Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
File: 5pySw7nuYLoBPZQYIgQvJQBMlew.mft (raw, json)
Hash identifier: FYPfIKhAJZXX0TqHqKhyfZaIT6Sq9lMMQE7t8c6anJE=
Subject key identifier: FF:55:C9:84:2A:45:DE:D3:82:48:E6:4E:5C:1A:72:54:CD:B6:16:F6
Authority key identifier: E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
Certificate issuer: /CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Certificate serial: 0198D5164AB08D7491C835E814B7C0792D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 04:01:04 +0000
Manifest this update: Sat 23 Aug 2025 04:01:04 +0000
Manifest next update: Sun 24 Aug 2025 04:01:04 +0000
Files and hashes: 1: 5pySw7nuYLoBPZQYIgQvJQBMlew.crl (hash: aKCg4HUSA39MtA4kNmpLgLiicZKZPUdOboiHNS/0ViI=)
2: rR9_uvw4xytf2agupQ_iUhFHPXQ.roa (hash: X8fcaKRyDp0VyO5muGsQviUm1Dvz7ExE7FAL5YYozyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:4a:b0:8d:74:91:c8:35:e8:14:b7:c0:79:2d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Validity
Not Before: Aug 23 04:01:04 2025 GMT
Not After : Aug 24 04:01:04 2025 GMT
Subject: CN=ff55c9842a45ded38248e64e5c1a7254cdb616f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:94:47:72:57:92:5e:da:99:66:36:7e:f7:0d:
1f:01:bc:bf:55:7d:f1:a6:b7:a1:bf:ac:a1:28:fe:
09:83:fc:ec:36:e9:20:28:68:b8:8f:27:55:cc:18:
13:e0:fb:88:da:3a:76:63:cd:a8:8a:e5:f0:d1:86:
77:f9:15:88:7d:ef:7e:cf:35:be:c6:2d:27:8b:1c:
bd:56:84:0b:4c:6f:01:0a:80:1e:f0:12:3e:d8:5c:
c9:0c:df:9d:27:91:c1:04:10:28:26:ae:4b:10:c2:
47:05:12:ad:e1:9e:d4:c4:75:90:35:9e:e5:68:0a:
44:d2:c5:0a:c7:3b:a5:d5:7c:28:3c:cf:15:03:de:
16:2b:b4:08:ad:89:21:fe:2f:30:00:19:67:d1:bc:
a3:9e:35:db:d4:d8:65:9b:af:f2:a6:9c:c4:ee:6b:
d3:6d:b6:6a:5c:98:19:2a:22:aa:fc:83:1a:c4:03:
22:44:13:03:e9:ce:1f:f2:c6:85:f0:9e:ab:ad:6b:
fc:48:d0:38:f5:c8:0a:56:f4:e6:bc:2f:0e:6c:72:
3a:41:06:68:75:af:cf:d6:9f:10:24:bb:88:ba:d1:
f7:fe:74:64:b4:be:60:13:be:f3:cc:b4:f2:65:1a:
6b:83:30:c6:eb:39:a9:28:4e:06:73:3c:db:e4:55:
52:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:55:C9:84:2A:45:DE:D3:82:48:E6:4E:5C:1A:72:54:CD:B6:16:F6
X509v3 Authority Key Identifier:
keyid:E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:bc:ee:54:3d:07:32:a8:2c:d2:13:fe:0c:85:cb:58:6b:d3:
70:60:98:5a:6a:d7:46:b2:11:15:7f:a5:7e:b8:4a:f1:8f:2d:
4a:2b:2c:62:6c:85:7e:39:eb:33:45:9b:39:13:9f:75:af:4f:
07:3c:87:16:d5:d4:c5:c3:e0:2f:fe:7d:e8:11:30:b6:c8:e8:
48:af:20:14:a1:a4:56:0f:6b:07:9b:99:a5:60:12:4c:77:ac:
70:47:b5:57:64:a0:73:0f:43:13:ff:02:e3:6c:cf:70:8d:e6:
42:5d:7f:e8:bb:2d:9b:b3:57:39:b1:90:21:24:18:2f:3a:e6:
57:cd:3a:16:a1:16:c9:ba:ef:34:ed:f7:0e:06:36:44:8b:1e:
7f:03:a0:bb:af:0b:d5:8a:93:21:51:ae:05:c0:aa:ba:a6:d7:
88:b5:55:1e:d5:bb:66:4f:f8:28:d0:98:89:76:b4:0e:36:51:
a1:e8:f5:25:6e:dc:97:ce:ae:d9:94:18:42:e0:7a:51:9b:e0:
54:ac:3c:95:74:46:c4:d4:d3:a1:d7:fa:6b:29:5a:cd:4f:97:
cd:5a:3e:10:f0:fb:d9:74:61:d9:5a:d4:f9:69:e9:3f:52:0b:
05:28:a8:4c:61:96:84:81:b6:e9:24:bd:10:65:08:15:a7:a3:
0b:eb:68:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFkqwjXSRyDXoFLfAeS1aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2OWM5MmMzYjllZTYwYmEwMTNkOTQxODIyMDQyZjI1MDA0
Yzk1ZWMwHhcNMjUwODIzMDQwMTA0WhcNMjUwODI0MDQwMTA0WjAzMTEwLwYDVQQD
EyhmZjU1Yzk4NDJhNDVkZWQzODI0OGU2NGU1YzFhNzI1NGNkYjYxNmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pRHcleSXtqZZjZ+9w0fAby/VX3x
prehv6yhKP4Jg/zsNukgKGi4jydVzBgT4PuI2jp2Y82oiuXw0YZ3+RWIfe9+zzW+
xi0nixy9VoQLTG8BCoAe8BI+2FzJDN+dJ5HBBBAoJq5LEMJHBRKt4Z7UxHWQNZ7l
aApE0sUKxzul1XwoPM8VA94WK7QIrYkh/i8wABln0byjnjXb1Nhlm6/yppzE7mvT
bbZqXJgZKiKq/IMaxAMiRBMD6c4f8saF8J6rrWv8SNA49cgKVvTmvC8ObHI6QQZo
da/P1p8QJLuIutH3/nRktL5gE77zzLTyZRprgzDG6zmpKE4Gczzb5FVS2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9VyYQqRd7TgkjmTlwaclTNthb2MB8GA1UdIwQY
MBaAFOacksO57mC6AT2UGCIELyUATJXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXB5U3c3bnVZTG9CUFpRWUlnUXZKUUJNbGV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85Yjg0YzMtZDdmZC00M2Q4LWE4ZjEt
OTEzNzEwM2M5M2VmLzEvNXB5U3c3bnVZTG9CUFpRWUlnUXZKUUJNbGV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS85Yjg0YzMtZDdmZC00M2Q4LWE4ZjEtOTEzNzEwM2M5M2Vm
LzEvNXB5U3c3bnVZTG9CUFpRWUlnUXZKUUJNbGV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLzuVD0H
Mqgs0hP+DIXLWGvTcGCYWmrXRrIRFX+lfrhK8Y8tSissYmyFfjnrM0WbOROfda9P
BzyHFtXUxcPgL/596BEwtsjoSK8gFKGkVg9rB5uZpWASTHescEe1V2Sgcw9DE/8C
42zPcI3mQl1/6Lstm7NXObGQISQYLzrmV806FqEWybrvNO33DgY2RIsefwOgu68L
1YqTIVGuBcCquqbXiLVVHtW7Zk/4KNCYiXa0DjZRoej1JW7cl86u2ZQYQuB6UZvg
VKw8lXRGxNTTodf6aylazU+XzVo+EPD72XRh2VrU+WnpP1ILBSioTGGWhIG26SS9
EGUIFaejC+toTQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:25 2025 by rpki-client