Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
File: 5ARKnRChnmsaztrJ_3eNT0CQaMs.mft (raw, json)
Hash identifier: JP+GgT2gr8s5ShNnCMKx+NYGdbIKUQqF6TNAcJMQyF8=
Subject key identifier: 69:2C:2F:32:C9:99:45:AA:1A:90:A1:0A:ED:2B:18:31:48:7B:F5:86
Authority key identifier: E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
Certificate issuer: /CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Certificate serial: 0198D7E0F989FF1D4C94E2E9AFCE9AE107F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
Manifest number: 0B9D
Signing time: Sat 23 Aug 2025 17:01:41 +0000
Manifest this update: Sat 23 Aug 2025 17:01:41 +0000
Manifest next update: Sun 24 Aug 2025 17:01:41 +0000
Files and hashes: 1: 5ARKnRChnmsaztrJ_3eNT0CQaMs.crl (hash: /l41mSXNZ+KQEhXt9q6bRPv+Dtvs7Pe7xJ8SdzCUaiw=)
2: ZEltVn27Wr_tDWWUDsnoIPSexys.roa (hash: nTpT1tYnBssg4bHieTQOF2MWxJ4AkBKr1Y7xxrvK7kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e0:f9:89:ff:1d:4c:94:e2:e9:af:ce:9a:e1:07:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Validity
Not Before: Aug 23 17:01:41 2025 GMT
Not After : Aug 24 17:01:41 2025 GMT
Subject: CN=692c2f32c99945aa1a90a10aed2b1831487bf586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8e:7f:75:2b:c4:4f:04:d4:2f:bd:60:86:2c:
54:bf:12:52:d5:10:6e:46:a0:d7:c5:e3:6f:f5:59:
ac:91:35:4e:11:97:3a:09:e8:f1:7e:22:12:70:f1:
01:bc:41:6d:23:c3:3c:0e:23:f2:6d:3d:35:12:d5:
48:15:bc:c9:b3:42:2f:e4:9a:91:fc:9f:cb:ac:2e:
e8:b3:55:36:56:12:13:58:6d:29:b9:2a:80:dd:9b:
ba:bc:77:64:c7:4b:46:d2:1e:d6:5f:9c:60:75:8f:
3e:96:9a:7c:5a:68:49:56:9c:9f:cc:37:cc:b2:0b:
b4:7c:42:1a:29:ab:5d:83:6d:08:20:00:63:77:00:
6e:d5:61:db:b6:97:67:e2:62:90:b2:05:99:7d:f6:
3f:01:dd:e7:d7:fc:9b:f2:a6:f3:e8:1a:d6:a6:7f:
0f:01:17:ae:7b:f9:5c:ab:af:cd:94:b1:58:a4:e1:
48:eb:b6:ea:f3:55:3a:c0:c7:dd:0e:5e:8b:28:50:
ea:66:28:5d:d8:45:e4:f7:3b:a3:ea:f8:9a:f4:be:
73:74:c0:3f:d9:7a:a6:60:41:6e:cc:ff:2c:56:fe:
b6:69:a8:1f:ab:30:fa:7f:0d:6a:1a:15:41:c4:04:
73:c6:0a:ba:87:f4:cf:65:14:2f:2a:35:27:f4:f4:
90:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2C:2F:32:C9:99:45:AA:1A:90:A1:0A:ED:2B:18:31:48:7B:F5:86
X509v3 Authority Key Identifier:
keyid:E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b2:ae:2e:3a:51:8b:08:b8:80:b9:5e:9b:e7:3e:09:ff:3f:
a0:b5:15:a5:38:c7:e5:38:9a:ac:9c:47:bf:db:36:d9:40:d2:
3a:ab:82:73:aa:fb:f7:c2:9b:65:ec:e6:6c:36:a2:92:8f:d2:
1f:3c:43:84:e6:b6:fc:13:a1:cc:ad:f2:34:7c:e7:ce:3f:76:
ac:38:ea:80:2d:b2:c8:12:68:0b:77:71:cb:f5:79:1e:9b:2e:
6b:79:07:02:d1:5c:c7:27:2f:09:f4:6b:88:44:e6:00:e3:1c:
3a:71:98:11:53:8b:1c:ab:72:13:fe:ef:01:53:78:0f:08:97:
10:1f:c8:35:00:ef:74:eb:6f:ab:71:b5:86:bd:7a:3c:44:75:
31:a0:43:e2:a1:d9:09:d5:4a:90:50:c9:da:eb:fa:a2:fa:31:
6f:89:fe:c1:0a:70:7f:83:d1:1b:94:69:df:53:6d:e6:66:eb:
a1:0e:d3:f8:be:0c:25:ec:2c:9b:ff:85:73:65:ca:79:fd:16:
c8:e3:4e:f8:3f:c0:a8:37:d5:f2:56:38:9a:66:1c:88:4b:f1:
c2:5d:36:f0:82:13:0b:ef:23:3d:a4:59:14:f3:0a:aa:b1:54:
6b:57:48:90:f0:ea:d2:82:c4:51:1b:1c:ad:d8:2e:6c:cb:70:
65:bf:b9:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjX4PmJ/x1MlOLpr86a4Qf5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MDQ0YTlkMTBhMTllNmIxYWNlZGFjOWZmNzc4ZDRmNDA5
MDY4Y2IwHhcNMjUwODIzMTcwMTQxWhcNMjUwODI0MTcwMTQxWjAzMTEwLwYDVQQD
Eyg2OTJjMmYzMmM5OTk0NWFhMWE5MGExMGFlZDJiMTgzMTQ4N2JmNTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko5/dSvETwTUL71ghixUvxJS1RBu
RqDXxeNv9VmskTVOEZc6CejxfiIScPEBvEFtI8M8DiPybT01EtVIFbzJs0Iv5JqR
/J/LrC7os1U2VhITWG0puSqA3Zu6vHdkx0tG0h7WX5xgdY8+lpp8WmhJVpyfzDfM
sgu0fEIaKatdg20IIABjdwBu1WHbtpdn4mKQsgWZffY/Ad3n1/yb8qbz6BrWpn8P
AReue/lcq6/NlLFYpOFI67bq81U6wMfdDl6LKFDqZihd2EXk9zuj6via9L5zdMA/
2XqmYEFuzP8sVv62aagfqzD6fw1qGhVBxARzxgq6h/TPZRQvKjUn9PSQ/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGksLzLJmUWqGpChCu0rGDFIe/WGMB8GA1UdIwQY
MBaAFOQESp0QoZ5rGs7ayf93jU9AkGjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUFSS25SQ2hubXNhenRySl8zZU5UMENRYU1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wZThiNWQtZWU5OC00N2ZiLWEzODkt
MDNmYTdhOWMzNzFlLzEvNUFSS25SQ2hubXNhenRySl8zZU5UMENRYU1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wZThiNWQtZWU5OC00N2ZiLWEzODktMDNmYTdhOWMzNzFl
LzEvNUFSS25SQ2hubXNhenRySl8zZU5UMENRYU1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7KuLjpR
iwi4gLlem+c+Cf8/oLUVpTjH5TiarJxHv9s22UDSOquCc6r798KbZezmbDaiko/S
HzxDhOa2/BOhzK3yNHznzj92rDjqgC2yyBJoC3dxy/V5Hpsua3kHAtFcxycvCfRr
iETmAOMcOnGYEVOLHKtyE/7vAVN4DwiXEB/INQDvdOtvq3G1hr16PER1MaBD4qHZ
CdVKkFDJ2uv6ovoxb4n+wQpwf4PRG5Rp31Nt5mbroQ7T+L4MJewsm/+Fc2XKef0W
yONO+D/AqDfV8lY4mmYciEvxwl028IITC+8jPaRZFPMKqrFUa1dIkPDq0oLEURsc
rdgubMtwZb+58w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:06:13 2025 by rpki-client