Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
File: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft (raw, json)
Hash identifier: PbSArCqnSG9hXIIhfAxKo3zKASUB94/4wuRn+lDMltw=
Subject key identifier: 59:2D:C9:84:01:78:0D:13:38:77:22:F9:B0:BA:4A:31:45:03:E0:2B
Authority key identifier: FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
Certificate issuer: /CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Certificate serial: 0198D4E0D8F73655539616AB9D5F950C4D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 03:02:42 +0000
Manifest this update: Sat 23 Aug 2025 03:02:42 +0000
Manifest next update: Sun 24 Aug 2025 03:02:42 +0000
Files and hashes: 1: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl (hash: jIZhqDrg22J5XWoOHe1EpB3HAffxaQndSyn0s30yskY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:d8:f7:36:55:53:96:16:ab:9d:5f:95:0c:4d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Validity
Not Before: Aug 23 03:02:42 2025 GMT
Not After : Aug 24 03:02:42 2025 GMT
Subject: CN=592dc98401780d13387722f9b0ba4a314503e02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5d:73:32:5d:96:18:c2:6a:29:1f:9e:93:11:
5e:29:c3:13:5d:9d:d8:20:e2:62:eb:39:46:4d:4e:
6f:32:f0:74:b3:88:61:ba:a4:bb:7b:6b:6a:a6:b8:
9e:69:b1:74:04:07:93:32:bd:5f:34:a3:6f:1b:3e:
ee:0f:c0:48:e7:f2:0c:4f:b5:e8:f9:29:5f:82:67:
05:0f:06:85:44:c3:eb:92:d0:40:5b:20:9d:61:fb:
b1:f8:c6:36:2e:02:7e:84:92:0b:5c:ab:28:a9:49:
16:52:8d:d2:32:8d:58:68:99:a0:d1:ef:30:5a:49:
3e:9e:05:25:8e:ad:00:0b:bc:da:f9:1b:1f:26:2c:
b7:65:5d:7d:07:69:14:a4:02:05:d9:b2:18:c5:ae:
c0:3d:67:29:9d:30:b9:10:54:2c:be:10:eb:42:c9:
a5:f9:35:cb:a3:fc:10:78:e5:18:99:e2:d5:af:01:
a9:de:5e:b6:59:b3:9d:96:79:2f:68:c4:aa:f4:4b:
df:b6:68:80:f1:7f:a7:e0:44:06:ac:79:52:cf:80:
32:4d:f4:30:3a:bd:99:9a:be:81:ee:f4:d2:84:83:
c1:9c:ff:ce:49:6e:fd:35:11:9b:48:8e:3b:93:15:
f0:4c:b9:5d:6d:5c:49:28:86:74:c2:b7:e1:66:8b:
99:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2D:C9:84:01:78:0D:13:38:77:22:F9:B0:BA:4A:31:45:03:E0:2B
X509v3 Authority Key Identifier:
keyid:FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:8d:86:4b:62:97:b3:c8:91:e2:de:05:62:4e:6c:59:49:f8:
51:24:55:aa:36:1e:0e:26:8d:c3:93:0a:e8:46:41:0a:2a:c8:
0d:6d:1a:ed:cc:6c:10:23:68:c9:7d:61:ca:06:eb:8f:d1:84:
8a:ce:cf:e3:65:56:2b:5e:92:93:3f:3e:c0:6c:2d:ef:e6:46:
13:d5:d3:dc:7e:c3:60:61:fa:d8:aa:ca:9e:99:0b:09:2b:a3:
a2:6b:a3:be:1e:32:1c:f2:51:ea:8e:bf:a7:f5:56:20:c4:d2:
bb:18:78:23:31:f5:b3:c0:42:3e:6e:a0:94:cc:7d:3c:ea:12:
3b:4f:8a:b3:b6:ae:16:24:e9:82:25:ed:20:3f:31:36:c1:34:
2e:b8:05:b6:41:4b:42:f7:99:c6:7f:34:6d:6d:40:42:71:06:
db:7a:d9:e0:59:c6:37:49:dd:31:27:9e:37:42:26:fc:e6:b5:
0e:22:10:e5:28:ea:d1:d2:fb:68:c4:7a:43:c1:8e:dc:68:38:
76:91:84:22:cd:73:c8:3f:19:3d:50:f2:7c:1f:a1:e0:27:b9:
de:cf:f3:98:d7:e4:97:e8:62:bb:59:70:4d:c8:c6:d0:67:c4:
b4:b7:e8:e8:a5:97:d1:09:63:95:ad:e4:c4:fe:f7:49:f7:d2:
7b:1a:86:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4Nj3NlVTlharnV+VDE0TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmOTdmMWVjYTRjOGM0ZjAwYzI2NTUzMjU3ZGNkMjJiZTYw
OTMyZTQwHhcNMjUwODIzMDMwMjQyWhcNMjUwODI0MDMwMjQyWjAzMTEwLwYDVQQD
Eyg1OTJkYzk4NDAxNzgwZDEzMzg3NzIyZjliMGJhNGEzMTQ1MDNlMDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl1zMl2WGMJqKR+ekxFeKcMTXZ3Y
IOJi6zlGTU5vMvB0s4hhuqS7e2tqprieabF0BAeTMr1fNKNvGz7uD8BI5/IMT7Xo
+SlfgmcFDwaFRMPrktBAWyCdYfux+MY2LgJ+hJILXKsoqUkWUo3SMo1YaJmg0e8w
Wkk+ngUljq0AC7za+RsfJiy3ZV19B2kUpAIF2bIYxa7APWcpnTC5EFQsvhDrQsml
+TXLo/wQeOUYmeLVrwGp3l62WbOdlnkvaMSq9EvftmiA8X+n4EQGrHlSz4AyTfQw
Or2Zmr6B7vTShIPBnP/OSW79NRGbSI47kxXwTLldbVxJKIZ0wrfhZouZeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFktyYQBeA0TOHci+bC6SjFFA+ArMB8GA1UdIwQY
MBaAFP+X8eykyMTwDCZVMlfc0ivmCTLkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzVmeDdLVEl4UEFNSmxVeVY5elNLLVlKTXVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lNTgzODYtYmNmOC00ODI2LTk1ZWMt
ZjljNzVhZDNhZWQzLzEvXzVmeDdLVEl4UEFNSmxVeVY5elNLLVlKTXVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9lNTgzODYtYmNmOC00ODI2LTk1ZWMtZjljNzVhZDNhZWQz
LzEvXzVmeDdLVEl4UEFNSmxVeVY5elNLLVlKTXVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl42GS2KX
s8iR4t4FYk5sWUn4USRVqjYeDiaNw5MK6EZBCirIDW0a7cxsECNoyX1hygbrj9GE
is7P42VWK16Skz8+wGwt7+ZGE9XT3H7DYGH62KrKnpkLCSujomujvh4yHPJR6o6/
p/VWIMTSuxh4IzH1s8BCPm6glMx9POoSO0+Ks7auFiTpgiXtID8xNsE0LrgFtkFL
QveZxn80bW1AQnEG23rZ4FnGN0ndMSeeN0Im/Oa1DiIQ5Sjq0dL7aMR6Q8GO3Gg4
dpGEIs1zyD8ZPVDyfB+h4Ce53s/zmNfkl+hiu1lwTcjG0GfEtLfo6KWX0Qljla3k
xP73SffSexqGKg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:36 2025 by rpki-client