Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
File: 5J1E2IEnX8osC2s_fs7i0iIUb9I.mft (raw, json)
Hash identifier: 2g9B1W4Td+75ggL3FnFdZbzYdVwTig+CfdjQhoQCD3Y=
Subject key identifier: 03:82:60:84:E6:EB:86:C5:BE:BB:BA:BE:D8:6E:90:04:26:75:C4:8E
Authority key identifier: E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2
Certificate issuer: /CN=e49d44d881275fca2c0b6b3f7ecee2d222146fd2
Certificate serial: 0198D5BBB7FF3B5B76424D9302247DA982C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
Manifest number: 1372
Signing time: Sat 23 Aug 2025 07:01:45 +0000
Manifest this update: Sat 23 Aug 2025 07:01:45 +0000
Manifest next update: Sun 24 Aug 2025 07:01:45 +0000
Files and hashes: 1: 1v3S77a-sfxglHqIQg0r0HWDfqs.roa (hash: +wgpPcHdBUUrExFbQEUVDXMSPqFb4tZj4ER2ADg0of8=)
2: 5J1E2IEnX8osC2s_fs7i0iIUb9I.crl (hash: e1UHzO8pruyXKGwxP6AlL5n6Cr08PU4qljBGqOl38Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b7:ff:3b:5b:76:42:4d:93:02:24:7d:a9:82:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49d44d881275fca2c0b6b3f7ecee2d222146fd2
Validity
Not Before: Aug 23 07:01:45 2025 GMT
Not After : Aug 24 07:01:45 2025 GMT
Subject: CN=03826084e6eb86c5bebbbabed86e90042675c48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f2:70:be:b5:89:e6:d8:7a:19:70:b4:35:52:
cc:6b:f7:ef:4f:0d:dc:4e:28:01:8d:e7:0c:4f:d4:
b8:f9:f5:1a:96:3a:5f:d9:61:64:7f:0d:ed:63:93:
fe:10:35:4c:2a:64:47:7b:b0:c9:d4:fd:4a:0a:af:
09:a7:df:11:69:83:3f:97:17:52:bc:eb:94:97:47:
4e:61:12:cd:93:63:e9:b5:32:85:01:ae:9e:2b:d5:
bc:23:7a:ed:d1:37:88:9e:cc:07:2f:2a:5a:b6:f4:
5a:53:0b:d3:4f:09:59:59:d6:46:0f:6d:61:d0:5e:
d5:77:e6:83:a6:33:c9:2e:a4:d3:af:b3:d4:05:f0:
52:17:a6:16:e8:64:75:0a:59:c1:74:f1:f9:55:2f:
91:48:47:95:fa:18:e9:7e:c9:24:34:61:64:78:5e:
18:cb:e0:73:64:b3:97:56:fb:56:2d:17:7d:59:77:
6c:c7:2d:e3:57:2d:3f:36:b6:a1:53:73:5c:41:89:
6a:43:35:eb:6c:21:9e:03:b5:49:57:7d:51:5a:53:
e7:ae:50:47:a9:5d:ca:7c:98:53:13:50:08:6a:81:
35:34:67:7f:fe:8b:9a:3f:85:5e:54:97:0b:16:68:
ef:6d:31:9f:4e:36:19:dd:bf:20:ae:0b:ac:97:89:
10:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:82:60:84:E6:EB:86:C5:BE:BB:BA:BE:D8:6E:90:04:26:75:C4:8E
X509v3 Authority Key Identifier:
keyid:E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5a:6b:d0:be:49:23:18:99:c0:63:f5:9b:3e:4f:78:49:29:
3b:d8:31:5d:0c:c8:93:b5:b0:01:38:a4:14:c9:79:12:5f:93:
d3:1b:da:1d:af:39:ed:9b:f9:48:d9:f8:e9:73:0a:63:42:da:
ed:d2:f3:cc:d5:a0:52:59:b2:1f:10:63:a3:4c:4e:d1:23:a8:
28:1e:17:d2:d0:7d:5b:13:91:a8:64:69:74:5a:b1:4f:f2:19:
b1:22:8f:31:56:ad:64:f0:b5:b6:25:f0:7c:0b:bb:1a:bd:ba:
6d:15:05:dc:b6:6f:ff:18:42:0c:95:73:ee:14:e4:b0:91:ed:
78:f1:56:20:80:a2:c1:0e:37:56:52:d9:a1:23:de:11:ef:c2:
20:43:b7:5b:70:86:96:2b:10:0a:5d:f4:83:97:4e:07:2a:e4:
10:b6:33:7b:77:4e:5c:79:b6:12:6b:76:09:3c:2e:a8:dd:79:
4c:8f:d6:92:22:d4:46:5e:f7:20:4d:78:51:72:d4:56:95:33:
fe:6b:6a:ca:7f:7b:c5:88:15:51:94:5f:4a:98:98:83:54:32:
77:d3:8b:cf:3a:11:fb:56:d8:1c:b2:34:dd:b3:ba:4b:cd:ac:
a0:82:44:6c:d7:f4:3d:26:d1:73:d5:f9:81:cb:62:1a:ae:bf:
5c:97:8f:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu7f/O1t2Qk2TAiR9qYLAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0OWQ0NGQ4ODEyNzVmY2EyYzBiNmIzZjdlY2VlMmQyMjIx
NDZmZDIwHhcNMjUwODIzMDcwMTQ1WhcNMjUwODI0MDcwMTQ1WjAzMTEwLwYDVQQD
EygwMzgyNjA4NGU2ZWI4NmM1YmViYmJhYmVkODZlOTAwNDI2NzVjNDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/JwvrWJ5th6GXC0NVLMa/fvTw3c
TigBjecMT9S4+fUaljpf2WFkfw3tY5P+EDVMKmRHe7DJ1P1KCq8Jp98RaYM/lxdS
vOuUl0dOYRLNk2PptTKFAa6eK9W8I3rt0TeInswHLypatvRaUwvTTwlZWdZGD21h
0F7Vd+aDpjPJLqTTr7PUBfBSF6YW6GR1ClnBdPH5VS+RSEeV+hjpfskkNGFkeF4Y
y+BzZLOXVvtWLRd9WXdsxy3jVy0/NrahU3NcQYlqQzXrbCGeA7VJV31RWlPnrlBH
qV3KfJhTE1AIaoE1NGd//ouaP4VeVJcLFmjvbTGfTjYZ3b8grgusl4kQAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOCYITm64bFvru6vthukAQmdcSOMB8GA1UdIwQY
MBaAFOSdRNiBJ1/KLAtrP37O4tIiFG/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUoxRTJJRW5YOG9zQzJzX2ZzN2kwaUlVYjlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wNTBkN2YtODQ1NS00NjVmLWIyMzkt
YzMyZDEwYzdlYTFmLzEvNUoxRTJJRW5YOG9zQzJzX2ZzN2kwaUlVYjlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8wNTBkN2YtODQ1NS00NjVmLWIyMzktYzMyZDEwYzdlYTFm
LzEvNUoxRTJJRW5YOG9zQzJzX2ZzN2kwaUlVYjlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlpr0L5J
IxiZwGP1mz5PeEkpO9gxXQzIk7WwATikFMl5El+T0xvaHa857Zv5SNn46XMKY0La
7dLzzNWgUlmyHxBjo0xO0SOoKB4X0tB9WxORqGRpdFqxT/IZsSKPMVatZPC1tiXw
fAu7Gr26bRUF3LZv/xhCDJVz7hTksJHtePFWIICiwQ43VlLZoSPeEe/CIEO3W3CG
lisQCl30g5dOByrkELYze3dOXHm2Emt2CTwuqN15TI/WkiLURl73IE14UXLUVpUz
/mtqyn97xYgVUZRfSpiYg1Qyd9OLzzoR+1bYHLI03bO6S82soIJEbNf0PSbRc9X5
gctiGq6/XJePXw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:11 2025 by rpki-client