Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
File: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json)
Hash identifier: LQb1fcUfoxQdx6KgTMU6HEtFGoU5L/tKVu7HGsVEQX8=
Subject key identifier: FF:73:30:A6:E2:20:FD:C7:5D:84:4A:36:EA:47:ED:C0:3A:04:4C:00
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 0198D583B79DDE07E4F4E9B83004D0391B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
Manifest number: 1242
Signing time: Sat 23 Aug 2025 06:00:35 +0000
Manifest this update: Sat 23 Aug 2025 06:00:35 +0000
Manifest next update: Sun 24 Aug 2025 06:00:35 +0000
Files and hashes: 1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: y960hr3IOT6bMGBAdtPd6PMfrFHPDdWKf/fgVxrJ2EQ=)
2: heGVk36ucrG4MWNpzqidvrKZ7YQ.roa (hash: m5uFEBEQAoAGMceOf2ib4bFCfxUv5uqZ6mZG8baGWlk=)
3: vKXgeHxyf9Ij8PbBtwAWk4PkSNM.roa (hash: FZfpvGBPzqeBXQfd0+/kWA7PAyR+Gx7rv6DgDmnZlfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b7:9d:de:07:e4:f4:e9:b8:30:04:d0:39:1b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: Aug 23 06:00:35 2025 GMT
Not After : Aug 24 06:00:35 2025 GMT
Subject: CN=ff7330a6e220fdc75d844a36ea47edc03a044c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8c:ba:96:92:b7:28:d0:aa:80:f4:91:60:f3:
94:f8:fc:b9:0c:02:36:96:08:a2:82:e0:96:c1:07:
e8:db:c1:2e:c8:10:18:54:9f:1e:3c:c7:89:f7:8e:
5b:be:82:aa:4d:67:57:0f:d2:4e:d6:12:99:f8:44:
4e:17:82:d8:ba:b5:a6:a8:51:6d:9b:78:98:b2:48:
b3:a2:72:2b:2a:0b:b4:76:f5:dc:dc:a9:c4:97:3f:
d7:6c:dc:ec:2b:04:7c:e2:cc:be:fb:4e:e4:2c:5e:
96:7c:27:cc:40:3e:45:0a:7e:b9:46:d0:42:f0:83:
f5:ad:b3:76:83:af:18:37:b9:d9:c6:f8:7c:c0:be:
0c:d5:39:92:30:f6:e1:ba:65:91:b5:54:09:7f:5b:
aa:5f:99:9b:6c:fe:f3:0d:ac:c5:a7:73:9b:a2:3d:
04:fe:6a:5f:a8:22:d3:59:13:65:ae:e3:43:ef:49:
7b:8b:ad:8c:cc:61:cf:3f:86:7d:12:2d:6b:b0:1e:
85:b8:23:63:6c:86:06:b2:28:1f:97:13:9f:0e:66:
40:64:90:06:78:f6:f1:f6:61:d6:da:d2:9d:e8:4a:
50:df:cd:44:98:be:cc:0e:35:9e:84:14:19:2e:f4:
bc:d4:f9:2a:7b:f0:5a:32:50:d6:2e:48:7d:70:0a:
40:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:73:30:A6:E2:20:FD:C7:5D:84:4A:36:EA:47:ED:C0:3A:04:4C:00
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:de:b6:a0:96:ad:0d:8a:03:bd:db:6f:39:ae:77:cf:44:fa:
a9:27:16:bc:8c:37:69:fd:6b:86:e3:8f:e9:49:1b:94:6e:b6:
28:a6:47:23:5e:4f:8b:34:64:e0:18:15:96:93:ab:53:38:23:
b0:22:77:b4:47:ff:3f:7b:dd:ba:0b:31:16:30:c2:f8:41:a3:
95:ce:b1:af:8d:9b:04:9e:cf:c8:5c:91:dd:06:5c:32:d2:45:
db:62:49:2c:18:bf:c8:32:2b:50:c8:14:b7:b1:a3:75:1a:fb:
4b:69:2a:8c:a1:69:be:4b:d1:0f:6e:d1:b8:23:c0:26:40:90:
74:6d:ed:58:56:5b:ee:a4:92:c3:51:78:50:db:e3:0e:5d:d5:
5f:06:be:11:57:64:1a:4f:d2:b2:03:d0:74:26:55:67:8d:7e:
e0:6f:13:3a:89:5b:a7:76:d5:bb:ca:51:2e:69:ce:4b:7c:97:
14:6c:ea:88:29:1c:92:66:1f:29:33:d4:63:b9:87:05:3f:97:
bb:65:ba:22:1b:37:ce:de:55:03:06:f3:1e:f3:7b:16:88:36:
71:75:ae:f5:1e:d6:7d:cb:16:57:70:e7:01:cb:15:b6:48:b9:
7c:50:1e:34:ed:f5:d2:f5:b6:6b:01:1e:8b:c7:2d:be:15:74:
f8:18:ff:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg7ed3gfk9Om4MATQORsiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MTM1ZDYzOTc2OGEzYTYzZWQ5YzVmZjQwYWY1ZWQwMWRm
NzQxY2IwHhcNMjUwODIzMDYwMDM1WhcNMjUwODI0MDYwMDM1WjAzMTEwLwYDVQQD
EyhmZjczMzBhNmUyMjBmZGM3NWQ4NDRhMzZlYTQ3ZWRjMDNhMDQ0YzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64y6lpK3KNCqgPSRYPOU+Py5DAI2
lgiiguCWwQfo28EuyBAYVJ8ePMeJ945bvoKqTWdXD9JO1hKZ+EROF4LYurWmqFFt
m3iYskizonIrKgu0dvXc3KnElz/XbNzsKwR84sy++07kLF6WfCfMQD5FCn65RtBC
8IP1rbN2g68YN7nZxvh8wL4M1TmSMPbhumWRtVQJf1uqX5mbbP7zDazFp3Oboj0E
/mpfqCLTWRNlruND70l7i62MzGHPP4Z9Ei1rsB6FuCNjbIYGsigflxOfDmZAZJAG
ePbx9mHW2tKd6EpQ381EmL7MDjWehBQZLvS81Pkqe/BaMlDWLkh9cApAQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9zMKbiIP3HXYRKNupH7cA6BEwAMB8GA1UdIwQY
MBaAFOYTXWOXaKOmPtnF/0CvXtAd90HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2Et
MGE3NzBmMGM3NjA4LzEvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2EtMGE3NzBmMGM3NjA4
LzEvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADN62oJat
DYoDvdtvOa53z0T6qScWvIw3af1rhuOP6UkblG62KKZHI15PizRk4BgVlpOrUzgj
sCJ3tEf/P3vdugsxFjDC+EGjlc6xr42bBJ7PyFyR3QZcMtJF22JJLBi/yDIrUMgU
t7GjdRr7S2kqjKFpvkvRD27RuCPAJkCQdG3tWFZb7qSSw1F4UNvjDl3VXwa+EVdk
Gk/SsgPQdCZVZ41+4G8TOolbp3bVu8pRLmnOS3yXFGzqiCkckmYfKTPUY7mHBT+X
u2W6Ihs3zt5VAwbzHvN7Fog2cXWu9R7WfcsWV3DnAcsVtki5fFAeNO310vW2awEe
i8ctvhV0+Bj/3A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:39:06 2025 by rpki-client