Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
File: 5_y3rNVfY0m52BRheGwSRY-G9y4.mft (raw, json)
Hash identifier: HKQU7GPI01kdspEpSqNu8+A9sf8/sD6fnaJuORJFhPw=
Subject key identifier: 1F:47:3B:11:65:1B:6A:85:CF:20:4A:66:C5:6C:F9:9A:A6:EF:9F:C2
Authority key identifier: E7:FC:B7:AC:D5:5F:63:49:B9:D8:14:61:78:6C:12:45:8F:86:F7:2E
Certificate issuer: /CN=e7fcb7acd55f6349b9d81461786c12458f86f72e
Certificate serial: 0198D7A8D17E0DBDEEE48F845186AC5B05EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 16:00:21 +0000
Manifest this update: Sat 23 Aug 2025 16:00:21 +0000
Manifest next update: Sun 24 Aug 2025 16:00:21 +0000
Files and hashes: 1: 5_y3rNVfY0m52BRheGwSRY-G9y4.crl (hash: ySGviIm5TWDEB1GKEA7p4fnHrF/d2Iz4A+LK8HOJwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:d1:7e:0d:bd:ee:e4:8f:84:51:86:ac:5b:05:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fcb7acd55f6349b9d81461786c12458f86f72e
Validity
Not Before: Aug 23 16:00:21 2025 GMT
Not After : Aug 24 16:00:21 2025 GMT
Subject: CN=1f473b11651b6a85cf204a66c56cf99aa6ef9fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ef:41:60:63:ba:0e:e1:dd:98:4c:16:9b:af:
11:21:f5:91:a8:27:50:f6:3b:06:77:fb:8e:bc:b0:
92:84:c5:bc:51:03:66:64:29:de:9a:d2:f2:fb:d9:
50:54:5a:ba:e2:f4:1f:af:59:2d:8b:63:26:32:d6:
38:9c:5f:f9:71:08:18:a1:52:d3:c4:15:17:7b:e5:
24:2c:25:86:4d:08:ea:5a:e4:89:a8:d8:4e:ab:35:
55:c6:41:d4:92:b4:d1:f8:80:86:2b:2f:56:2a:d0:
c2:a9:66:10:1b:5b:d4:49:0b:71:00:d4:12:a7:40:
d6:5e:c5:47:45:0f:25:fc:f1:80:30:c8:a0:dc:5a:
ef:95:22:a3:99:11:d2:61:c4:e1:8a:21:78:6c:4a:
a3:fa:3b:bb:94:ad:cd:36:dc:63:49:77:af:d8:89:
34:21:1b:1c:17:9e:85:dd:94:d2:18:7c:35:a7:01:
d8:11:19:9f:a0:66:3d:85:95:91:db:f5:5b:d6:56:
bd:83:e0:44:d9:56:ca:1a:59:06:6c:84:0a:eb:de:
ea:0a:3a:46:36:cf:3d:c4:27:25:24:fc:a5:42:98:
0a:43:79:6a:51:84:e0:62:74:24:20:97:eb:ef:98:
f8:ed:f9:de:04:8b:5b:cc:0b:0b:70:5f:03:09:71:
41:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:47:3B:11:65:1B:6A:85:CF:20:4A:66:C5:6C:F9:9A:A6:EF:9F:C2
X509v3 Authority Key Identifier:
keyid:E7:FC:B7:AC:D5:5F:63:49:B9:D8:14:61:78:6C:12:45:8F:86:F7:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:71:90:24:3f:13:94:08:41:4d:6d:1d:3c:85:47:e1:2d:45:
9a:7c:cd:55:2d:35:79:93:ee:40:9d:5a:23:6f:ca:c0:66:96:
14:0b:21:64:79:4b:99:2f:43:cc:e8:1c:7d:99:c5:28:c0:be:
4b:ac:cf:db:79:6c:e3:a3:f6:77:58:7f:be:9d:84:b7:80:a7:
a5:1f:92:5d:53:df:55:a1:81:d9:5d:9d:fc:4b:f5:ba:46:8f:
fa:12:57:74:04:ad:d8:5d:6f:33:e6:53:e2:39:5c:18:2d:61:
23:af:fd:67:91:c2:14:5b:bf:60:c3:96:fd:77:1c:de:d3:a2:
37:48:bd:32:17:51:f3:8c:35:0f:87:ee:b1:b9:f8:6b:fa:e4:
4b:f7:3c:0b:0d:a0:9b:7d:75:e1:72:fc:e5:f4:aa:b7:8d:1f:
09:8f:8b:44:11:f3:a3:eb:e3:1a:7b:93:46:9f:fa:9a:6e:4c:
57:fc:84:53:6a:64:ba:e2:d4:a8:f2:82:f4:d9:05:bd:90:f3:
32:4d:be:72:48:a6:25:23:78:78:1e:f7:0f:70:c1:83:ca:ad:
1c:e7:bd:2c:69:0f:a5:de:af:c4:1d:cc:f1:c0:10:c3:45:63:
68:84:17:1b:e8:b0:0f:d2:bd:ad:2d:08:e3:10:06:a2:a5:e6:
d7:7f:5a:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqNF+Db3u5I+EUYasWwXqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmNiN2FjZDU1ZjYzNDliOWQ4MTQ2MTc4NmMxMjQ1OGY4
NmY3MmUwHhcNMjUwODIzMTYwMDIxWhcNMjUwODI0MTYwMDIxWjAzMTEwLwYDVQQD
EygxZjQ3M2IxMTY1MWI2YTg1Y2YyMDRhNjZjNTZjZjk5YWE2ZWY5ZmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu9BYGO6DuHdmEwWm68RIfWRqCdQ
9jsGd/uOvLCShMW8UQNmZCnemtLy+9lQVFq64vQfr1kti2MmMtY4nF/5cQgYoVLT
xBUXe+UkLCWGTQjqWuSJqNhOqzVVxkHUkrTR+ICGKy9WKtDCqWYQG1vUSQtxANQS
p0DWXsVHRQ8l/PGAMMig3FrvlSKjmRHSYcThiiF4bEqj+ju7lK3NNtxjSXev2Ik0
IRscF56F3ZTSGHw1pwHYERmfoGY9hZWR2/Vb1la9g+BE2VbKGlkGbIQK697qCjpG
Ns89xCclJPylQpgKQ3lqUYTgYnQkIJfr75j47fneBItbzAsLcF8DCXFBeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9HOxFlG2qFzyBKZsVs+Zqm75/CMB8GA1UdIwQY
MBaAFOf8t6zVX2NJudgUYXhsEkWPhvcuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV95M3JOVmZZMG01MkJSaGVHd1NSWS1HOXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82OTgzMzktNTkwNS00NjM3LWI5ODMt
Y2RiM2E2NTdkOWVlLzEvNV95M3JOVmZZMG01MkJSaGVHd1NSWS1HOXk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82OTgzMzktNTkwNS00NjM3LWI5ODMtY2RiM2E2NTdkOWVl
LzEvNV95M3JOVmZZMG01MkJSaGVHd1NSWS1HOXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo3GQJD8T
lAhBTW0dPIVH4S1FmnzNVS01eZPuQJ1aI2/KwGaWFAshZHlLmS9DzOgcfZnFKMC+
S6zP23ls46P2d1h/vp2Et4CnpR+SXVPfVaGB2V2d/Ev1ukaP+hJXdASt2F1vM+ZT
4jlcGC1hI6/9Z5HCFFu/YMOW/Xcc3tOiN0i9MhdR84w1D4fusbn4a/rkS/c8Cw2g
m3114XL85fSqt40fCY+LRBHzo+vjGnuTRp/6mm5MV/yEU2pkuuLUqPKC9NkFvZDz
Mk2+ckimJSN4eB73D3DBg8qtHOe9LGkPpd6vxB3M8cAQw0VjaIQXG+iwD9K9rS0I
4xAGoqXm139abg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:28:47 2025 by rpki-client