Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
File: Si5_568rpaMEbhdkT6vo8Di0598.mft (raw, json)
Hash identifier: sKypWTgPAKrV5htpyp0j1w3rl2wN3NISJZeMBw3N+CA=
Subject key identifier: EF:1A:A5:83:25:E1:35:D3:B3:DE:74:7D:68:AE:84:93:04:B5:56:F8
Authority key identifier: 4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
Certificate issuer: /CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Certificate serial: 0198D5BC465D84D58BA4CA72477EB85EE706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
Manifest number: 0ECE
Signing time: Sat 23 Aug 2025 07:02:22 +0000
Manifest this update: Sat 23 Aug 2025 07:02:22 +0000
Manifest next update: Sun 24 Aug 2025 07:02:22 +0000
Files and hashes: 1: Si5_568rpaMEbhdkT6vo8Di0598.crl (hash: VtbbTf9SECFq6tC0ONyUxe8MKD12LVGlmvp90PS6fSk=)
2: x05kuSTQillWAvYC1VSvIsPJiaU.roa (hash: YaAmDXOkb7npVO3SgdzcRdFaOrP01AvggeHWb2jbRUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:46:5d:84:d5:8b:a4:ca:72:47:7e:b8:5e:e7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Validity
Not Before: Aug 23 07:02:22 2025 GMT
Not After : Aug 24 07:02:22 2025 GMT
Subject: CN=ef1aa58325e135d3b3de747d68ae849304b556f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:81:0a:07:f0:e8:5c:0e:e3:25:d9:e2:ce:68:
58:8c:28:73:0d:a0:6c:6c:82:67:40:bb:da:f1:db:
3c:48:34:b0:e7:5f:c5:c1:ab:be:f6:f9:f8:98:4b:
49:a8:d7:6b:54:0b:65:fc:b3:a0:0b:59:c9:e1:65:
f2:e6:47:52:64:35:ba:4d:05:4d:28:5b:43:75:4b:
57:fa:e0:9b:ad:61:19:67:1f:9e:1d:f4:bd:f9:6b:
e2:ac:52:68:ba:58:1f:c8:41:35:fe:dd:94:0f:6a:
f2:55:dd:87:3e:58:a8:bb:64:6b:9c:61:1e:a4:85:
f8:8a:c4:19:f9:1e:62:be:26:58:0e:e7:6c:cf:bc:
6f:65:44:6e:30:08:d1:f0:0a:49:82:b1:25:a7:12:
b9:7f:ce:0c:13:90:93:2f:9f:0e:c9:28:fb:9b:5b:
bc:10:e8:09:91:bf:a6:a8:d7:02:c5:6b:2f:fc:0d:
63:92:49:36:69:f2:87:a8:3c:15:f6:a6:07:72:7f:
a9:a7:0d:cb:e8:98:06:49:f7:4a:30:dc:a5:94:ec:
5f:82:29:c0:af:6c:a6:5a:a9:96:41:31:c1:93:dc:
06:6b:36:ad:9e:63:04:60:02:72:64:0c:bd:ed:09:
e3:22:a7:fb:1f:4f:00:33:d1:b1:12:85:81:4e:26:
f1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1A:A5:83:25:E1:35:D3:B3:DE:74:7D:68:AE:84:93:04:B5:56:F8
X509v3 Authority Key Identifier:
keyid:4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:59:30:7c:96:97:6a:2b:71:7d:f1:06:95:89:ff:d3:a7:2c:
ec:b2:3d:cf:0c:a7:32:40:a8:1a:da:43:8c:ab:1a:7b:90:21:
54:83:5b:c1:a5:c9:a8:de:fc:34:ed:78:ea:e8:34:b6:90:11:
dc:73:dd:95:e8:7d:e3:2f:e0:11:e0:cd:b2:a7:dc:d7:f4:58:
f1:96:df:45:c7:95:08:8a:51:89:87:f4:6f:24:a2:5e:f9:49:
4d:87:7a:5f:c8:b6:02:c4:dd:be:71:e9:ab:49:f3:28:e5:48:
e1:e0:8c:ad:7b:36:61:02:6a:33:84:d8:f5:a3:56:d3:b3:6c:
ab:a1:91:76:0d:bc:4a:25:fe:5a:f7:27:10:9d:0c:e8:83:83:
ff:9c:8f:01:e1:39:54:a3:45:e2:a0:fc:c3:8f:fa:0c:10:b1:
76:f2:f5:c0:1d:d8:d2:e5:4a:9e:18:d5:7c:5a:63:bb:09:9a:
c2:d6:68:bb:6d:43:17:27:e5:35:80:98:d0:5c:e7:6e:4a:77:
a2:c8:0a:9f:46:87:cd:f0:03:77:d9:24:4e:df:96:0b:e7:56:
30:7b:95:92:d8:a3:2d:e3:15:df:58:84:55:d6:fe:00:91:35:
54:44:08:3a:cc:d7:45:3f:c4:10:8f:23:f3:8e:28:db:a4:3a:
cc:31:1b:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvEZdhNWLpMpyR364XucGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMmU3ZmU3YWYyYmE1YTMwNDZlMTc2NDRmYWJlOGYwMzhi
NGU3ZGYwHhcNMjUwODIzMDcwMjIyWhcNMjUwODI0MDcwMjIyWjAzMTEwLwYDVQQD
EyhlZjFhYTU4MzI1ZTEzNWQzYjNkZTc0N2Q2OGFlODQ5MzA0YjU1NmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IEKB/DoXA7jJdnizmhYjChzDaBs
bIJnQLva8ds8SDSw51/Fwau+9vn4mEtJqNdrVAtl/LOgC1nJ4WXy5kdSZDW6TQVN
KFtDdUtX+uCbrWEZZx+eHfS9+WvirFJoulgfyEE1/t2UD2ryVd2HPliou2RrnGEe
pIX4isQZ+R5iviZYDudsz7xvZURuMAjR8ApJgrElpxK5f84ME5CTL58OySj7m1u8
EOgJkb+mqNcCxWsv/A1jkkk2afKHqDwV9qYHcn+ppw3L6JgGSfdKMNyllOxfginA
r2ymWqmWQTHBk9wGazatnmMEYAJyZAy97QnjIqf7H08AM9GxEoWBTibx4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8apYMl4TXTs950fWiuhJMEtVb4MB8GA1UdIwQY
MBaAFEouf+evK6WjBG4XZE+r6PA4tOffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2k1XzU2OHJwYU1FYmhka1Q2dm84RGkwNTk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kOWVlYjgtNzkxNC00MDQ3LWI1NzMt
ZTY3MGEyZDQ3Yjg2LzEvU2k1XzU2OHJwYU1FYmhka1Q2dm84RGkwNTk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9kOWVlYjgtNzkxNC00MDQ3LWI1NzMtZTY3MGEyZDQ3Yjg2
LzEvU2k1XzU2OHJwYU1FYmhka1Q2dm84RGkwNTk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElkwfJaX
aitxffEGlYn/06cs7LI9zwynMkCoGtpDjKsae5AhVINbwaXJqN78NO146ug0tpAR
3HPdleh94y/gEeDNsqfc1/RY8ZbfRceVCIpRiYf0bySiXvlJTYd6X8i2AsTdvnHp
q0nzKOVI4eCMrXs2YQJqM4TY9aNW07Nsq6GRdg28SiX+WvcnEJ0M6IOD/5yPAeE5
VKNF4qD8w4/6DBCxdvL1wB3Y0uVKnhjVfFpjuwmawtZou21DFyflNYCY0Fznbkp3
osgKn0aHzfADd9kkTt+WC+dWMHuVktijLeMV31iEVdb+AJE1VEQIOszXRT/EEI8j
844o26Q6zDEbPQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:01 2025 by rpki-client