Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
File: 5cn_8vjtDWWq0LlPgDby7hru6go.mft (raw, json)
Hash identifier: Xd6hKO6adk2TG8As66pCUKImgUjtbzwyPzHBGVSLvU8=
Subject key identifier: EC:E8:7D:5D:8C:2C:63:D6:69:C6:A2:5C:BB:62:F4:29:46:B9:AE:9C
Authority key identifier: E5:C9:FF:F2:F8:ED:0D:65:AA:D0:B9:4F:80:36:F2:EE:1A:EE:EA:0A
Certificate issuer: /CN=e5c9fff2f8ed0d65aad0b94f8036f2ee1aeeea0a
Certificate serial: 0198D5BBA267EACF9BD369DFF3D407E45DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
Manifest number: 1490
Signing time: Sat 23 Aug 2025 07:01:40 +0000
Manifest this update: Sat 23 Aug 2025 07:01:40 +0000
Manifest next update: Sun 24 Aug 2025 07:01:40 +0000
Files and hashes: 1: 5cn_8vjtDWWq0LlPgDby7hru6go.crl (hash: Jp/FllK6OjGoBtVKxDn2oDu2dttm+0ZTFyK+yJHgUbQ=)
2: taYmShyZEWW4U8j1R_6KnQDOweM.roa (hash: GjJYuf7T9BVgN+aam1ca3lpMWRi293GWW2n+eayTU5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a2:67:ea:cf:9b:d3:69:df:f3:d4:07:e4:5d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c9fff2f8ed0d65aad0b94f8036f2ee1aeeea0a
Validity
Not Before: Aug 23 07:01:40 2025 GMT
Not After : Aug 24 07:01:40 2025 GMT
Subject: CN=ece87d5d8c2c63d669c6a25cbb62f42946b9ae9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:d1:f7:63:d8:17:87:e0:2a:3f:b9:74:c6:
3a:8b:f8:b3:9b:3f:d9:30:df:93:31:c2:74:14:12:
9d:fb:4e:82:0d:43:ab:6a:6b:6f:aa:de:42:1b:f4:
06:eb:2e:a7:2e:c3:86:cc:ac:6f:ba:58:e5:9a:a6:
27:60:52:9f:a1:f8:b6:4b:d1:94:ef:ff:cd:5d:ba:
d2:2a:09:5b:1b:6e:41:d4:1b:bc:4b:ea:16:09:91:
3b:10:93:24:ce:91:13:56:e7:89:50:65:6f:a8:35:
1a:40:96:34:9e:7f:0d:48:c4:9c:c7:fb:71:dd:03:
56:2a:e8:ab:50:57:4c:bd:c1:6e:62:4c:13:d1:df:
8e:3f:ed:b9:be:dc:c9:30:4d:f0:24:e9:b9:f2:6f:
47:b5:41:7f:bd:b7:b4:7c:7a:62:0c:ab:7d:ae:08:
1c:9d:48:cf:f7:49:ab:38:69:2b:ca:94:72:d8:96:
a5:96:85:0d:2f:56:82:27:11:22:78:af:b9:ed:e0:
7a:38:e8:23:6f:37:e3:f6:11:0e:91:2b:b4:4e:76:
33:a8:9c:29:9f:00:a1:b3:73:81:95:51:89:16:bf:
fd:65:b3:fc:96:4f:c9:75:e4:db:b6:19:75:29:8a:
a5:fc:91:95:f9:1d:ca:cd:85:df:65:17:a4:71:c5:
99:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E8:7D:5D:8C:2C:63:D6:69:C6:A2:5C:BB:62:F4:29:46:B9:AE:9C
X509v3 Authority Key Identifier:
keyid:E5:C9:FF:F2:F8:ED:0D:65:AA:D0:B9:4F:80:36:F2:EE:1A:EE:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:bf:26:47:7e:1a:6c:ed:fa:4f:50:cf:3d:3b:f2:b2:86:59:
31:73:2f:83:7d:2d:22:34:31:60:75:e0:bc:20:cb:2e:f2:8e:
33:c9:0e:6b:d2:5c:19:03:c3:3e:28:b6:8d:c4:ca:56:95:84:
ae:9c:0f:c8:00:ca:67:08:9a:45:48:21:4b:cd:1d:d1:cd:a6:
37:b4:ef:60:c8:d1:f5:2f:3f:d2:75:5e:24:4a:06:62:d9:1d:
1c:99:7b:86:6d:fe:26:29:44:2e:07:f5:5e:b3:01:c8:44:2f:
96:33:7f:d1:57:b3:f5:6f:e9:5f:fc:b7:41:4b:15:76:2b:44:
ab:7a:a1:08:27:eb:e9:4f:78:31:45:67:44:8f:00:91:86:82:
41:8a:82:72:63:1d:10:5c:47:77:e3:e7:c4:e9:31:87:76:a4:
10:18:9a:78:41:9a:d8:db:8d:69:90:3c:89:c6:15:83:7f:45:
1d:80:38:a0:1b:33:d0:bc:1d:80:97:ab:d1:22:73:3d:4f:a0:
11:bf:8c:1f:37:45:f8:73:8a:35:ad:23:13:cf:ac:c8:72:a2:
6d:8f:42:36:53:07:e0:c5:44:00:ef:b7:29:e7:a0:0c:de:90:
81:a8:d5:49:3b:61:59:75:46:08:7d:e0:d2:62:3f:7f:5e:c2:
bc:99:01:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu6Jn6s+b02nf89QH5F33MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YzlmZmYyZjhlZDBkNjVhYWQwYjk0ZjgwMzZmMmVlMWFl
ZWVhMGEwHhcNMjUwODIzMDcwMTQwWhcNMjUwODI0MDcwMTQwWjAzMTEwLwYDVQQD
EyhlY2U4N2Q1ZDhjMmM2M2Q2NjljNmEyNWNiYjYyZjQyOTQ2YjlhZTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUDR92PYF4fgKj+5dMY6i/izmz/Z
MN+TMcJ0FBKd+06CDUOramtvqt5CG/QG6y6nLsOGzKxvuljlmqYnYFKfofi2S9GU
7//NXbrSKglbG25B1Bu8S+oWCZE7EJMkzpETVueJUGVvqDUaQJY0nn8NSMScx/tx
3QNWKuirUFdMvcFuYkwT0d+OP+25vtzJME3wJOm58m9HtUF/vbe0fHpiDKt9rggc
nUjP90mrOGkrypRy2JalloUNL1aCJxEieK+57eB6OOgjbzfj9hEOkSu0TnYzqJwp
nwChs3OBlVGJFr/9ZbP8lk/JdeTbthl1KYql/JGV+R3KzYXfZRekccWZeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzofV2MLGPWacaiXLti9ClGua6cMB8GA1UdIwQY
MBaAFOXJ//L47Q1lqtC5T4A28u4a7uoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWNuXzh2anREV1dxMExsUGdEYnk3aHJ1NmdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hZjIzYzYtZWZlYy00OTFiLTg3Y2Qt
OWZhYTYyYTFmMTc4LzEvNWNuXzh2anREV1dxMExsUGdEYnk3aHJ1NmdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hZjIzYzYtZWZlYy00OTFiLTg3Y2QtOWZhYTYyYTFmMTc4
LzEvNWNuXzh2anREV1dxMExsUGdEYnk3aHJ1NmdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHL8mR34a
bO36T1DPPTvysoZZMXMvg30tIjQxYHXgvCDLLvKOM8kOa9JcGQPDPii2jcTKVpWE
rpwPyADKZwiaRUghS80d0c2mN7TvYMjR9S8/0nVeJEoGYtkdHJl7hm3+JilELgf1
XrMByEQvljN/0Vez9W/pX/y3QUsVditEq3qhCCfr6U94MUVnRI8AkYaCQYqCcmMd
EFxHd+PnxOkxh3akEBiaeEGa2NuNaZA8icYVg39FHYA4oBsz0LwdgJer0SJzPU+g
Eb+MHzdF+HOKNa0jE8+syHKibY9CNlMH4MVEAO+3KeegDN6QgajVSTthWXVGCH3g
0mI/f17CvJkBug==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:45:39 2025 by rpki-client