Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
File: x-2m5S-HeWCp4PvJPmg_5khKawQ.mft (raw, json)
Hash identifier: 5s+76sRY8fcmS7CLgPB+hYc5mkuEiTPxHKIagqfGSAk=
Subject key identifier: EB:BB:E3:8B:AE:05:8C:C7:2C:09:4B:28:D2:92:42:2A:8E:01:08:FE
Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
Certificate issuer: /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Certificate serial: 019783C602594381D627E89C6D16D4C115E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
Manifest number: 159A
Signing time: Wed 18 Jun 2025 16:01:21 +0000
Manifest this update: Wed 18 Jun 2025 16:01:21 +0000
Manifest next update: Thu 19 Jun 2025 16:01:21 +0000
Files and hashes: 1: AHyOG1MnctFTYdTzOeujyYGDJDQ.roa (hash: iaAt0/bbvCRZ2f2g8keArsuPB1vBUzluOk1uRDDqIZ4=)
2: x-2m5S-HeWCp4PvJPmg_5khKawQ.crl (hash: dbzk1kx32Cja/Z/Y7IFZ2EgQzzIm1AzgR/sm3k8FVj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:c6:02:59:43:81:d6:27:e8:9c:6d:16:d4:c1:15:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Validity
Not Before: Jun 18 16:01:21 2025 GMT
Not After : Jun 19 16:01:21 2025 GMT
Subject: CN=ebbbe38bae058cc72c094b28d292422a8e0108fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:97:18:a9:ec:fe:2d:4d:36:77:e2:0c:b3:
80:0a:10:60:49:d7:af:09:e8:60:39:ae:00:79:71:
19:67:13:84:5f:48:12:93:fa:a8:4f:34:4a:7c:01:
54:35:5f:c5:cf:b8:89:fd:db:3d:51:d5:fb:04:c5:
62:df:fe:12:5c:bf:a5:87:db:e6:0c:2c:98:9a:0f:
be:23:c6:3b:27:e5:31:68:90:d9:4a:27:9a:e7:c5:
0f:f3:82:f7:d3:7d:28:35:f2:04:22:dd:fa:10:99:
93:cf:9b:0f:0a:46:ea:b5:52:a8:4c:bf:3c:49:eb:
2a:47:4e:9e:86:d2:f8:9f:0a:77:f0:ea:85:98:02:
e3:3e:d8:1e:ff:85:fd:6d:4a:63:26:23:b0:60:6b:
3b:2a:81:37:90:b3:92:08:f9:bf:39:af:20:33:2a:
c1:fc:9c:73:91:3b:22:58:1d:e3:55:4c:90:4c:08:
a1:06:32:09:a2:52:dc:12:9f:8a:b9:b3:94:d8:c7:
97:90:2d:f6:d0:b2:8e:30:f4:15:f9:3a:3e:49:59:
80:4e:7c:dc:13:c5:02:fc:36:48:80:e0:7f:13:61:
b1:f3:8e:c2:20:c4:5f:f6:ff:05:b9:4a:8b:7e:30:
ea:c4:4c:9a:69:9f:ed:e4:8a:bc:23:3d:e6:13:7e:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BB:E3:8B:AE:05:8C:C7:2C:09:4B:28:D2:92:42:2A:8E:01:08:FE
X509v3 Authority Key Identifier:
keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:03:f2:8f:58:2a:18:a6:76:44:bf:dc:56:7b:93:83:91:b7:
9d:7c:0a:16:0c:a1:ef:3b:1a:2d:7e:ae:23:6b:75:4c:14:31:
19:3c:dd:6e:cd:5c:0a:1f:3a:d9:c5:54:ab:84:ef:b0:5b:89:
b4:a9:b6:f9:d8:b5:75:c5:95:37:13:7b:bc:51:f0:81:3e:10:
a1:b7:72:5c:84:79:f3:c0:1d:80:a9:cb:62:25:c7:78:91:12:
ad:ab:14:1b:a5:7b:62:2c:b8:b6:e2:36:9f:12:9e:3d:00:ab:
3d:df:fb:1a:a4:23:59:62:42:db:1d:3d:b3:70:68:1d:5a:23:
7b:08:40:13:a8:66:5f:0d:53:76:94:f5:39:df:46:32:10:cf:
6a:df:d6:33:ca:36:af:d4:3a:1b:a3:88:db:4f:69:de:6f:db:
d4:db:6a:d9:59:6c:ea:8f:b6:57:ca:8a:49:4c:30:3d:78:db:
26:30:33:7f:97:16:d5:7a:4c:2e:e1:9b:ba:f8:7c:76:2a:c6:
ab:dd:c1:1a:f1:5c:d6:15:b3:d7:fc:14:0e:13:53:32:17:48:
62:e4:ec:ba:6d:5f:6c:4d:73:48:52:eb:43:cf:de:d5:b8:4f:
b8:cd:73:d5:64:46:80:52:a7:f7:00:44:c4:b1:5a:33:0f:ea:
34:3c:28:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeDxgJZQ4HWJ+icbRbUwRXjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZWRhNmU1MmY4Nzc5NjBhOWUwZmJjOTNlNjgzZmU2NDg0
YTZiMDQwHhcNMjUwNjE4MTYwMTIxWhcNMjUwNjE5MTYwMTIxWjAzMTEwLwYDVQQD
EyhlYmJiZTM4YmFlMDU4Y2M3MmMwOTRiMjhkMjkyNDIyYThlMDEwOGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkGXGKns/i1NNnfiDLOAChBgSdev
CehgOa4AeXEZZxOEX0gSk/qoTzRKfAFUNV/Fz7iJ/ds9UdX7BMVi3/4SXL+lh9vm
DCyYmg++I8Y7J+UxaJDZSiea58UP84L3030oNfIEIt36EJmTz5sPCkbqtVKoTL88
SesqR06ehtL4nwp38OqFmALjPtge/4X9bUpjJiOwYGs7KoE3kLOSCPm/Oa8gMyrB
/JxzkTsiWB3jVUyQTAihBjIJolLcEp+KubOU2MeXkC320LKOMPQV+To+SVmATnzc
E8UC/DZIgOB/E2Gx847CIMRf9v8FuUqLfjDqxEyaaZ/t5Iq8Iz3mE35IXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOu744uuBYzHLAlLKNKSQiqOAQj+MB8GA1UdIwQY
MBaAFMftpuUvh3lgqeD7yT5oP+ZISmsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveC0ybTVTLUhlV0NwNFB2SlBtZ181a2hLYXdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iNmRiMzYtY2Y4Ni00MTcyLThkZDIt
ZTVmZDkxZDEzOTUwLzEveC0ybTVTLUhlV0NwNFB2SlBtZ181a2hLYXdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iNmRiMzYtY2Y4Ni00MTcyLThkZDItZTVmZDkxZDEzOTUw
LzEveC0ybTVTLUhlV0NwNFB2SlBtZ181a2hLYXdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwPyj1gq
GKZ2RL/cVnuTg5G3nXwKFgyh7zsaLX6uI2t1TBQxGTzdbs1cCh862cVUq4TvsFuJ
tKm2+di1dcWVNxN7vFHwgT4QobdyXIR588AdgKnLYiXHeJESrasUG6V7Yiy4tuI2
nxKePQCrPd/7GqQjWWJC2x09s3BoHVojewhAE6hmXw1TdpT1Od9GMhDPat/WM8o2
r9Q6G6OI209p3m/b1Ntq2Vls6o+2V8qKSUwwPXjbJjAzf5cW1XpMLuGbuvh8dirG
q93BGvFc1hWz1/wUDhNTMhdIYuTsum1fbE1zSFLrQ8/e1bhPuM1z1WRGgFKn9wBE
xLFaMw/qNDwoWQ==
-----END CERTIFICATE-----
Generated at Thu Jun 19 01:10:04 2025 by rpki-client