Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
File: 5wn3YuCC6tPW1-TK4p77tNEvV14.mft (raw, json)
Hash identifier: 3UjstP6kS7OUvFWVvtf0/r05U3/qcfoKeD3smxRyrFI=
Subject key identifier: BF:D5:0E:21:66:C3:CB:D8:CF:0A:BD:AE:FA:DC:4C:1B:B5:76:13:F9
Authority key identifier: E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
Certificate issuer: /CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Certificate serial: 0198D4A7E58BEB118793D5D2F3D98CB84794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
Manifest number: 0CA0
Signing time: Sat 23 Aug 2025 02:00:29 +0000
Manifest this update: Sat 23 Aug 2025 02:00:29 +0000
Manifest next update: Sun 24 Aug 2025 02:00:29 +0000
Files and hashes: 1: 0I90jYLDsjsh8A1WdLN05NbEjj4.roa (hash: Kf+mfo5G5myFzzGKcZGygmTNr3GGZjTxsLuEcsJyKBc=)
2: 5wn3YuCC6tPW1-TK4p77tNEvV14.crl (hash: l8q891GboOAyEuOYGN24RmTWACCylvaQSwzB+FShlbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:e5:8b:eb:11:87:93:d5:d2:f3:d9:8c:b8:47:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Validity
Not Before: Aug 23 02:00:29 2025 GMT
Not After : Aug 24 02:00:29 2025 GMT
Subject: CN=bfd50e2166c3cbd8cf0abdaefadc4c1bb57613f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:8d:93:59:4b:cb:9d:c5:3a:81:bb:13:5f:
59:5b:f1:a6:e5:0d:0b:77:a8:7b:1f:23:28:8c:0d:
48:4f:f1:c1:62:50:cd:fd:19:33:de:d4:eb:7f:79:
15:36:73:61:a8:2b:54:3d:10:9b:45:d3:e3:a9:1a:
dd:57:c7:f6:e2:e1:3e:c9:e9:21:30:68:13:14:af:
3c:29:57:f1:3d:59:94:56:c4:46:5a:0f:29:cc:e0:
a6:8d:9a:b3:ca:78:12:b3:4f:b2:c1:ab:65:79:21:
1e:fb:12:2d:38:82:13:6f:b4:f2:9b:84:85:b6:4b:
f9:9d:64:d0:67:4c:b0:ea:b5:7e:c2:91:8e:ae:70:
9e:09:b3:cc:c2:94:ea:70:fe:bd:94:3a:3e:e8:dd:
a5:6b:21:c4:06:76:56:24:9e:fb:e3:b6:2c:b5:ec:
aa:35:44:70:f1:f6:91:4c:87:a6:c9:62:0c:1a:b4:
e8:de:aa:00:df:e0:2e:5a:81:c8:ba:57:5e:a6:ad:
c0:0a:2d:bb:86:86:5b:a7:b3:e0:e9:fb:42:a3:fd:
0c:db:57:e2:d4:0a:31:3d:87:41:df:a8:71:91:c6:
ec:e2:9c:41:f6:81:eb:a9:94:37:9d:77:f6:e4:47:
16:06:3d:e1:7e:eb:18:65:ad:85:67:55:0c:c7:82:
6d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D5:0E:21:66:C3:CB:D8:CF:0A:BD:AE:FA:DC:4C:1B:B5:76:13:F9
X509v3 Authority Key Identifier:
keyid:E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a0:13:79:67:34:bd:02:06:e0:fd:71:c7:70:eb:5b:82:55:
dd:7e:25:29:ac:76:94:95:87:c3:4c:5c:e6:54:c1:e2:31:85:
ef:ef:84:37:aa:67:d5:d4:07:31:28:87:e1:98:1a:2b:3f:6e:
3c:f2:f9:d2:02:86:61:b8:06:dc:92:2a:3e:23:38:6c:10:9f:
bb:f8:38:20:57:48:66:99:15:13:18:06:89:a0:6b:a4:5e:f3:
b6:54:e3:08:c7:55:bd:f4:4f:bc:15:bf:35:d5:fb:cb:ea:43:
71:9d:06:2b:86:e9:47:eb:f1:15:63:3b:22:6a:4d:96:3c:5e:
ec:5c:9f:b8:38:5d:ae:12:4b:60:37:f0:a6:9f:43:7e:7a:f3:
82:40:15:66:27:17:04:b5:97:34:50:03:ed:43:54:2f:49:94:
e1:a1:27:65:a3:71:3a:7f:ad:9d:6f:2c:a8:07:60:36:d2:bd:
ae:a9:d5:65:44:05:d9:1b:44:6f:72:54:5c:cc:0c:15:cf:c6:
17:28:21:55:e0:8a:fb:7f:ec:da:7b:f4:1e:5a:ec:47:76:fa:
93:61:b2:a4:7a:ae:79:01:2a:12:35:e1:c7:f3:26:22:88:41:
44:ed:15:0a:01:2c:3f:f6:0e:b4:8b:ab:b4:51:4e:32:d6:5f:
80:7d:bc:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp+WL6xGHk9XS89mMuEeUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MDlmNzYyZTA4MmVhZDNkNmQ3ZTRjYWUyOWVmYmI0ZDEy
ZjU3NWUwHhcNMjUwODIzMDIwMDI5WhcNMjUwODI0MDIwMDI5WjAzMTEwLwYDVQQD
EyhiZmQ1MGUyMTY2YzNjYmQ4Y2YwYWJkYWVmYWRjNGMxYmI1NzYxM2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cqNk1lLy53FOoG7E19ZW/Gm5Q0L
d6h7HyMojA1IT/HBYlDN/Rkz3tTrf3kVNnNhqCtUPRCbRdPjqRrdV8f24uE+yekh
MGgTFK88KVfxPVmUVsRGWg8pzOCmjZqzyngSs0+ywatleSEe+xItOIITb7Tym4SF
tkv5nWTQZ0yw6rV+wpGOrnCeCbPMwpTqcP69lDo+6N2layHEBnZWJJ7747Ysteyq
NURw8faRTIemyWIMGrTo3qoA3+AuWoHIuldepq3ACi27hoZbp7Pg6ftCo/0M21fi
1AoxPYdB36hxkcbs4pxB9oHrqZQ3nXf25EcWBj3hfusYZa2FZ1UMx4JtCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/VDiFmw8vYzwq9rvrcTBu1dhP5MB8GA1UdIwQY
MBaAFOcJ92LggurT1tfkyuKe+7TRL1deMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjIt
YWU0ZmE3ZjE3ZjljLzEvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjItYWU0ZmE3ZjE3Zjlj
LzEvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmaATeWc0
vQIG4P1xx3DrW4JV3X4lKax2lJWHw0xc5lTB4jGF7++EN6pn1dQHMSiH4ZgaKz9u
PPL50gKGYbgG3JIqPiM4bBCfu/g4IFdIZpkVExgGiaBrpF7ztlTjCMdVvfRPvBW/
NdX7y+pDcZ0GK4bpR+vxFWM7ImpNljxe7FyfuDhdrhJLYDfwpp9DfnrzgkAVZicX
BLWXNFAD7UNUL0mU4aEnZaNxOn+tnW8sqAdgNtK9rqnVZUQF2RtEb3JUXMwMFc/G
FyghVeCK+3/s2nv0HlrsR3b6k2GypHqueQEqEjXhx/MmIohBRO0VCgEsP/YOtIur
tFFOMtZfgH28CQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:04:28 2025 by rpki-client