Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
File: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json)
Hash identifier: w74jKBmX599HbNxURFYyyQS0o/Ar9i+roQ1QL0H3GWU=
Subject key identifier: 34:82:58:BB:E7:60:FF:94:0D:90:E9:34:4A:1C:89:14:8D:1E:EA:CA
Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Certificate issuer: /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Certificate serial: 0198D7A9521AA70DC7E72BF3201BAE72897C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
Manifest number: 0B6D
Signing time: Sat 23 Aug 2025 16:00:54 +0000
Manifest this update: Sat 23 Aug 2025 16:00:54 +0000
Manifest next update: Sun 24 Aug 2025 16:00:54 +0000
Files and hashes: 1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: QQ2P9PgaY11nQg61K6BQFJiqvIvJARZVr1DkK2qUYIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:52:1a:a7:0d:c7:e7:2b:f3:20:1b:ae:72:89:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Validity
Not Before: Aug 23 16:00:54 2025 GMT
Not After : Aug 24 16:00:54 2025 GMT
Subject: CN=348258bbe760ff940d90e9344a1c89148d1eeaca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:78:8c:45:7c:df:8c:b1:16:c9:95:d3:19:f6:
07:27:50:31:70:71:80:c9:81:4d:c5:1d:8c:0a:4e:
e7:d0:d0:66:cc:81:35:05:47:b4:bc:1c:c6:a4:a3:
52:e0:1c:d3:5f:5e:3f:14:3f:7c:34:6c:49:02:f1:
1d:dc:7d:5c:51:2c:fb:3d:8b:5a:f6:96:34:67:d2:
16:05:b2:17:d5:a9:59:57:16:ba:53:08:dc:70:d7:
30:e2:5e:36:82:53:62:f7:2f:72:27:74:49:e8:37:
cb:7e:01:d0:65:b0:d8:45:55:08:72:ed:48:71:27:
b1:92:02:bc:85:22:9a:e1:94:55:54:c1:e5:26:76:
ef:7e:4c:25:9e:9a:3f:c6:87:c2:e9:70:b9:58:31:
b5:3f:c1:3f:ac:4a:4a:05:8b:e7:d6:c3:3d:67:40:
83:72:a3:0b:25:b1:cb:19:44:b8:36:1f:c1:68:e5:
56:1d:28:12:68:b0:b5:8c:26:e1:8e:70:0a:53:f6:
b8:32:bc:0e:8d:1f:c9:15:9c:d7:79:26:68:da:7c:
b5:16:d3:81:e2:60:01:a6:4b:64:78:88:ed:13:73:
dd:fc:1b:0c:1e:22:b2:cc:b7:df:bc:54:18:c3:9f:
eb:6b:6e:84:9c:43:1d:c2:6b:cf:5e:8d:fa:ab:55:
06:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:82:58:BB:E7:60:FF:94:0D:90:E9:34:4A:1C:89:14:8D:1E:EA:CA
X509v3 Authority Key Identifier:
keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fb:85:e0:09:ff:8a:ce:25:74:fe:c3:b0:31:58:e7:6e:88:
d2:e4:b9:57:7d:c8:1b:62:d3:71:6f:a1:81:4c:f4:b0:94:81:
05:32:19:74:c2:c3:29:d5:66:00:2f:4d:91:02:c3:eb:38:c6:
77:a7:34:21:35:ab:ce:c4:38:5c:0a:45:3e:ba:b2:77:05:83:
8f:cf:64:a1:53:d2:85:05:0f:80:54:c9:14:c5:f0:d4:f7:62:
5e:24:7f:81:94:90:2d:1b:ea:bf:32:9c:3a:e9:0e:48:de:3a:
2e:89:d6:ed:3a:11:7e:fd:cb:3a:82:80:ac:c4:ef:04:41:a7:
48:13:a8:6d:da:ed:b2:f2:d5:6f:5e:55:d6:d5:d1:94:4d:01:
f2:18:5f:97:50:5a:3a:39:1b:d2:91:17:47:92:33:9c:a5:d4:
a7:c5:62:f1:fc:a8:a7:2c:35:21:2f:c2:e9:5a:15:53:e9:b3:
a4:24:3c:0e:51:61:76:3f:09:1e:b7:39:65:f9:26:e2:7e:ff:
44:2c:22:41:05:51:cf:00:64:4e:99:4b:2f:48:b0:53:76:3a:
e1:ea:64:f2:db:fd:8b:f0:e3:68:a9:a0:57:6d:b3:7e:f6:b4:
58:f8:97:0b:5b:9a:4d:e3:6e:98:b6:41:01:c7:e9:3c:dd:f3:
19:11:27:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqVIapw3H5yvzIBuucol8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MWQ3MTdmYjJkNDM3ZDQxMWQ4NzFhZjdiOWZiY2IwMWU4
OWY5NmMwHhcNMjUwODIzMTYwMDU0WhcNMjUwODI0MTYwMDU0WjAzMTEwLwYDVQQD
EygzNDgyNThiYmU3NjBmZjk0MGQ5MGU5MzQ0YTFjODkxNDhkMWVlYWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83iMRXzfjLEWyZXTGfYHJ1AxcHGA
yYFNxR2MCk7n0NBmzIE1BUe0vBzGpKNS4BzTX14/FD98NGxJAvEd3H1cUSz7PYta
9pY0Z9IWBbIX1alZVxa6UwjccNcw4l42glNi9y9yJ3RJ6DfLfgHQZbDYRVUIcu1I
cSexkgK8hSKa4ZRVVMHlJnbvfkwlnpo/xofC6XC5WDG1P8E/rEpKBYvn1sM9Z0CD
cqMLJbHLGUS4Nh/BaOVWHSgSaLC1jCbhjnAKU/a4MrwOjR/JFZzXeSZo2ny1FtOB
4mABpktkeIjtE3Pd/BsMHiKyzLffvFQYw5/ra26EnEMdwmvPXo36q1UGQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSCWLvnYP+UDZDpNEociRSNHurKMB8GA1UdIwQY
MBaAFOUdcX+y1DfUEdhxr3ufvLAeiflsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVIxeGY3TFVOOVFSMkhHdmU1LThzQjZKLVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xMmVkNjUtNDE1Yi00OGZiLWEzZDkt
MzE0ZDVlMmI2NmNhLzEvNVIxeGY3TFVOOVFSMkhHdmU1LThzQjZKLVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8xMmVkNjUtNDE1Yi00OGZiLWEzZDktMzE0ZDVlMmI2NmNh
LzEvNVIxeGY3TFVOOVFSMkhHdmU1LThzQjZKLVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfuF4An/
is4ldP7DsDFY526I0uS5V33IG2LTcW+hgUz0sJSBBTIZdMLDKdVmAC9NkQLD6zjG
d6c0ITWrzsQ4XApFPrqydwWDj89koVPShQUPgFTJFMXw1PdiXiR/gZSQLRvqvzKc
OukOSN46LonW7ToRfv3LOoKArMTvBEGnSBOobdrtsvLVb15V1tXRlE0B8hhfl1Ba
Ojkb0pEXR5IznKXUp8Vi8fyopyw1IS/C6VoVU+mzpCQ8DlFhdj8JHrc5Zfkm4n7/
RCwiQQVRzwBkTplLL0iwU3Y64epk8tv9i/DjaKmgV22zfva0WPiXC1uaTeNumLZB
AcfpPN3zGREnMA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:01:18 2025 by rpki-client