Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
File: 5wb8lykDS_sEZN1MmF8UuiEOgeM.mft (raw, json)
Hash identifier: io4xYb3NhWB1W8B6XUCmVmTeUI8JgoP/gC2vhoMzR1A=
Subject key identifier: DA:29:5A:62:A7:E4:F4:F3:98:13:86:9D:DE:0B:50:53:83:80:23:B0
Authority key identifier: E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3
Certificate issuer: /CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
Certificate serial: 0198D698833729B2B2B263108F29E9944F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
Manifest number: 1407
Signing time: Sat 23 Aug 2025 11:02:55 +0000
Manifest this update: Sat 23 Aug 2025 11:02:55 +0000
Manifest next update: Sun 24 Aug 2025 11:02:55 +0000
Files and hashes: 1: 5wb8lykDS_sEZN1MmF8UuiEOgeM.crl (hash: Z9gmxQkaNEFNo++TEzAJWh6Sfus/3mi+kJImTjSYpXI=)
2: b37_mvewRVwCg1bn4EBDzO-L-T4.roa (hash: Se2kErf9iBL4UpQAgg1UiulAV/XRVJ5FdDxPc7oRHW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:83:37:29:b2:b2:b2:63:10:8f:29:e9:94:4f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
Validity
Not Before: Aug 23 11:02:55 2025 GMT
Not After : Aug 24 11:02:55 2025 GMT
Subject: CN=da295a62a7e4f4f39813869dde0b5053838023b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:32:db:ba:22:a4:b0:8a:5e:06:06:a4:46:7e:
69:b4:2a:10:fc:c8:e7:11:09:0a:27:d8:f8:57:9c:
e6:81:cb:fb:f3:1f:2d:40:a0:41:38:01:d0:6e:55:
7c:73:f9:d1:fb:d3:86:16:30:96:be:bc:d5:8c:d6:
a0:31:a0:28:c3:34:f3:fc:54:03:65:3f:b5:5d:97:
4d:fe:87:4b:99:83:d8:05:90:b7:8e:68:02:85:27:
9d:de:d8:86:3a:7d:56:da:d7:be:40:8a:66:9d:52:
67:d7:1b:a1:51:bc:bb:d4:78:b2:06:1b:bc:25:dd:
f0:16:bd:89:8a:84:48:17:e4:0c:9b:e2:b5:bb:0c:
63:ca:c1:61:fa:25:86:2b:b6:93:74:8d:e6:b8:64:
20:3f:bb:57:f3:c7:e2:ae:45:03:3e:63:02:72:ba:
26:ca:a9:d8:df:24:14:33:20:d7:a7:76:fd:4c:ac:
ed:0b:96:ba:5d:a3:23:2d:02:b5:0f:14:93:34:8d:
b5:1c:2f:99:1d:f1:2d:49:78:6a:fc:32:80:ce:74:
98:99:40:1f:4f:e1:0b:1b:26:30:65:7d:8d:6c:ce:
1a:4d:25:5d:ec:d5:80:60:8d:d7:ec:00:29:53:59:
dc:b6:aa:bb:d5:9c:b6:50:9b:13:9b:2d:10:3a:af:
24:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:29:5A:62:A7:E4:F4:F3:98:13:86:9D:DE:0B:50:53:83:80:23:B0
X509v3 Authority Key Identifier:
keyid:E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:37:2a:57:36:10:3b:c5:51:bf:28:1c:60:dd:86:89:e0:35:
38:a9:61:06:3d:36:e9:3b:5c:3d:de:c6:e2:5c:1a:8a:17:bb:
ed:fd:93:b0:a7:32:8d:de:d7:20:5e:ce:04:f0:3c:71:dd:6d:
58:f2:f5:94:93:29:67:8b:1d:67:dc:ce:da:56:cf:9e:6a:2b:
88:55:56:ab:70:9e:d7:11:5c:b3:f2:66:64:f5:88:fa:f5:32:
6f:af:7a:91:39:f3:8f:6e:a3:34:c1:e4:c0:b9:3b:00:6f:ac:
0a:a5:64:cb:95:2f:43:b3:84:75:e3:45:14:ff:d3:45:3c:c4:
1e:cc:0d:d4:f0:6b:2d:33:b4:ac:75:22:1c:3d:2c:10:48:f4:
9f:51:79:3a:d8:ef:a6:d1:50:0f:73:40:10:1c:69:ee:e8:6d:
3a:f8:a6:81:08:8a:f2:1d:b1:df:56:e3:98:a6:29:e7:e8:5c:
e3:0c:dc:1d:dd:d9:96:43:8a:11:ec:67:43:3e:a6:d0:e9:d0:
01:ab:54:47:df:64:ee:7f:2a:0a:6e:ef:d2:6c:ba:96:9c:7b:
95:dd:66:ca:c4:50:80:aa:98:32:65:03:da:df:71:a8:ac:18:
4b:8d:fe:c1:5e:c9:c4:a0:22:e7:53:f0:73:e4:52:6f:6c:69:
34:30:f3:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmIM3KbKysmMQjynplE+UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MDZmYzk3MjkwMzRiZmIwNDY0ZGQ0Yzk4NWYxNGJhMjEw
ZTgxZTMwHhcNMjUwODIzMTEwMjU1WhcNMjUwODI0MTEwMjU1WjAzMTEwLwYDVQQD
EyhkYTI5NWE2MmE3ZTRmNGYzOTgxMzg2OWRkZTBiNTA1MzgzODAyM2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjLbuiKksIpeBgakRn5ptCoQ/Mjn
EQkKJ9j4V5zmgcv78x8tQKBBOAHQblV8c/nR+9OGFjCWvrzVjNagMaAowzTz/FQD
ZT+1XZdN/odLmYPYBZC3jmgChSed3tiGOn1W2te+QIpmnVJn1xuhUby71HiyBhu8
Jd3wFr2JioRIF+QMm+K1uwxjysFh+iWGK7aTdI3muGQgP7tX88firkUDPmMCcrom
yqnY3yQUMyDXp3b9TKztC5a6XaMjLQK1DxSTNI21HC+ZHfEtSXhq/DKAznSYmUAf
T+ELGyYwZX2NbM4aTSVd7NWAYI3X7AApU1nctqq71Zy2UJsTmy0QOq8khQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNopWmKn5PTzmBOGnd4LUFODgCOwMB8GA1UdIwQY
MBaAFOcG/JcpA0v7BGTdTJhfFLohDoHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXdiOGx5a0RTX3NFWk4xTW1GOFV1aUVPZ2VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80NzYzODMtZjZkYS00ZTBlLThlMTIt
ZDJkY2YwNWQzMzc2LzEvNXdiOGx5a0RTX3NFWk4xTW1GOFV1aUVPZ2VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80NzYzODMtZjZkYS00ZTBlLThlMTItZDJkY2YwNWQzMzc2
LzEvNXdiOGx5a0RTX3NFWk4xTW1GOFV1aUVPZ2VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzcqVzYQ
O8VRvygcYN2GieA1OKlhBj026TtcPd7G4lwaihe77f2TsKcyjd7XIF7OBPA8cd1t
WPL1lJMpZ4sdZ9zO2lbPnmoriFVWq3Ce1xFcs/JmZPWI+vUyb696kTnzj26jNMHk
wLk7AG+sCqVky5UvQ7OEdeNFFP/TRTzEHswN1PBrLTO0rHUiHD0sEEj0n1F5Otjv
ptFQD3NAEBxp7uhtOvimgQiK8h2x31bjmKYp5+hc4wzcHd3ZlkOKEexnQz6m0OnQ
AatUR99k7n8qCm7v0my6lpx7ld1mysRQgKqYMmUD2t9xqKwYS43+wV7JxKAi51Pw
c+RSb2xpNDDz6Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:57:57 2025 by rpki-client