Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
File: rsr5Su3_76Q2a8or65GZLB2zTMw.mft (raw, json)
Hash identifier: hzCemk3YQ8i2Jodb2ljUg6DHTOA8xwH3RPvhcARCz3s=
Subject key identifier: 0E:33:FE:D4:17:0E:CA:24:FA:48:B7:09:82:85:6E:7D:45:F4:09:45
Authority key identifier: AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC
Certificate issuer: /CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
Certificate serial: 0198D54E2A9B2AB77108811F0EF16DEC5CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
Manifest number: 09E1
Signing time: Sat 23 Aug 2025 05:02:06 +0000
Manifest this update: Sat 23 Aug 2025 05:02:06 +0000
Manifest next update: Sun 24 Aug 2025 05:02:06 +0000
Files and hashes: 1: rsr5Su3_76Q2a8or65GZLB2zTMw.crl (hash: ZRagz+8xGAbTPEyqSah6E6303Km45IcV76GiKPSEo6g=)
2: ycsxAxwfvi_ZHCMIh-H72E7BXeY.roa (hash: 5XrkDdaM3UebECdsSy+x2CvwywLxmUspYKKtB6gwnm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:2a:9b:2a:b7:71:08:81:1f:0e:f1:6d:ec:5c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
Validity
Not Before: Aug 23 05:02:06 2025 GMT
Not After : Aug 24 05:02:06 2025 GMT
Subject: CN=0e33fed4170eca24fa48b70982856e7d45f40945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:b0:2d:54:f0:c7:42:e1:54:59:3b:78:f4:
2c:53:fb:fb:c0:81:16:84:ae:75:1f:3a:83:4f:02:
4b:23:8f:e4:38:04:48:99:d6:88:3f:e1:2b:ec:d4:
5c:ac:18:f5:3d:bd:34:86:e4:b1:a1:17:05:8c:0d:
85:fb:1a:2e:49:03:2c:23:90:e5:62:f5:40:4d:a8:
44:33:48:f8:74:95:16:1f:84:0f:4a:ff:46:a9:2e:
7e:61:20:57:af:d1:a2:53:4d:2c:6e:a6:1f:1e:dd:
22:b6:8c:6c:4a:b2:ec:c8:85:b5:6d:7b:3f:73:42:
17:ec:7b:f3:c7:84:a4:32:88:89:e9:56:78:23:8e:
52:74:18:86:71:cd:11:bc:cf:c2:7e:f6:86:80:ec:
43:6e:7a:14:c6:a2:74:27:d6:78:ed:3f:36:96:6f:
41:1e:ab:bf:09:ce:34:c4:75:b0:5d:5b:3d:60:71:
b9:1f:5a:0b:ed:34:dc:8a:f4:fb:e8:4c:30:ee:b8:
d4:d4:07:56:6b:1a:a9:ba:bd:12:11:39:a9:1a:49:
af:e6:3f:6f:1f:3d:46:e0:fc:ce:57:99:f3:4b:de:
bc:78:84:39:ea:ce:67:57:67:92:c8:b0:15:9d:a5:
f4:ad:b3:d3:c0:3a:bf:6f:f7:68:a7:3e:ca:37:76:
e5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:33:FE:D4:17:0E:CA:24:FA:48:B7:09:82:85:6E:7D:45:F4:09:45
X509v3 Authority Key Identifier:
keyid:AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a8:40:d4:b7:98:b8:a2:4c:f0:58:6f:2c:96:48:da:c5:34:
42:20:72:b8:10:c4:3e:c5:0b:ca:c4:e0:7b:55:d0:68:65:7a:
1c:9e:b9:f0:53:03:5f:8c:b4:10:7a:47:25:fd:9d:83:5f:e5:
43:fa:36:17:83:2e:a6:aa:b7:86:66:dc:31:81:35:61:91:4f:
24:7e:68:47:9c:b9:80:a7:fc:56:fa:2d:11:9d:7d:c4:38:ee:
4f:6b:88:9d:4c:be:71:e1:ed:e7:16:ca:01:9b:52:e8:4c:fc:
bb:17:b6:e5:ac:3c:1e:30:d6:84:41:10:7e:9d:7f:6a:ef:d9:
2e:64:3c:50:4f:50:72:41:6a:bc:45:04:e2:25:d0:dd:df:52:
1f:c0:08:2a:96:73:7e:db:27:46:f9:62:da:50:cc:e3:c4:ea:
0a:9f:29:0c:f8:68:be:15:0a:ef:96:45:13:25:f6:c8:d8:3e:
db:8e:f3:3d:32:40:a0:c1:5f:ff:1d:75:6e:d7:73:9b:6e:51:
64:3c:7c:de:38:7a:bc:a0:33:3b:4a:da:6c:c6:ce:26:b2:57:
eb:20:eb:4f:71:79:2d:97:82:ce:1e:e2:bf:8e:ba:f3:13:74:
43:58:c5:70:ab:48:ea:6c:19:68:c2:49:39:21:64:9d:ce:18:
15:9e:56:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTiqbKrdxCIEfDvFt7FzdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlY2FmOTRhZWRmZmVmYTQzNjZiY2EyYmViOTE5OTJjMWRi
MzRjY2MwHhcNMjUwODIzMDUwMjA2WhcNMjUwODI0MDUwMjA2WjAzMTEwLwYDVQQD
EygwZTMzZmVkNDE3MGVjYTI0ZmE0OGI3MDk4Mjg1NmU3ZDQ1ZjQwOTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxOwLVTwx0LhVFk7ePQsU/v7wIEW
hK51HzqDTwJLI4/kOARImdaIP+Er7NRcrBj1Pb00huSxoRcFjA2F+xouSQMsI5Dl
YvVATahEM0j4dJUWH4QPSv9GqS5+YSBXr9GiU00sbqYfHt0itoxsSrLsyIW1bXs/
c0IX7Hvzx4SkMoiJ6VZ4I45SdBiGcc0RvM/CfvaGgOxDbnoUxqJ0J9Z47T82lm9B
Hqu/Cc40xHWwXVs9YHG5H1oL7TTcivT76Eww7rjU1AdWaxqpur0SETmpGkmv5j9v
Hz1G4PzOV5nzS968eIQ56s5nV2eSyLAVnaX0rbPTwDq/b/dopz7KN3blhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4z/tQXDsok+ki3CYKFbn1F9AlFMB8GA1UdIwQY
MBaAFK7K+Urt/++kNmvKK+uRmSwds0zMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnNyNVN1M183NlEyYThvcjY1R1pMQjJ6VE13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wNDdkZWMtZDg0NC00NjdhLWEwMWEt
ZmMwM2VmNzk0NzE4LzEvcnNyNVN1M183NlEyYThvcjY1R1pMQjJ6VE13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8wNDdkZWMtZDg0NC00NjdhLWEwMWEtZmMwM2VmNzk0NzE4
LzEvcnNyNVN1M183NlEyYThvcjY1R1pMQjJ6VE13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHahA1LeY
uKJM8FhvLJZI2sU0QiByuBDEPsULysTge1XQaGV6HJ658FMDX4y0EHpHJf2dg1/l
Q/o2F4Mupqq3hmbcMYE1YZFPJH5oR5y5gKf8VvotEZ19xDjuT2uInUy+ceHt5xbK
AZtS6Ez8uxe25aw8HjDWhEEQfp1/au/ZLmQ8UE9QckFqvEUE4iXQ3d9SH8AIKpZz
ftsnRvli2lDM48TqCp8pDPhovhUK75ZFEyX2yNg+247zPTJAoMFf/x11btdzm25R
ZDx83jh6vKAzO0rabMbOJrJX6yDrT3F5LZeCzh7iv4668xN0Q1jFcKtI6mwZaMJJ
OSFknc4YFZ5WBQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:03 2025 by rpki-client