Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
File: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft (raw, json)
Hash identifier: aVZBxSLGRk4HOYaKD5oa5M0D32Kv9vmym84OTOHc0h0=
Subject key identifier: 38:16:73:64:5B:A9:45:32:B4:55:38:46:59:50:DE:46:91:DD:D0:FD
Authority key identifier: E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
Certificate issuer: /CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Certificate serial: 0198D472DFC4EF83ADB0169BF01970CDBBC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
Manifest number: 10FF
Signing time: Sat 23 Aug 2025 01:02:34 +0000
Manifest this update: Sat 23 Aug 2025 01:02:34 +0000
Manifest next update: Sun 24 Aug 2025 01:02:34 +0000
Files and hashes: 1: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl (hash: eTFr5SQ3gfoc6yDnls/2LHbe4Q4MmkcAlddCpO79Swo=)
2: V60g_4Hl1O4ws6xObJRepK5WbCI.roa (hash: WQJN9PGlNp52w8KNVApuftRmLkpbyYXJ0S9Q2EedPcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:df:c4:ef:83:ad:b0:16:9b:f0:19:70:cd:bb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Validity
Not Before: Aug 23 01:02:34 2025 GMT
Not After : Aug 24 01:02:34 2025 GMT
Subject: CN=381673645ba94532b45538465950de4691ddd0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9b:14:c7:0e:24:4a:89:88:f1:98:9e:6d:a2:
77:40:3a:e8:77:21:92:08:c2:1b:d4:bf:f9:ad:f2:
d6:78:8a:3e:55:5a:34:59:e4:bd:c3:6a:a1:ca:77:
d0:93:70:77:b8:97:cb:aa:b7:ad:e5:e8:1e:74:4f:
8d:04:92:be:8d:3b:b9:7e:72:9a:b9:3e:a8:32:46:
b3:66:26:4f:d1:d2:d0:22:8a:41:3b:5d:05:f4:9e:
7d:75:35:f7:6f:c4:ae:dc:84:c4:09:6c:5f:1a:e5:
f4:63:43:3a:a3:4e:df:b4:55:ca:31:30:3a:b9:86:
92:be:0a:47:f1:f3:00:b9:99:6c:db:6c:5f:2b:ee:
55:f4:9e:ca:7b:60:cc:0f:c7:b2:d0:4d:d4:f1:e9:
40:7f:d9:b0:69:bd:25:48:c6:44:3f:07:d7:09:25:
38:92:24:5d:76:a0:0b:d7:b9:9a:b4:ab:83:73:96:
8d:70:ce:2c:1e:06:e3:52:67:1e:15:cb:e2:f9:19:
57:de:f4:9f:0e:6d:1d:d9:28:bf:40:5f:22:f3:b0:
b1:b6:b2:c7:05:41:21:26:b9:27:75:0f:ef:90:52:
1e:f5:89:c9:5d:28:e7:72:09:ce:8c:4d:04:66:84:
ee:1b:68:47:21:50:0a:94:8f:fe:48:fe:3c:97:a1:
66:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:16:73:64:5B:A9:45:32:B4:55:38:46:59:50:DE:46:91:DD:D0:FD
X509v3 Authority Key Identifier:
keyid:E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1c:cc:f1:c9:3a:d5:22:10:8a:5f:5e:24:cf:52:0f:6c:f6:
1b:f5:44:1a:b5:87:a5:3b:8d:60:f9:b5:7b:0b:8c:87:05:48:
bc:8a:71:22:58:f3:9b:74:57:b6:24:24:1f:b9:b2:f0:20:15:
f3:80:3a:b7:2d:67:cc:f7:fa:c2:19:0a:24:61:64:51:a2:7b:
ff:42:d2:4b:8a:a3:65:90:12:30:45:24:4b:47:a7:50:b5:9a:
d5:66:1e:1b:02:17:66:b9:4d:89:5a:42:44:59:6f:39:bd:15:
e8:87:78:5c:e2:58:84:22:32:d1:92:0f:22:76:e3:f1:76:81:
dd:9d:97:46:5c:79:4d:f6:65:28:d5:7b:92:7d:5b:e6:3c:9f:
61:34:a1:40:3a:31:31:0f:02:8b:1f:7c:82:c3:df:63:9e:40:
09:b1:cd:7a:0b:23:a7:a7:88:8b:ea:31:13:54:43:64:36:d8:
4f:af:36:e2:6d:f5:98:d5:be:4b:c8:f4:90:c6:d4:6b:8c:3f:
ad:a7:91:03:43:fd:55:44:2b:bd:0f:57:31:75:13:80:b1:fc:
a3:98:9b:25:e3:3f:a0:14:16:d0:5e:0d:70:01:61:48:a1:b8:
b6:53:24:28:65:84:80:46:09:bb:8e:87:4f:98:fd:d0:ba:ae:
31:5e:d3:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUct/E74OtsBab8BlwzbvAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmQ5OTA5ZDE2YmFmMTFjYjk1OGM4ZDI3NGUyNGVjOTk0
NzQyMmYwHhcNMjUwODIzMDEwMjM0WhcNMjUwODI0MDEwMjM0WjAzMTEwLwYDVQQD
EygzODE2NzM2NDViYTk0NTMyYjQ1NTM4NDY1OTUwZGU0NjkxZGRkMGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JsUxw4kSomI8ZiebaJ3QDrodyGS
CMIb1L/5rfLWeIo+VVo0WeS9w2qhynfQk3B3uJfLqret5egedE+NBJK+jTu5fnKa
uT6oMkazZiZP0dLQIopBO10F9J59dTX3b8Su3ITECWxfGuX0Y0M6o07ftFXKMTA6
uYaSvgpH8fMAuZls22xfK+5V9J7Ke2DMD8ey0E3U8elAf9mwab0lSMZEPwfXCSU4
kiRddqAL17matKuDc5aNcM4sHgbjUmceFcvi+RlX3vSfDm0d2Si/QF8i87CxtrLH
BUEhJrkndQ/vkFIe9YnJXSjncgnOjE0EZoTuG2hHIVAKlI/+SP48l6FmPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgWc2RbqUUytFU4RllQ3kaR3dD9MB8GA1UdIwQY
MBaAFOf9mQnRa68Ry5WMjSdOJOyZR0IvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xZjAxZTMtNzdkMy00Y2Y3LWFlYTgt
MTIyZmVlY2RlM2VhLzEvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8xZjAxZTMtNzdkMy00Y2Y3LWFlYTgtMTIyZmVlY2RlM2Vh
LzEvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxzM8ck6
1SIQil9eJM9SD2z2G/VEGrWHpTuNYPm1ewuMhwVIvIpxIljzm3RXtiQkH7my8CAV
84A6ty1nzPf6whkKJGFkUaJ7/0LSS4qjZZASMEUkS0enULWa1WYeGwIXZrlNiVpC
RFlvOb0V6Id4XOJYhCIy0ZIPInbj8XaB3Z2XRlx5TfZlKNV7kn1b5jyfYTShQDox
MQ8Cix98gsPfY55ACbHNegsjp6eIi+oxE1RDZDbYT6824m31mNW+S8j0kMbUa4w/
raeRA0P9VUQrvQ9XMXUTgLH8o5ibJeM/oBQW0F4NcAFhSKG4tlMkKGWEgEYJu46H
T5j90LquMV7TYg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:11 2025 by rpki-client