:23:8b:9a:
2c:de:c1:c1:e2:7c:2e:5a:57:ad:0e:72:81:6c:c8:c8:da:9f:
8f:e8:e0:ce:bd:43:c7:ea:6a:c4:d9:29:17:fd:7f:27:81:9b:
5b:ef:47:29:40:50:53:b0:11:5f:c4:0a:2e:07:15:4c:22:b3:
9e:a4:57:21:12:9a:25:07:5d:20:48:eb:a7:56:38:33:dc:3c:
5a:ca:99:da:9d:ed:7e:53:28:e4:cc:ab:43:ba:3b:a7:0d:0f:
c4:25:90:e3:a9:51:fa:d8:19:f2:de:a6:c8:d5:c5:56:1f:95:
8e:91:c1:8b:a9:7b:2e:61:4c:3c:d2:f9:83:8c:e0:9c:7d:ab:
e8:89:8c:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmPO7dYjXrfbd1Hycv5ouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZDMzY2RlNTdkYTA5YzdkOTMzNzcxZWVhMTQyNTk0MDc2
ZjlhMjMwHhcNMjUwNjE0MDQwMDUyWhcNMjUwNjE1MDQwMDUyWjAzMTEwLwYDVQQD
Eyg1ZmIxMmM4MzI5MGQ4YWY4OWE1NDk0MDMwMTc1Nzg5OTc2MGFmZWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvcnflcHpr0Vp3+8BbOKYEcqOQzG
ahmANUvTA0CZyLwpOlKi8dMImLkLF/YZRZCRevny9iuhWJzstbFxo4z3RKfaesdM
0pxELm1eTWcl/q98eqm9Tu3n0oxrc1X9R2wqUTAbLDBgapAq8eDf9qBi+zPw+wzF
q4l6TBIYYrUPMl3AyWKP6EXSXA/TN80FYn+YWqpDS6dghJbDVpRgFcDtbBcjSanU
qiB+rOxohu/2n7U6tjr8YIZpAP/oURG/eP1wHmh9/tAPy2tjIWE2tIXWDeuqm2Ya
EIrIaKBQM2dAnAGbRWIHrD67od9I40Kvvnmj00I756ocXjhoiX1TZ4WqcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+xLIMpDYr4mlSUAwF1eJl2Cv75MB8GA1UdIwQY
MBaAFObTPN5X2gnH2TN3HuoUJZQHb5ojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXRNODNsZmFDY2ZaTTNjZTZoUWxsQWR2bWlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80ZjlkNGMtMTk0Ni00YWY5LThjMjIt
NDE5NzUzZDNmODhkLzEvNXRNODNsZmFDY2ZaTTNjZTZoUWxsQWR2bWlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80ZjlkNGMtMTk0Ni00YWY5LThjMjItNDE5NzUzZDNmODhk
LzEvNXRNODNsZmFDY2ZaTTNjZTZoUWxsQWR2bWlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpDIHdzA
n3uPI6T7NAluoGmJmYU0XyFQe+kPuUK24jmZM4+7mgurfXsT/6AGa6G9H7s65gMI
9SIDU2Knx2wDdmNsBKc15kwkaotR4534MxEj8lkl2VtEgfkdaJ9s59wdPUXnbwN3
vNTCLYIlOr7phxBMGIw7LYuW73KPI4uaLN7BweJ8LlpXrQ5ygWzIyNqfj+jgzr1D
x+pqxNkpF/1/J4GbW+9HKUBQU7ARX8QKLgcVTCKznqRXIRKaJQddIEjrp1Y4M9w8
WsqZ2p3tflMo5MyrQ7o7pw0PxCWQ46lR+tgZ8t6myNXFVh+VjpHBi6l7LmFMPNL5
g4zgnH2r6ImMfw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:23:18 2025 by rpki-client