Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
File: 5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json)
Hash identifier: qIc0k5rg6zMa6xILiO/1ETPmuDYtVWSKs0JCdNk/NEU=
Subject key identifier: 31:58:20:8B:09:3F:95:D0:A5:26:FD:48:94:15:70:65:88:23:18:F1
Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
Certificate issuer: /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Certificate serial: 0198D6980666FDDCD057897656123384DDB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 11:02:23 +0000
Manifest this update: Sat 23 Aug 2025 11:02:23 +0000
Manifest next update: Sun 24 Aug 2025 11:02:23 +0000
Files and hashes: 1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: AOdCxdbG7xfosd2N1gsvdxyJgdTG3a268pIqL9AsN3o=)
2: QdF1_Zq92wXCrTWLXFHsTX1fLOE.roa (hash: 3ntgOindNlTLmT1RU6YRq18wFcBPHz2TO/Rc5iQY6kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:06:66:fd:dc:d0:57:89:76:56:12:33:84:dd:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Validity
Not Before: Aug 23 11:02:23 2025 GMT
Not After : Aug 24 11:02:23 2025 GMT
Subject: CN=3158208b093f95d0a526fd4894157065882318f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:a4:df:05:c1:fa:83:3c:e3:86:3e:d1:f6:
42:a2:24:37:40:06:06:a5:f0:81:98:bc:88:d6:92:
21:83:ca:82:2a:73:67:4a:0e:29:56:46:ea:64:be:
ca:74:eb:3e:98:45:7f:b9:7f:86:33:85:9f:27:4c:
33:b5:21:72:e1:0a:e6:0c:7b:22:af:6b:69:1a:b3:
5a:c3:71:59:85:54:f6:1c:1a:45:26:c1:2e:a3:9e:
50:17:81:18:35:1a:c0:ca:2b:88:48:5b:b2:2d:5b:
97:a8:60:3f:91:71:8a:e7:5a:c9:c5:00:26:c1:f2:
dc:69:af:a5:dc:a0:d9:fa:a5:4f:18:f0:e4:74:a0:
04:f7:d1:4f:80:28:d9:0c:c1:33:b4:cd:f4:72:62:
81:26:0d:64:47:a7:c7:11:29:a1:77:ad:e6:ab:ce:
ea:5a:f4:61:6d:a2:53:c2:f2:68:e3:d1:d8:61:62:
7a:c6:57:64:3e:4d:ef:bd:7a:f2:ba:f3:6c:77:a9:
d5:e4:e4:93:ad:36:fb:88:94:64:f1:a4:5b:c3:38:
06:72:54:4a:0f:76:3d:9b:d3:3b:1c:41:8d:3b:22:
45:39:91:a1:3c:95:24:1f:e7:55:1a:96:1f:e7:8e:
4c:2f:a3:e6:c5:f9:aa:56:4e:1e:01:59:83:cb:e8:
2d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:58:20:8B:09:3F:95:D0:A5:26:FD:48:94:15:70:65:88:23:18:F1
X509v3 Authority Key Identifier:
keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ab:03:88:18:94:c9:03:f0:21:e1:e1:64:78:7a:46:31:bb:
ab:98:a3:b3:ca:ab:36:50:e1:6a:73:5c:18:4a:5d:81:4d:be:
6c:5b:ce:e5:49:f9:d5:9a:6d:9a:8f:9a:5d:91:e4:72:37:5c:
1d:b2:c3:da:fe:b5:d7:a1:7a:a8:45:d0:11:ce:71:12:13:82:
ae:57:c6:be:95:95:d0:0e:b3:0d:57:18:01:b1:67:9f:4a:ff:
a5:4d:a2:d3:0e:cc:1b:0a:bb:f0:c3:9b:67:93:02:db:11:5e:
c4:49:ef:e1:bc:a6:69:bf:47:cf:c0:7e:ac:fa:bc:ba:39:b5:
c5:81:37:a8:fb:7f:d7:37:1f:ef:1b:99:6f:a7:c5:59:17:d9:
8b:e9:ee:cf:a9:b4:a6:d5:cb:9b:2e:97:83:e4:ba:a3:1c:a9:
8f:db:35:8c:dd:91:89:23:68:c8:f1:e7:1f:2d:1e:b6:6c:c1:
13:35:c6:b1:78:26:8d:ad:dd:17:02:c4:c2:c0:7a:3a:c9:4c:
49:3b:00:7d:d6:e0:09:95:1c:97:f5:7e:42:2f:8a:d4:b7:60:
dd:0a:9c:fc:c7:9b:2c:7e:0c:d8:46:a2:b9:d7:10:f2:78:25:
5e:8f:ef:67:d2:04:5c:72:d3:d6:20:70:59:0e:3b:68:55:4d:
b4:ed:9b:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmAZm/dzQV4l2VhIzhN2zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2OTVjZmIzNmZlNWExZjM4NGNjNzc4YWUyOTlhY2FiODFj
MjdiZmEwHhcNMjUwODIzMTEwMjIzWhcNMjUwODI0MTEwMjIzWjAzMTEwLwYDVQQD
EygzMTU4MjA4YjA5M2Y5NWQwYTUyNmZkNDg5NDE1NzA2NTg4MjMxOGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsryk3wXB+oM844Y+0fZCoiQ3QAYG
pfCBmLyI1pIhg8qCKnNnSg4pVkbqZL7KdOs+mEV/uX+GM4WfJ0wztSFy4QrmDHsi
r2tpGrNaw3FZhVT2HBpFJsEuo55QF4EYNRrAyiuISFuyLVuXqGA/kXGK51rJxQAm
wfLcaa+l3KDZ+qVPGPDkdKAE99FPgCjZDMEztM30cmKBJg1kR6fHESmhd63mq87q
WvRhbaJTwvJo49HYYWJ6xldkPk3vvXryuvNsd6nV5OSTrTb7iJRk8aRbwzgGclRK
D3Y9m9M7HEGNOyJFOZGhPJUkH+dVGpYf545ML6PmxfmqVk4eAVmDy+gteQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFYIIsJP5XQpSb9SJQVcGWIIxjxMB8GA1UdIwQY
MBaAFOaVz7Nv5aHzhMx3iuKZrKuBwnv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80OGE4YmEtZGM2MS00MmJkLTk0M2Et
YzMxZmE3MWUyNjM1LzEvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi80OGE4YmEtZGM2MS00MmJkLTk0M2EtYzMxZmE3MWUyNjM1
LzEvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKsDiBiU
yQPwIeHhZHh6RjG7q5ijs8qrNlDhanNcGEpdgU2+bFvO5Un51Zptmo+aXZHkcjdc
HbLD2v6116F6qEXQEc5xEhOCrlfGvpWV0A6zDVcYAbFnn0r/pU2i0w7MGwq78MOb
Z5MC2xFexEnv4bymab9Hz8B+rPq8ujm1xYE3qPt/1zcf7xuZb6fFWRfZi+nuz6m0
ptXLmy6Xg+S6oxypj9s1jN2RiSNoyPHnHy0etmzBEzXGsXgmja3dFwLEwsB6OslM
STsAfdbgCZUcl/V+Qi+K1Ldg3Qqc/MebLH4M2EaiudcQ8nglXo/vZ9IEXHLT1iBw
WQ47aFVNtO2bDA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:19:08 2025 by rpki-client