Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File: 5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier: LZCodKQ9XNYm/zpH2B2OBwo8LangqFkZuTaq0ttmo4o=
Subject key identifier: 4A:6B:9A:63:91:90:FD:2A:12:AD:00:70:01:88:47:54:5F:4D:00:6D
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer: /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial: 0198D4E065C6080EDD5B26BDE78564C32AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number: 0CD6
Signing time: Sat 23 Aug 2025 03:02:12 +0000
Manifest this update: Sat 23 Aug 2025 03:02:12 +0000
Manifest next update: Sun 24 Aug 2025 03:02:12 +0000
Files and hashes: 1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: YCHL3C/mUPFTQOwhphg7M4rwb/tKxpEO+wTeAoIR/yc=)
2: PPydfwM1qrJ_5LEP2Lu7pEc74lg.roa (hash: pMnth1QdrHrp1n0i0bRqhdBwVaon4su5sBWJ9WYdSts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:65:c6:08:0e:dd:5b:26:bd:e7:85:64:c3:2a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
Validity
Not Before: Aug 23 03:02:12 2025 GMT
Not After : Aug 24 03:02:12 2025 GMT
Subject: CN=4a6b9a639190fd2a12ad0070018847545f4d006d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:1c:58:df:87:be:dd:bb:d2:40:94:42:b8:
b1:d3:ef:91:3a:0f:5a:51:c9:d8:6e:85:0a:f4:55:
32:c1:8a:e7:f5:92:c5:19:75:7b:9b:26:0c:33:b0:
7f:b2:24:4d:90:2e:df:c2:15:f8:d9:a2:d9:0c:54:
c6:d5:7b:f9:ae:6c:db:cf:91:ac:b6:33:cc:b7:5b:
c3:41:1f:a5:24:5f:4d:44:72:01:78:c6:28:f2:a8:
6a:2c:a7:5f:c4:5f:27:ba:5c:32:89:00:06:fe:87:
87:86:9e:2f:a4:f5:eb:5d:01:db:01:d2:bc:fd:6f:
bc:86:24:21:55:58:7d:ec:d6:08:ac:5c:8e:b1:b4:
90:6c:52:0b:be:05:a4:6a:54:21:16:e7:ae:d8:26:
c0:c3:ee:b1:8e:26:b6:10:f2:c1:df:fb:1b:af:d8:
4c:2f:4d:8c:65:54:d1:86:5a:c3:19:44:77:68:c9:
da:0c:83:fb:de:2b:e6:70:91:cd:06:37:ea:39:65:
bc:61:db:19:7f:55:50:a2:ee:52:21:9e:c4:85:09:
90:3c:18:7b:35:6f:40:b0:6e:31:30:fd:e2:c3:12:
53:cb:ac:f5:f8:f0:46:02:bf:b4:62:23:dc:8d:2d:
bb:16:95:99:7e:f1:f3:f7:46:9d:1d:77:a3:18:fe:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6B:9A:63:91:90:FD:2A:12:AD:00:70:01:88:47:54:5F:4D:00:6D
X509v3 Authority Key Identifier:
keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fd:aa:7c:7a:87:ea:07:5b:cd:7e:3d:22:47:bc:17:30:3a:
8c:8b:ec:d3:46:e2:58:28:be:94:68:37:f4:39:46:f0:55:47:
b6:b5:c4:9f:32:26:36:4a:4c:33:03:96:1a:fe:48:5d:cf:d9:
93:d3:98:80:a2:91:2d:72:0c:8c:83:02:ea:f3:1c:5c:94:15:
aa:87:87:7e:ca:85:e6:74:60:32:98:f8:61:64:09:42:69:68:
f9:3b:a6:dd:5d:1f:15:41:fc:b9:90:e1:06:7a:ec:5e:d5:42:
5c:4e:99:ad:42:d6:eb:9b:af:e1:9d:ee:76:db:a6:6a:c5:27:
a0:19:3f:f8:c6:65:f6:f8:19:8a:30:a8:9c:c9:51:df:dd:ff:
79:71:5b:e0:5e:cb:64:11:f6:fd:90:0a:df:5e:a2:92:25:69:
3f:48:a3:6b:69:b9:27:1c:c0:33:a8:75:5e:14:71:6e:9e:96:
e6:aa:cb:88:75:84:b5:f5:01:0c:d6:f0:14:54:f8:6e:7b:a6:
00:17:4d:6e:9f:7a:89:0c:8e:89:1d:9c:63:ca:02:05:0b:bc:
6b:ef:f0:05:1d:55:e2:cb:02:30:2a:4d:7d:3d:13:4d:f0:bb:
ad:77:b3:41:88:bf:16:6d:8a:4a:30:82:3b:a5:22:fe:ef:db:
eb:a2:ef:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4GXGCA7dWya954VkwyrFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NTAyMjAwYTZlNjNmNzYzOTdhZGI5NGRmZDgzNGMxMTY4
MDliOWYwHhcNMjUwODIzMDMwMjEyWhcNMjUwODI0MDMwMjEyWjAzMTEwLwYDVQQD
Eyg0YTZiOWE2MzkxOTBmZDJhMTJhZDAwNzAwMTg4NDc1NDVmNGQwMDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7McWN+Hvt270kCUQrix0++ROg9a
UcnYboUK9FUywYrn9ZLFGXV7myYMM7B/siRNkC7fwhX42aLZDFTG1Xv5rmzbz5Gs
tjPMt1vDQR+lJF9NRHIBeMYo8qhqLKdfxF8nulwyiQAG/oeHhp4vpPXrXQHbAdK8
/W+8hiQhVVh97NYIrFyOsbSQbFILvgWkalQhFueu2CbAw+6xjia2EPLB3/sbr9hM
L02MZVTRhlrDGUR3aMnaDIP73ivmcJHNBjfqOWW8YdsZf1VQou5SIZ7EhQmQPBh7
NW9AsG4xMP3iwxJTy6z1+PBGAr+0YiPcjS27FpWZfvHz90adHXejGP4kRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEprmmORkP0qEq0AcAGIR1RfTQBtMB8GA1UdIwQY
MBaAFOZQIgCm5j92OXrblN/YNMEWgJufMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWxBaUFLYm1QM1k1ZXR1VTM5ZzB3UmFBbTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy85ZmY2MDItYjBiZC00YzNmLWFmOTQt
MmZjMzRhZDlkZDQ3LzEvNWxBaUFLYm1QM1k1ZXR1VTM5ZzB3UmFBbTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy85ZmY2MDItYjBiZC00YzNmLWFmOTQtMmZjMzRhZDlkZDQ3
LzEvNWxBaUFLYm1QM1k1ZXR1VTM5ZzB3UmFBbTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfv2qfHqH
6gdbzX49Ike8FzA6jIvs00biWCi+lGg39DlG8FVHtrXEnzImNkpMMwOWGv5IXc/Z
k9OYgKKRLXIMjIMC6vMcXJQVqoeHfsqF5nRgMpj4YWQJQmlo+Tum3V0fFUH8uZDh
BnrsXtVCXE6ZrULW65uv4Z3udtumasUnoBk/+MZl9vgZijConMlR393/eXFb4F7L
ZBH2/ZAK316ikiVpP0ija2m5JxzAM6h1XhRxbp6W5qrLiHWEtfUBDNbwFFT4bnum
ABdNbp96iQyOiR2cY8oCBQu8a+/wBR1V4ssCMCpNfT0TTfC7rXezQYi/Fm2KSjCC
O6Ui/u/b66LvzA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:48 2025 by rpki-client