Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
File: 5frVG_rdJFMhvgkuaB2N5uLSdcM.mft (raw, json)
Hash identifier: h6kO+53NTMzYThf9YJ20kFt4styz4U+q4CvEoAYnhUM=
Subject key identifier: EC:09:2E:86:D6:7D:0B:9D:6C:16:02:86:26:09:E9:03:3D:DE:DC:81
Authority key identifier: E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
Certificate issuer: /CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Certificate serial: 0198D54DE6B016676FA8843FD47FD96685F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
Manifest number: 05CD
Signing time: Sat 23 Aug 2025 05:01:48 +0000
Manifest this update: Sat 23 Aug 2025 05:01:48 +0000
Manifest next update: Sun 24 Aug 2025 05:01:48 +0000
Files and hashes: 1: 5frVG_rdJFMhvgkuaB2N5uLSdcM.crl (hash: RvZFopRCdQnQdPIlsRlR4pjDEV3n9ZviQvXXpwVPW+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e6:b0:16:67:6f:a8:84:3f:d4:7f:d9:66:85:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Validity
Not Before: Aug 23 05:01:48 2025 GMT
Not After : Aug 24 05:01:48 2025 GMT
Subject: CN=ec092e86d67d0b9d6c1602862609e9033ddedc81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:22:33:d6:69:85:de:60:9a:cb:54:1a:b7:ba:
21:92:79:59:56:a0:46:77:96:4e:12:87:01:1a:30:
54:d6:54:c7:81:5a:72:c6:91:20:bd:10:7b:99:d8:
4f:2a:28:55:2e:9a:d0:c5:78:c2:87:88:6e:32:26:
0e:5a:8a:be:ac:a2:c8:5f:c3:c2:26:1d:4f:f2:bf:
0f:eb:7b:76:59:e5:ab:38:48:48:0b:3f:48:bb:c6:
6e:b4:69:ea:31:05:b2:d2:d4:36:98:0f:8d:a8:bb:
cc:66:42:36:14:69:06:de:53:f4:85:c2:86:82:26:
c7:7a:fa:8a:80:b9:8d:97:0e:79:fc:70:49:47:e3:
40:23:0a:33:f6:50:6c:37:84:5a:a8:29:6d:6e:51:
e7:62:a2:ad:60:89:ef:46:54:2e:ed:46:f8:39:c1:
90:11:9c:eb:18:fe:c4:94:d5:2c:45:85:cc:52:2b:
58:ed:35:79:45:dc:da:43:54:81:2c:e0:fa:de:49:
4a:e5:a2:88:f2:db:4b:a5:67:e7:35:74:ae:d4:52:
68:2e:5f:3f:19:8d:86:6e:af:e9:e7:37:3d:6a:66:
1d:46:06:bd:2e:17:5c:6a:f6:5c:4e:3d:11:c8:b8:
96:ba:77:d0:b8:ea:33:55:76:cc:eb:97:87:e4:53:
73:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:09:2E:86:D6:7D:0B:9D:6C:16:02:86:26:09:E9:03:3D:DE:DC:81
X509v3 Authority Key Identifier:
keyid:E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:37:06:0a:70:a6:0f:40:e7:59:a0:94:a6:8e:34:0a:2d:1c:
01:39:ce:53:75:9e:bb:a9:6c:d3:12:55:46:93:74:a0:6c:c3:
d2:75:e5:ce:d1:f1:25:85:c7:49:3e:3b:9a:33:7a:16:e9:31:
d1:05:9a:b5:77:d6:f9:7f:da:35:bf:d3:39:d2:56:a8:6d:16:
3f:bc:5b:65:51:98:17:06:a8:64:39:c4:fa:df:14:16:e0:96:
01:dc:af:04:ac:ab:71:34:02:6d:41:5a:e0:49:3c:0f:05:c9:
0b:a5:64:97:56:6a:2c:16:cb:4c:f3:e1:b7:61:89:da:89:4b:
d3:77:fc:8a:8c:b2:05:af:e3:57:3d:5f:9f:a5:b5:a4:51:4e:
1f:6d:bc:1e:b8:b3:71:4b:ec:80:4d:44:d0:db:6f:56:33:64:
54:fe:11:4a:8f:48:4f:f9:6c:0f:5b:c1:52:ed:78:c2:50:2c:
f0:8f:ee:b1:67:df:b6:1d:f6:23:7a:85:f2:f7:5a:57:d3:0f:
82:1a:b7:e3:6a:5a:b8:a0:82:6e:0e:4a:61:b5:f8:0e:8a:f8:
4d:16:f8:b2:40:71:ac:c0:32:18:2b:2e:52:e5:22:d6:a6:d2:
da:4d:f1:21:ef:94:12:59:34:e5:47:70:69:b7:bc:5c:26:71:
c9:46:8e:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTeawFmdvqIQ/1H/ZZoX3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZmFkNTFiZmFkZDI0NTMyMWJlMDkyZTY4MWQ4ZGU2ZTJk
Mjc1YzMwHhcNMjUwODIzMDUwMTQ4WhcNMjUwODI0MDUwMTQ4WjAzMTEwLwYDVQQD
EyhlYzA5MmU4NmQ2N2QwYjlkNmMxNjAyODYyNjA5ZTkwMzNkZGVkYzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiIz1mmF3mCay1Qat7ohknlZVqBG
d5ZOEocBGjBU1lTHgVpyxpEgvRB7mdhPKihVLprQxXjCh4huMiYOWoq+rKLIX8PC
Jh1P8r8P63t2WeWrOEhICz9Iu8ZutGnqMQWy0tQ2mA+NqLvMZkI2FGkG3lP0hcKG
gibHevqKgLmNlw55/HBJR+NAIwoz9lBsN4RaqCltblHnYqKtYInvRlQu7Ub4OcGQ
EZzrGP7ElNUsRYXMUitY7TV5RdzaQ1SBLOD63klK5aKI8ttLpWfnNXSu1FJoLl8/
GY2Gbq/p5zc9amYdRga9LhdcavZcTj0RyLiWunfQuOozVXbM65eH5FNzKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwJLobWfQudbBYChiYJ6QM93tyBMB8GA1UdIwQY
MBaAFOX61Rv63SRTIb4JLmgdjebi0nXDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWZyVkdfcmRKRk1odmdrdWFCMk41dUxTZGNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wMjBiN2EtNzRhMy00NTk0LTljNDYt
ZDViZGI2MzlmYmNhLzEvNWZyVkdfcmRKRk1odmdrdWFCMk41dUxTZGNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wMjBiN2EtNzRhMy00NTk0LTljNDYtZDViZGI2MzlmYmNh
LzEvNWZyVkdfcmRKRk1odmdrdWFCMk41dUxTZGNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQjcGCnCm
D0DnWaCUpo40Ci0cATnOU3Weu6ls0xJVRpN0oGzD0nXlztHxJYXHST47mjN6Fukx
0QWatXfW+X/aNb/TOdJWqG0WP7xbZVGYFwaoZDnE+t8UFuCWAdyvBKyrcTQCbUFa
4Ek8DwXJC6Vkl1ZqLBbLTPPht2GJ2olL03f8ioyyBa/jVz1fn6W1pFFOH228Hriz
cUvsgE1E0NtvVjNkVP4RSo9IT/lsD1vBUu14wlAs8I/usWffth32I3qF8vdaV9MP
ghq342pauKCCbg5KYbX4Dor4TRb4skBxrMAyGCsuUuUi1qbS2k3xIe+UElk05Udw
abe8XCZxyUaOcw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:44:28 2025 by rpki-client