Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
File: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft (raw, json)
Hash identifier: DkZqY3YCvXkeahgWjcfgUp/9QpjRRg8QZjV5VnLDHrg=
Subject key identifier: CA:AF:72:CC:EE:42:78:54:74:C0:F5:F3:FF:38:DD:20:14:9E:87:01
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Certificate issuer: /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial: 0198D6CD612C261F4075353E367392314A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
Manifest number: 0DCB
Signing time: Sat 23 Aug 2025 12:00:40 +0000
Manifest this update: Sat 23 Aug 2025 12:00:40 +0000
Manifest next update: Sun 24 Aug 2025 12:00:40 +0000
Files and hashes: 1: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl (hash: qNaG73Zf5rVwXO5KrfNcvIKdbLSaFEovxgvSFewcQr8=)
2: vhYKMa2Z6sRh78styyEQC2ay13Y.roa (hash: q6ISR7QoOYSfixxm6mwluVodtW8Dzcm/t68jGp50cGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:61:2c:26:1f:40:75:35:3e:36:73:92:31:4a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Validity
Not Before: Aug 23 12:00:40 2025 GMT
Not After : Aug 24 12:00:40 2025 GMT
Subject: CN=caaf72ccee42785474c0f5f3ff38dd20149e8701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:e1:d0:ef:f4:cb:73:45:b3:5b:ff:78:e1:
1f:4f:6e:bd:e4:55:50:a3:2d:2f:e2:e2:53:34:27:
89:ee:ee:83:d6:17:ef:7d:09:64:92:da:70:2b:b5:
ea:66:99:99:e0:47:b6:b9:5d:68:be:f5:ad:b9:c5:
d9:f3:13:23:ca:6f:be:a4:5f:30:cb:61:22:f6:4f:
65:88:6e:c4:a9:a5:ff:1e:53:cd:79:18:f1:d5:83:
14:76:a0:77:46:f0:7f:2b:c4:b2:7c:28:4a:7d:51:
e5:f4:fa:9e:d4:7d:9f:47:78:e2:43:ff:06:df:b5:
a4:27:46:33:1f:7e:2f:21:58:cc:45:95:6b:9c:4d:
e5:32:eb:2c:b2:81:6e:27:b9:fe:21:ec:ef:87:77:
19:19:ef:1d:0b:ee:e0:52:31:ff:af:eb:d5:3c:5c:
db:d0:3b:61:70:7f:c7:77:2a:85:29:b4:46:21:7a:
9e:a4:38:68:ac:de:ca:eb:60:b3:9e:29:9c:56:dd:
a0:68:3f:b5:2b:9b:6b:75:db:82:e5:e9:26:b2:d4:
e9:ae:ee:60:0d:85:19:7b:2f:e1:19:d2:10:61:12:
36:d1:c2:fa:e3:33:b3:73:1d:08:ae:d7:46:15:83:
95:c3:6a:b0:31:c3:bd:a9:e0:72:e2:3c:bc:04:3c:
c4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AF:72:CC:EE:42:78:54:74:C0:F5:F3:FF:38:DD:20:14:9E:87:01
X509v3 Authority Key Identifier:
keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ba:39:33:27:7c:c0:c6:8c:54:de:23:65:be:d9:76:07:df:
80:cc:54:71:70:14:f4:a3:f4:f3:47:29:96:b4:40:e7:f2:a3:
85:71:48:6b:f9:96:b8:b4:62:da:48:73:56:15:16:50:e2:87:
c2:2e:7a:fb:c0:61:5b:9d:4e:a8:d1:86:fa:2a:6c:d8:e5:4c:
ff:f0:a7:3d:44:d0:43:04:23:cc:aa:fa:00:03:06:16:6b:d5:
60:29:45:8b:a6:2f:a3:43:f1:21:f2:ba:82:0e:7f:99:1b:1c:
33:1c:79:7f:ae:7d:a1:46:6c:5a:6c:52:ee:2b:77:df:a9:68:
7b:cb:f3:f1:03:7d:24:1d:de:eb:28:6a:92:bc:ad:97:a8:88:
ba:4c:03:83:34:56:ca:37:31:db:5b:8c:b0:b6:33:12:bd:f1:
10:23:ab:1a:f7:a1:f8:7c:7d:d2:4e:20:07:fa:c1:13:79:cd:
f6:f1:1f:04:77:f4:82:00:50:75:07:11:16:7c:c6:15:cc:e6:
32:f8:78:66:52:35:98:be:bf:4a:a9:0b:b9:9f:1c:d9:87:88:
11:e4:b9:04:ab:84:76:7b:a0:71:f3:87:e4:74:3f:c2:c9:66:
8e:09:ce:fc:a0:f0:df:0d:de:d8:36:99:25:63:e6:cf:0b:42:
f1:a8:6f:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzWEsJh9AdTU+NnOSMUojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZmY1YmJmNTQwYzY1OTU0Yjk5MTNhNjhjMjRkMTc0ZGU5
N2Q4MjkwHhcNMjUwODIzMTIwMDQwWhcNMjUwODI0MTIwMDQwWjAzMTEwLwYDVQQD
EyhjYWFmNzJjY2VlNDI3ODU0NzRjMGY1ZjNmZjM4ZGQyMDE0OWU4NzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq//h0O/0y3NFs1v/eOEfT2695FVQ
oy0v4uJTNCeJ7u6D1hfvfQlkktpwK7XqZpmZ4Ee2uV1ovvWtucXZ8xMjym++pF8w
y2Ei9k9liG7EqaX/HlPNeRjx1YMUdqB3RvB/K8SyfChKfVHl9Pqe1H2fR3jiQ/8G
37WkJ0YzH34vIVjMRZVrnE3lMusssoFuJ7n+Iezvh3cZGe8dC+7gUjH/r+vVPFzb
0DthcH/HdyqFKbRGIXqepDhorN7K62CznimcVt2gaD+1K5trdduC5ekmstTpru5g
DYUZey/hGdIQYRI20cL64zOzcx0IrtdGFYOVw2qwMcO9qeBy4jy8BDzEZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqvcszuQnhUdMD18/843SAUnocBMB8GA1UdIwQY
MBaAFOT/W79UDGWVS5kTpowk0XTel9gpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80MzkzZTgtNWY1OS00ZDU3LTgxOTgt
NWMwYzQ2ZDA0ZWUxLzEvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC80MzkzZTgtNWY1OS00ZDU3LTgxOTgtNWMwYzQ2ZDA0ZWUx
LzEvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIro5Myd8
wMaMVN4jZb7ZdgffgMxUcXAU9KP080cplrRA5/KjhXFIa/mWuLRi2khzVhUWUOKH
wi56+8BhW51OqNGG+ips2OVM//CnPUTQQwQjzKr6AAMGFmvVYClFi6Yvo0PxIfK6
gg5/mRscMxx5f659oUZsWmxS7it336loe8vz8QN9JB3e6yhqkrytl6iIukwDgzRW
yjcx21uMsLYzEr3xECOrGveh+Hx90k4gB/rBE3nN9vEfBHf0ggBQdQcRFnzGFczm
Mvh4ZlI1mL6/SqkLuZ8c2YeIEeS5BKuEdnugcfOH5HQ/wslmjgnO/KDw3w3e2DaZ
JWPmzwtC8ahvbQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:05:07 2025 by rpki-client