Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
File: 5c4xqiBddBAUR-_9bDE1GGFGRTo.mft (raw, json)
Hash identifier: TR4+ja+l++ItbVTBUTC9LYACQDy6CFCY+IFlbnPreBM=
Subject key identifier: 4F:20:D9:9C:9D:F6:07:1C:7A:3B:AF:18:DA:4F:85:17:3F:8A:38:84
Authority key identifier: E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
Certificate issuer: /CN=e5ce31aa205d74101447effd6c3135186146453a
Certificate serial: 0198D54E92106D8ACDD4FBE6530E52E72C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 05:02:32 +0000
Manifest this update: Sat 23 Aug 2025 05:02:32 +0000
Manifest next update: Sun 24 Aug 2025 05:02:32 +0000
Files and hashes: 1: 1prUVz0HPmxrICK89MLWQGvd_os.roa (hash: nYOxG6xI/OF/g1onNafntFHFC9rtfVRgZj8b/z6tXRg=)
2: 5c4xqiBddBAUR-_9bDE1GGFGRTo.crl (hash: +9SiWxi55iNa79tzBgk0Z/x+bPcZg2V0y8a63rarSRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:92:10:6d:8a:cd:d4:fb:e6:53:0e:52:e7:2c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5ce31aa205d74101447effd6c3135186146453a
Validity
Not Before: Aug 23 05:02:32 2025 GMT
Not After : Aug 24 05:02:32 2025 GMT
Subject: CN=4f20d99c9df6071c7a3baf18da4f85173f8a3884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:f7:f6:6c:4e:ce:87:2a:3e:f3:43:96:21:
93:0f:f2:fb:ac:b4:54:64:77:f1:e6:62:79:be:a9:
0c:a2:0f:d8:d8:18:79:3a:7b:f1:38:be:de:40:14:
81:57:95:75:da:22:00:74:83:c6:6a:37:b3:53:4c:
b3:a3:0a:bf:53:61:6a:fc:0c:94:95:94:1e:7a:51:
74:ca:a1:db:23:0b:11:ec:02:ef:3b:77:e5:2f:22:
5a:8a:01:cf:5b:39:e9:3a:be:27:18:d1:eb:e7:3c:
ce:71:c2:0d:90:45:ee:a6:c7:63:42:9f:68:22:c9:
b4:8f:f1:30:0a:e2:0b:5f:d0:ec:30:48:e9:ae:24:
21:1d:27:cf:56:5d:ff:4c:4b:22:3d:d7:6e:d3:51:
61:86:8d:9a:75:dd:95:a3:54:8c:21:0e:9c:4f:83:
4c:ca:88:78:83:99:24:49:fa:7c:9a:87:75:ad:8b:
4b:a7:f3:1c:c2:fc:b9:87:b3:ea:08:c0:10:3c:95:
93:fd:55:93:0a:a7:eb:43:de:71:4f:8c:29:47:1a:
b4:53:f9:47:75:27:f0:0e:88:80:68:21:ca:c9:73:
d4:fd:9a:20:4a:ba:6f:d6:37:60:90:ed:b7:2e:c1:
44:ed:f4:f5:7b:6f:75:7d:f7:bf:4f:44:8d:3a:12:
0a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:20:D9:9C:9D:F6:07:1C:7A:3B:AF:18:DA:4F:85:17:3F:8A:38:84
X509v3 Authority Key Identifier:
keyid:E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b3:08:5e:1c:47:6c:7b:37:89:21:46:e0:d6:22:dd:85:f7:
df:a0:cf:66:5d:a2:15:7d:8d:15:a5:3c:38:52:ee:38:78:f5:
9b:14:fb:57:fa:02:f5:54:81:15:cc:85:c0:78:c8:81:92:1c:
6b:d9:6f:2e:c7:ee:b0:e6:d7:1c:66:08:35:8b:25:85:ae:19:
86:c9:35:90:5a:9b:c9:a9:77:b1:3d:92:d0:46:d2:0b:38:09:
50:a4:6e:e3:5c:5d:01:02:15:d4:ef:16:fd:22:e5:86:6a:1c:
8d:fc:f6:d2:79:00:71:34:b9:fc:85:9c:a7:e2:af:17:27:dd:
47:60:a1:32:f6:16:69:8c:da:30:5f:85:c5:bc:5c:1b:a2:72:
ca:76:23:b9:b3:3f:7e:d3:fc:c5:01:c1:d8:83:fb:1e:d6:2d:
82:9c:62:89:62:36:64:03:9b:ad:d8:54:78:42:4d:bf:de:36:
af:b3:54:84:80:79:b7:f5:67:ac:33:f0:9d:17:f6:af:ce:8a:
e7:e2:fe:77:20:d9:d1:a7:58:05:5b:36:13:cd:c7:a4:c8:d7:
50:0f:96:9a:36:32:e2:32:04:40:6d:53:25:ed:6f:f6:83:7e:
d9:6b:4f:f6:b4:c2:63:68:6b:65:01:d7:04:ec:2e:11:69:b9:
64:0b:dd:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTpIQbYrN1PvmUw5S5yySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1Y2UzMWFhMjA1ZDc0MTAxNDQ3ZWZmZDZjMzEzNTE4NjE0
NjQ1M2EwHhcNMjUwODIzMDUwMjMyWhcNMjUwODI0MDUwMjMyWjAzMTEwLwYDVQQD
Eyg0ZjIwZDk5YzlkZjYwNzFjN2EzYmFmMThkYTRmODUxNzNmOGEzODg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5f39mxOzocqPvNDliGTD/L7rLRU
ZHfx5mJ5vqkMog/Y2Bh5OnvxOL7eQBSBV5V12iIAdIPGajezU0yzowq/U2Fq/AyU
lZQeelF0yqHbIwsR7ALvO3flLyJaigHPWznpOr4nGNHr5zzOccINkEXupsdjQp9o
Ism0j/EwCuILX9DsMEjpriQhHSfPVl3/TEsiPddu01Fhho2add2Vo1SMIQ6cT4NM
yoh4g5kkSfp8mod1rYtLp/Mcwvy5h7PqCMAQPJWT/VWTCqfrQ95xT4wpRxq0U/lH
dSfwDoiAaCHKyXPU/ZogSrpv1jdgkO23LsFE7fT1e291ffe/T0SNOhIKMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8g2Zyd9gccejuvGNpPhRc/ijiEMB8GA1UdIwQY
MBaAFOXOMaogXXQQFEfv/WwxNRhhRkU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84Yzg1MjQtN2Y4NS00MzEzLThlZDIt
YmY4NjZkYTc0N2FmLzEvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC84Yzg1MjQtN2Y4NS00MzEzLThlZDItYmY4NjZkYTc0N2Fm
LzEvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrMIXhxH
bHs3iSFG4NYi3YX336DPZl2iFX2NFaU8OFLuOHj1mxT7V/oC9VSBFcyFwHjIgZIc
a9lvLsfusObXHGYINYslha4Zhsk1kFqbyal3sT2S0EbSCzgJUKRu41xdAQIV1O8W
/SLlhmocjfz20nkAcTS5/IWcp+KvFyfdR2ChMvYWaYzaMF+FxbxcG6JyynYjubM/
ftP8xQHB2IP7HtYtgpxiiWI2ZAObrdhUeEJNv942r7NUhIB5t/VnrDPwnRf2r86K
5+L+dyDZ0adYBVs2E83HpMjXUA+WmjYy4jIEQG1TJe1v9oN+2WtP9rTCY2hrZQHX
BOwuEWm5ZAvd/g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:59 2025 by rpki-client