Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
File: 5n17NXAHcGQBPaGOKeaQzUyb1xA.mft (raw, json)
Hash identifier: D0oG7eCuwNBh0nD/hAMjybnd8OiEqsC+aa55J3pGSVk=
Subject key identifier: 66:BA:F6:9E:53:83:0A:A3:A3:78:BE:4E:8B:56:85:A6:C9:E2:48:56
Authority key identifier: E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
Certificate issuer: /CN=e67d7b3570077064013da18e29e690cd4c9bd710
Certificate serial: 019777F886F532836A32A7DD30FCD31B1E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
Manifest number: 0278
Signing time: Mon 16 Jun 2025 09:01:05 +0000
Manifest this update: Mon 16 Jun 2025 09:01:05 +0000
Manifest next update: Tue 17 Jun 2025 09:01:05 +0000
Files and hashes: 1: 5n17NXAHcGQBPaGOKeaQzUyb1xA.crl (hash: J9BNVe7qGJJ2TC6NkKrLmsX9WIc4QcamyaKlY5+/N0s=)
2: UXfwFJz04X4XmU1ABHkr-Q0ovq0.roa (hash: vTofq9wYPlysSoUgx6HvDr7C9PTa+inohQrNa6Pfbqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:f8:86:f5:32:83:6a:32:a7:dd:30:fc:d3:1b:1e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67d7b3570077064013da18e29e690cd4c9bd710
Validity
Not Before: Jun 16 09:01:05 2025 GMT
Not After : Jun 17 09:01:05 2025 GMT
Subject: CN=66baf69e53830aa3a378be4e8b5685a6c9e24856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a1:28:c9:ef:84:9a:a0:95:e4:d2:b3:04:5d:
84:48:28:bf:c1:e5:03:bf:19:4a:bf:a6:7a:7e:78:
f0:d5:d6:1e:b7:30:88:dc:02:58:0f:bf:39:3a:1d:
00:af:96:1d:0c:2b:c2:72:23:c3:6c:5e:c4:5c:77:
5c:a7:b7:72:0a:2d:16:91:5c:4a:a9:64:91:41:c9:
1e:f9:ea:08:11:9f:39:1e:82:6e:79:a7:13:0d:22:
77:64:66:a8:ef:37:de:8e:01:dc:7c:fd:03:a6:1e:
26:e1:d8:03:6a:e9:53:72:a7:d9:54:b2:c3:c4:13:
23:25:53:5d:06:6a:35:0d:71:99:92:c6:1d:d2:f3:
7e:c9:94:50:28:87:83:6d:f1:17:3b:f7:e4:23:ae:
3a:76:d3:9e:e1:35:16:df:4b:80:37:5b:78:e4:8e:
2c:c4:0d:be:80:94:58:57:51:c0:80:d5:3e:cf:53:
4a:78:b7:81:de:1a:7f:81:39:82:e1:69:81:8c:75:
5d:7d:38:f2:fc:1c:13:8c:5f:16:cb:ec:6d:2b:84:
40:6b:c9:c2:1e:61:bb:8f:f0:20:90:36:35:83:e3:
6e:a6:a7:38:49:e6:45:59:63:e9:18:e3:50:13:e7:
a3:63:6a:58:85:11:eb:cd:a7:61:19:93:3f:ab:9a:
94:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BA:F6:9E:53:83:0A:A3:A3:78:BE:4E:8B:56:85:A6:C9:E2:48:56
X509v3 Authority Key Identifier:
keyid:E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:29:09:0a:ae:e0:dd:b2:08:77:f4:ee:96:af:4b:87:01:0b:
73:91:ca:85:6e:04:03:f0:06:84:26:39:64:05:34:7a:83:11:
dd:f5:48:66:d2:8a:39:bd:3b:05:03:74:0a:c2:52:51:3a:c4:
f1:2c:a3:e3:a4:61:2b:bd:22:c0:6c:90:eb:cb:ed:fe:70:ab:
af:7f:59:74:b3:38:51:4b:68:bd:3f:f2:ad:9a:17:4a:f5:ba:
df:9e:e5:3a:51:80:f1:31:ce:6a:4d:04:07:3a:c0:4e:7f:c4:
15:40:62:00:a9:f8:de:a8:43:b1:f1:ab:64:7f:92:1f:c8:23:
f9:e2:e2:c1:8a:0a:cf:77:42:16:59:2e:b3:27:32:c6:3f:31:
0b:b8:ef:32:4a:07:5e:e8:d7:99:3a:03:27:e2:07:8d:f6:1d:
9a:02:98:de:48:5f:ec:22:88:73:86:92:8a:99:3d:f3:ef:ee:
e6:ac:35:58:26:af:35:a8:b2:ff:84:6e:c1:e2:fe:63:21:a7:
e9:42:98:26:b8:a2:7e:96:d1:9e:7f:da:26:aa:49:95:b6:fa:
50:84:48:f4:87:f6:0c:93:62:62:a9:0c:b9:c9:13:26:d5:38:
c1:85:fe:58:29:13:de:b9:5c:7a:9d:81:22:da:d8:65:0e:b6:
a6:e7:85:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3+Ib1MoNqMqfdMPzTGx5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2N2Q3YjM1NzAwNzcwNjQwMTNkYTE4ZTI5ZTY5MGNkNGM5
YmQ3MTAwHhcNMjUwNjE2MDkwMTA1WhcNMjUwNjE3MDkwMTA1WjAzMTEwLwYDVQQD
Eyg2NmJhZjY5ZTUzODMwYWEzYTM3OGJlNGU4YjU2ODVhNmM5ZTI0ODU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKEoye+EmqCV5NKzBF2ESCi/weUD
vxlKv6Z6fnjw1dYetzCI3AJYD785Oh0Ar5YdDCvCciPDbF7EXHdcp7dyCi0WkVxK
qWSRQcke+eoIEZ85HoJueacTDSJ3ZGao7zfejgHcfP0Dph4m4dgDaulTcqfZVLLD
xBMjJVNdBmo1DXGZksYd0vN+yZRQKIeDbfEXO/fkI646dtOe4TUW30uAN1t45I4s
xA2+gJRYV1HAgNU+z1NKeLeB3hp/gTmC4WmBjHVdfTjy/BwTjF8Wy+xtK4RAa8nC
HmG7j/AgkDY1g+Nupqc4SeZFWWPpGONQE+ejY2pYhRHrzadhGZM/q5qU4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGa69p5Tgwqjo3i+TotWhabJ4khWMB8GA1UdIwQY
MBaAFOZ9ezVwB3BkAT2hjinmkM1Mm9cQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lYjdlMGMtNTlhMS00ZjkzLThiMjct
YWM0ODgzZTQ3NjY1LzEvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lYjdlMGMtNTlhMS00ZjkzLThiMjctYWM0ODgzZTQ3NjY1
LzEvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdikJCq7g
3bIId/Tulq9LhwELc5HKhW4EA/AGhCY5ZAU0eoMR3fVIZtKKOb07BQN0CsJSUTrE
8Syj46RhK70iwGyQ68vt/nCrr39ZdLM4UUtovT/yrZoXSvW6357lOlGA8THOak0E
BzrATn/EFUBiAKn43qhDsfGrZH+SH8gj+eLiwYoKz3dCFlkusycyxj8xC7jvMkoH
XujXmToDJ+IHjfYdmgKY3khf7CKIc4aSipk98+/u5qw1WCavNaiy/4RuweL+YyGn
6UKYJriifpbRnn/aJqpJlbb6UIRI9If2DJNiYqkMuckTJtU4wYX+WCkT3rlcep2B
ItrYZQ62pueFQQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:21:32 2025 by rpki-client