Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
File: 5o9MhddoNjPDOOA92OykR78_Z4U.mft (raw, json)
Hash identifier: +GCVP87hSr1bg1BId7pHAQHr0h7SO//rvPwA0KcD4qY=
Subject key identifier: A3:33:26:38:19:25:E1:2C:D9:88:B8:9F:94:F2:49:F3:21:EF:F0:CB
Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
Certificate issuer: /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Certificate serial: 0198D65FC4FAF3CD385ECFDF968D0EC252F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
Manifest number: 0B8D
Signing time: Sat 23 Aug 2025 10:00:57 +0000
Manifest this update: Sat 23 Aug 2025 10:00:57 +0000
Manifest next update: Sun 24 Aug 2025 10:00:57 +0000
Files and hashes: 1: 5o9MhddoNjPDOOA92OykR78_Z4U.crl (hash: Yl5rL5IznoDPPTfQ0/juOjSh1RHMRFi234mQeAcQwlY=)
2: n9muJIRBw4eBvZP1hvt-YKWhQ1g.roa (hash: MB5Zeb9aar2OAVcUrab3R1409lEJyOeTnWEExzpIcts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:c4:fa:f3:cd:38:5e:cf:df:96:8d:0e:c2:52:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Validity
Not Before: Aug 23 10:00:57 2025 GMT
Not After : Aug 24 10:00:57 2025 GMT
Subject: CN=a33326381925e12cd988b89f94f249f321eff0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b9:4f:89:be:d8:b6:1a:26:37:0b:64:36:4c:
a8:d9:62:39:a8:9c:f1:78:e2:99:73:b1:3a:25:b6:
22:75:58:5a:a5:66:4d:cd:3c:cd:85:0e:df:10:2b:
68:4e:42:1e:7b:ae:81:4b:64:25:7b:f8:95:97:74:
56:67:82:4a:5d:7d:69:d6:e9:a1:20:92:e2:22:7f:
ec:8d:6a:51:40:6f:e1:8c:84:0e:f2:3a:36:fb:9f:
2d:49:7c:34:02:1d:ff:ad:72:89:48:f2:7a:dd:24:
c5:04:21:b4:8e:64:a5:86:bb:78:4f:9e:0d:fe:4d:
35:c2:4a:56:30:f2:66:61:8a:1c:e0:aa:db:b5:2a:
ee:ed:fb:62:9d:73:f1:ab:bc:56:52:d1:c1:82:0a:
8a:f7:2f:e3:eb:0d:13:bf:6a:ac:dc:12:18:0f:7c:
12:37:0c:2a:b1:94:29:96:1f:d1:6d:75:8a:00:32:
06:40:b3:b3:ca:67:e2:15:52:f0:7d:fc:56:45:6f:
a7:a9:b4:04:03:99:cc:27:8d:05:dc:bf:b0:09:fb:
8e:d4:7e:a0:70:1a:c8:04:74:8f:b5:35:84:3a:98:
4a:93:51:57:b1:e6:97:82:96:65:f7:1f:25:e5:e8:
6e:a1:c6:94:3a:1f:6e:b3:5c:bc:3a:ce:6a:70:74:
0e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:33:26:38:19:25:E1:2C:D9:88:B8:9F:94:F2:49:F3:21:EF:F0:CB
X509v3 Authority Key Identifier:
keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:37:90:bb:13:1b:15:29:4b:66:2e:95:0f:c8:f4:2d:be:3b:
b8:f3:ce:cf:43:d0:3a:f8:01:59:76:d5:cf:08:a2:a4:c5:1a:
f0:94:ab:d9:cc:78:f3:a0:79:76:9c:7f:da:78:bb:66:7f:10:
f0:b1:1e:00:0a:1f:ee:ac:e7:30:d9:e3:7f:44:a6:c5:e3:53:
9e:48:c1:7f:76:36:f1:f2:ef:6c:b9:91:2b:9b:0c:30:93:6f:
e0:4e:9c:97:ac:bc:3f:67:90:66:2b:b6:0b:97:41:4c:60:3d:
f3:62:f0:3b:7d:d3:46:4c:c9:86:eb:76:c6:5c:c7:aa:13:a3:
17:42:27:b1:50:ed:9c:81:d5:33:2c:ba:02:db:2d:4f:c0:c2:
9a:82:e1:5c:88:80:88:8d:64:16:34:24:2f:f1:ca:f5:1e:ec:
d3:31:8e:9d:b7:6b:9d:f5:09:b9:a4:94:d2:e0:31:7e:6a:24:
4c:98:6e:3a:08:89:4d:96:ef:41:5c:34:c4:96:ea:01:48:c8:
21:c1:f2:9c:22:09:d2:e9:1e:39:c6:a1:f3:8c:49:b7:8f:b3:
55:1e:f9:91:c6:ad:66:9a:35:75:ce:83:2a:b8:cd:be:28:56:
d8:77:c4:b3:42:c8:21:87:2b:91:d7:a3:87:12:d1:c3:92:74:
92:55:2a:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX8T68804Xs/flo0OwlL5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2OGY0Yzg1ZDc2ODM2MzNjMzM4ZTAzZGQ4ZWNhNDQ3YmYz
ZjY3ODUwHhcNMjUwODIzMTAwMDU3WhcNMjUwODI0MTAwMDU3WjAzMTEwLwYDVQQD
EyhhMzMzMjYzODE5MjVlMTJjZDk4OGI4OWY5NGYyNDlmMzIxZWZmMGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgblPib7YthomNwtkNkyo2WI5qJzx
eOKZc7E6JbYidVhapWZNzTzNhQ7fECtoTkIee66BS2Qle/iVl3RWZ4JKXX1p1umh
IJLiIn/sjWpRQG/hjIQO8jo2+58tSXw0Ah3/rXKJSPJ63STFBCG0jmSlhrt4T54N
/k01wkpWMPJmYYoc4KrbtSru7ftinXPxq7xWUtHBggqK9y/j6w0Tv2qs3BIYD3wS
NwwqsZQplh/RbXWKADIGQLOzymfiFVLwffxWRW+nqbQEA5nMJ40F3L+wCfuO1H6g
cBrIBHSPtTWEOphKk1FXseaXgpZl9x8l5ehuocaUOh9us1y8Os5qcHQOAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMzJjgZJeEs2Yi4n5TySfMh7/DLMB8GA1UdIwQY
MBaAFOaPTIXXaDYzwzjgPdjspEe/P2eFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW85TWhkZG9OalBET09BOTJPeWtSNzhfWjRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81YmJlYmMtY2YzNi00M2E0LTk5NzQt
OWI2Y2ZkOGEyYWEzLzEvNW85TWhkZG9OalBET09BOTJPeWtSNzhfWjRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy81YmJlYmMtY2YzNi00M2E0LTk5NzQtOWI2Y2ZkOGEyYWEz
LzEvNW85TWhkZG9OalBET09BOTJPeWtSNzhfWjRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTeQuxMb
FSlLZi6VD8j0Lb47uPPOz0PQOvgBWXbVzwiipMUa8JSr2cx486B5dpx/2ni7Zn8Q
8LEeAAof7qznMNnjf0SmxeNTnkjBf3Y28fLvbLmRK5sMMJNv4E6cl6y8P2eQZiu2
C5dBTGA982LwO33TRkzJhut2xlzHqhOjF0InsVDtnIHVMyy6AtstT8DCmoLhXIiA
iI1kFjQkL/HK9R7s0zGOnbdrnfUJuaSU0uAxfmokTJhuOgiJTZbvQVw0xJbqAUjI
IcHynCIJ0ukeOcah84xJt4+zVR75kcatZpo1dc6DKrjNvihW2HfEs0LIIYcrkdej
hxLRw5J0klUqPg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:36 2025 by rpki-client