
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
File: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft (raw, json)
Hash identifier: pVE8EmLqpobUZoMdEo+cASb17FlaTkIhJFPucTremzg=
Subject key identifier: 10:D8:FD:BC:66:0E:CD:5A:A2:D2:84:6F:C0:7D:31:F5:89:50:7F:BD
Authority key identifier: E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
Certificate issuer: /CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Certificate serial: 0198D54E10E14FC93CADFCFB05474D4A3460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
Manifest number: 15E3
Signing time: Sat 23 Aug 2025 05:01:59 +0000
Manifest this update: Sat 23 Aug 2025 05:01:59 +0000
Manifest next update: Sun 24 Aug 2025 05:01:59 +0000
Files and hashes: 1: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl (hash: 6Rg26X6KQoLBhXd5rgFKFHGwoyaXxYvxaWXxcJ/0gQE=)
2: 80LgJ-bt-JVgl28q8iQu1JZiGBg.roa (hash: SbBL53O4850VvEVexpsOte6oujPeOQsBp7gTPoi1dqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:10:e1:4f:c9:3c:ad:fc:fb:05:47:4d:4a:34:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Validity
Not Before: Aug 23 05:01:59 2025 GMT
Not After : Aug 24 05:01:59 2025 GMT
Subject: CN=10d8fdbc660ecd5aa2d2846fc07d31f589507fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:07:72:a5:60:82:1b:13:4c:a4:5f:bb:68:e6:
4c:eb:82:98:a0:36:70:66:8c:a0:2b:f0:26:af:83:
7e:75:a5:be:c4:bc:e3:bc:14:92:d4:b3:0e:4e:ff:
ec:d1:ad:9c:9f:a1:43:8d:47:29:36:44:c7:68:cc:
c0:c7:fe:e5:a4:19:0c:b4:a5:d5:7a:71:57:be:c5:
b6:1a:81:82:b4:59:d7:3d:13:fc:f4:f2:92:5a:20:
ef:80:87:42:9c:96:1c:41:c0:21:98:ad:60:57:5f:
8d:8e:67:b6:b0:4f:a5:23:2e:e5:8f:69:fe:b0:9a:
7a:0a:2a:4f:c8:91:77:88:57:02:df:1e:cd:9e:ff:
08:26:5b:bd:7b:58:28:81:bd:fc:6a:be:62:72:95:
f7:5f:62:83:ba:1d:18:73:f7:e5:99:90:d7:23:ac:
dd:a9:11:cc:03:c5:3a:ae:e8:67:2c:aa:84:57:e0:
c4:96:ac:cf:16:19:cf:67:ee:41:72:7a:9a:3d:2a:
94:e6:b1:04:31:e1:a5:49:de:3b:fd:11:24:eb:37:
ba:2e:7f:39:6e:e4:3a:2b:4c:31:4a:be:b1:3a:32:
ca:fd:04:b2:92:8b:b9:17:bc:b5:93:08:38:65:09:
77:81:82:f6:64:ff:50:43:1d:d5:4e:4f:c8:94:05:
ab:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D8:FD:BC:66:0E:CD:5A:A2:D2:84:6F:C0:7D:31:F5:89:50:7F:BD
X509v3 Authority Key Identifier:
keyid:E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ca:9d:e1:57:4a:e8:da:da:26:2f:33:ea:d4:02:36:e9:63:
a3:80:2a:89:49:49:8f:ac:2c:3a:7d:ff:93:50:97:74:6a:bc:
b2:c1:5b:26:f3:f2:0c:b3:48:d0:80:a5:93:b7:c9:d9:c6:fe:
d5:5b:5c:d5:53:93:e2:6f:68:17:16:55:f1:f9:45:b6:89:3b:
8a:9c:6d:d1:bf:23:b4:96:27:bb:cd:72:49:25:ec:7e:87:41:
a2:ca:c5:49:36:21:66:7b:78:63:ab:ed:44:a1:22:bf:f7:cf:
1c:f3:28:02:ba:21:26:32:06:f5:41:42:af:47:3b:dd:14:45:
ce:fa:2c:09:78:4d:95:7d:f9:f4:1d:e0:5f:a9:12:e7:0b:cb:
59:fe:07:39:cb:04:3b:5a:ee:c5:57:f6:95:c3:b8:22:8c:26:
68:b8:a6:51:8c:fc:65:c9:33:e4:48:89:d9:3c:ee:27:c3:13:
6c:51:e6:c8:bb:1c:b2:aa:d2:6b:d7:b4:ea:e0:d4:27:92:45:
38:b4:ba:4c:d5:25:d3:54:02:e6:7e:2c:7a:7f:d4:c2:d4:8b:
26:c9:8d:3f:84:f3:02:5c:07:21:90:ee:e8:3e:15:f2:be:b4:
e0:09:ed:c9:3c:5c:3c:28:cd:00:5d:6f:9b:0c:34:5c:99:cc:
a2:b8:7b:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVThDhT8k8rfz7BUdNSjRgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NDNmYzIwM2Y3MDZmOTczMTQxMjc2MWIyN2ExYTRiMzk1
Y2ZjMWUwHhcNMjUwODIzMDUwMTU5WhcNMjUwODI0MDUwMTU5WjAzMTEwLwYDVQQD
EygxMGQ4ZmRiYzY2MGVjZDVhYTJkMjg0NmZjMDdkMzFmNTg5NTA3ZmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AdypWCCGxNMpF+7aOZM64KYoDZw
ZoygK/Amr4N+daW+xLzjvBSS1LMOTv/s0a2cn6FDjUcpNkTHaMzAx/7lpBkMtKXV
enFXvsW2GoGCtFnXPRP89PKSWiDvgIdCnJYcQcAhmK1gV1+Njme2sE+lIy7lj2n+
sJp6CipPyJF3iFcC3x7Nnv8IJlu9e1gogb38ar5icpX3X2KDuh0Yc/flmZDXI6zd
qRHMA8U6ruhnLKqEV+DElqzPFhnPZ+5BcnqaPSqU5rEEMeGlSd47/REk6ze6Ln85
buQ6K0wxSr6xOjLK/QSykou5F7y1kwg4ZQl3gYL2ZP9QQx3VTk/IlAWriwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDY/bxmDs1aotKEb8B9MfWJUH+9MB8GA1UdIwQY
MBaAFORD/CA/cG+XMUEnYbJ6Gks5XPweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUVQOElEOXdiNWN4UVNkaHNub2FTemxjX0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wNjg5ZWEtY2RkOS00NzkwLTlmOWIt
YzBmOWQwODdmYzEwLzEvNUVQOElEOXdiNWN4UVNkaHNub2FTemxjX0I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8wNjg5ZWEtY2RkOS00NzkwLTlmOWItYzBmOWQwODdmYzEw
LzEvNUVQOElEOXdiNWN4UVNkaHNub2FTemxjX0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcqd4VdK
6NraJi8z6tQCNuljo4AqiUlJj6wsOn3/k1CXdGq8ssFbJvPyDLNI0IClk7fJ2cb+
1Vtc1VOT4m9oFxZV8flFtok7ipxt0b8jtJYnu81ySSXsfodBosrFSTYhZnt4Y6vt
RKEiv/fPHPMoArohJjIG9UFCr0c73RRFzvosCXhNlX359B3gX6kS5wvLWf4HOcsE
O1ruxVf2lcO4IowmaLimUYz8Zckz5EiJ2TzuJ8MTbFHmyLscsqrSa9e06uDUJ5JF
OLS6TNUl01QC5n4sen/UwtSLJsmNP4TzAlwHIZDu6D4V8r604AntyTxcPCjNAF1v
mww0XJnMorh7Bw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:46 2025 by rpki-client