Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
File: 5saSR1gKSIv0YbhL97iyrBN01cU.mft (raw, json)
Hash identifier: y5zhYaA3pPDy94U6CMhsENc0CxlY/zJ+82I8AKU9Q9o=
Subject key identifier: B1:20:19:41:4B:3C:9C:25:B3:4D:9C:68:66:0E:22:5D:11:8D:E7:DC
Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
Certificate issuer: /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Certificate serial: 0198D54E489282C06F453BEBCF7E6E82401F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:13 +0000
Manifest this update: Sat 23 Aug 2025 05:02:13 +0000
Manifest next update: Sun 24 Aug 2025 05:02:13 +0000
Files and hashes: 1: 5saSR1gKSIv0YbhL97iyrBN01cU.crl (hash: 5jExhRCJuuQmEKh2z/o+ms6LgiC9hvitBF92lUiPY84=)
2: l7WjKJBoi3ZOMaBwpHnPjLLele8.roa (hash: VuHVVXaHP8BDF2HI+1C+9vRLPuu0QKmIZQUwhxNEcWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:48:92:82:c0:6f:45:3b:eb:cf:7e:6e:82:40:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Validity
Not Before: Aug 23 05:02:13 2025 GMT
Not After : Aug 24 05:02:13 2025 GMT
Subject: CN=b12019414b3c9c25b34d9c68660e225d118de7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:0f:19:10:7e:d8:d1:93:d7:bc:29:36:07:
45:89:c6:89:8b:fd:2f:c8:19:09:42:f7:4f:3a:39:
2a:c1:a6:45:f7:1b:2a:36:2a:d0:2f:fb:e9:72:81:
9f:34:53:29:8b:93:b0:62:6a:91:80:cf:67:03:74:
d7:37:c7:3c:d2:16:88:b6:21:ca:cf:fe:a6:17:7a:
c1:d3:0c:a8:56:e0:a2:bd:46:e1:c5:f4:ca:cd:9d:
26:85:5f:12:5a:2a:e9:c3:dd:fa:04:3e:7a:65:b6:
62:04:28:48:27:fb:eb:d8:7f:72:7d:f3:80:07:ae:
e6:2a:8e:04:26:b4:14:bc:46:55:18:4c:ec:1a:fb:
92:ca:d1:1a:86:2a:3b:e8:ab:bc:e9:9c:10:d1:da:
aa:e7:6e:f4:58:4e:39:46:3a:39:8f:ce:47:e4:1f:
ef:2c:a3:bf:40:72:1c:ef:9b:f6:41:0f:2c:16:c7:
92:c3:ad:14:4c:86:bf:8a:03:87:cf:bc:df:aa:3e:
68:d4:d8:5e:28:b8:f3:4f:5b:b8:8b:ef:70:60:5d:
55:ad:c0:ea:d7:f9:a1:98:41:ba:ee:55:9a:29:f3:
bb:22:b4:2e:59:14:45:10:20:a7:9d:1b:a5:37:8c:
ae:8a:2c:e3:93:4a:07:7f:57:da:ae:5d:36:f5:f6:
23:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:20:19:41:4B:3C:9C:25:B3:4D:9C:68:66:0E:22:5D:11:8D:E7:DC
X509v3 Authority Key Identifier:
keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:47:3c:f1:5b:7c:87:23:26:26:21:0b:62:d0:05:8e:9d:a2:
a1:19:94:5d:78:46:d1:0a:2d:5b:d8:33:79:09:c5:ec:27:08:
d2:20:7a:58:07:39:f3:7d:3b:aa:f9:e9:ae:8c:78:53:27:e0:
e9:ff:e1:aa:08:99:7e:5d:06:f9:eb:bf:f9:6c:12:3a:69:10:
f8:9c:e1:4a:d3:96:86:e2:bb:d4:32:0e:b9:ce:05:2d:77:22:
97:ad:22:52:12:a3:21:0a:37:a5:02:e0:31:21:11:1b:97:7e:
19:dc:5c:e8:9c:e3:ce:f0:3b:88:0a:a1:0f:46:56:68:d7:14:
87:f4:dd:7c:7e:89:98:9f:41:f9:48:8e:a0:ae:d7:6b:d4:13:
dc:02:77:52:bc:ac:73:90:b1:45:a3:c3:80:3a:0e:6a:5b:ce:
c4:4a:dc:8b:8a:6e:c6:e3:6c:ab:d5:2b:12:7f:3d:f4:31:fd:
38:b1:b0:39:88:ac:65:34:b8:57:44:f9:58:c0:b8:88:84:9b:
6f:32:3e:7b:f1:a4:82:51:79:9b:ff:36:65:a2:56:fc:9a:f2:
fe:82:b0:17:1e:95:ae:da:46:d2:fb:5e:9e:ff:7f:7d:73:e4:
9b:63:2c:2c:84:2f:b8:1a:97:0c:ca:c2:00:2e:78:66:f0:dc:
b5:a7:d1:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTkiSgsBvRTvrz35ugkAfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YzY5MjQ3NTgwYTQ4OGJmNDYxYjg0YmY3YjhiMmFjMTM3
NGQ1YzUwHhcNMjUwODIzMDUwMjEzWhcNMjUwODI0MDUwMjEzWjAzMTEwLwYDVQQD
EyhiMTIwMTk0MTRiM2M5YzI1YjM0ZDljNjg2NjBlMjI1ZDExOGRlN2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFsPGRB+2NGT17wpNgdFicaJi/0v
yBkJQvdPOjkqwaZF9xsqNirQL/vpcoGfNFMpi5OwYmqRgM9nA3TXN8c80haItiHK
z/6mF3rB0wyoVuCivUbhxfTKzZ0mhV8SWirpw936BD56ZbZiBChIJ/vr2H9yffOA
B67mKo4EJrQUvEZVGEzsGvuSytEahio76Ku86ZwQ0dqq5270WE45Rjo5j85H5B/v
LKO/QHIc75v2QQ8sFseSw60UTIa/igOHz7zfqj5o1NheKLjzT1u4i+9wYF1VrcDq
1/mhmEG67lWaKfO7IrQuWRRFECCnnRulN4yuiizjk0oHf1farl029fYjZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEgGUFLPJwls02caGYOIl0RjefcMB8GA1UdIwQY
MBaAFObGkkdYCkiL9GG4S/e4sqwTdNXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXNhU1IxZ0tTSXYwWWJoTDk3aXlyQk4wMWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zM2JhNmMtYmVmYi00ZGViLTg5OTgt
NTI3YTlhNGVlNjI0LzEvNXNhU1IxZ0tTSXYwWWJoTDk3aXlyQk4wMWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zM2JhNmMtYmVmYi00ZGViLTg5OTgtNTI3YTlhNGVlNjI0
LzEvNXNhU1IxZ0tTSXYwWWJoTDk3aXlyQk4wMWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEc88Vt8
hyMmJiELYtAFjp2ioRmUXXhG0QotW9gzeQnF7CcI0iB6WAc58307qvnprox4Uyfg
6f/hqgiZfl0G+eu/+WwSOmkQ+JzhStOWhuK71DIOuc4FLXcil60iUhKjIQo3pQLg
MSERG5d+Gdxc6JzjzvA7iAqhD0ZWaNcUh/TdfH6JmJ9B+UiOoK7Xa9QT3AJ3Urys
c5CxRaPDgDoOalvOxErci4puxuNsq9UrEn899DH9OLGwOYisZTS4V0T5WMC4iISb
bzI+e/GkglF5m/82ZaJW/Jry/oKwFx6VrtpG0vtenv9/fXPkm2MsLIQvuBqXDMrC
AC54ZvDctafRQw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:21 2025 by rpki-client