Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
File: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft (raw, json)
Hash identifier: P5P9oYTIzR5PGUE8yUSuf8UM5wWUWX9DA9nxfDglXrc=
Subject key identifier: 73:E3:11:AE:4B:36:58:D9:2F:1A:29:B1:33:0F:B6:49:2B:AE:C5:EF
Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Certificate issuer: /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Certificate serial: 0198D5BBD6F01395833950F9E5D1ECAB77D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:53 +0000
Manifest this update: Sat 23 Aug 2025 07:01:53 +0000
Manifest next update: Sun 24 Aug 2025 07:01:53 +0000
Files and hashes: 1: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl (hash: xVGDKO57sDXryb3cjC5oRQZxnquL/lvPeP1n463c+dE=)
2: H9LigG1-eoyksArBLiDVRw0BhjU.roa (hash: oha3QLmkXpQFYs1KCF6A8sqvDCo/E/9M5bF7ey6N14M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d6:f0:13:95:83:39:50:f9:e5:d1:ec:ab:77:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Validity
Not Before: Aug 23 07:01:53 2025 GMT
Not After : Aug 24 07:01:53 2025 GMT
Subject: CN=73e311ae4b3658d92f1a29b1330fb6492baec5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:11:15:7e:30:3d:b6:9b:a8:09:ae:e8:b3:a0:
6a:ab:ac:eb:7d:5c:13:b6:94:72:ea:11:45:0a:bf:
81:cf:d2:3f:b8:46:d3:63:b0:c2:cb:bf:58:1d:5a:
b7:3d:ec:f3:e4:5c:c8:39:7c:cd:2a:96:ba:90:e3:
ee:c8:74:3f:59:ce:3c:5e:92:7c:fa:cf:8a:f2:94:
b2:21:64:b4:06:69:07:0b:15:7e:82:01:92:2a:95:
fe:5d:cc:85:2f:c2:39:40:b2:31:91:8c:60:9f:75:
e4:df:ca:d1:3b:06:a9:0f:54:f8:9a:c3:1a:3a:f8:
93:5f:0e:11:29:99:35:27:cf:43:43:4d:af:d9:bf:
52:c4:ae:ac:d4:0d:a8:6f:b7:02:ba:c9:96:a8:f2:
de:a4:14:b3:d1:df:5a:44:40:43:6b:36:2a:79:cf:
5c:7a:d8:5e:94:30:d1:bb:c3:9e:9f:66:aa:f2:36:
37:02:47:9d:60:1f:2d:ba:bc:12:8a:e3:b2:1b:b2:
42:46:b1:0b:1e:16:19:ee:0f:d3:8e:34:bd:0b:1e:
86:8e:83:73:42:db:b8:d4:33:e9:c7:8d:7b:65:fd:
51:7e:13:81:b1:b9:30:cc:54:e1:03:bd:dc:52:18:
8e:4b:c4:ba:5c:30:12:87:90:71:6f:64:66:18:35:
14:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E3:11:AE:4B:36:58:D9:2F:1A:29:B1:33:0F:B6:49:2B:AE:C5:EF
X509v3 Authority Key Identifier:
keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:9d:4e:b9:8b:31:90:92:2d:87:fb:5c:df:33:97:a0:f4:00:
33:54:ea:f7:eb:42:31:fa:63:2b:3b:79:19:c5:f3:07:0b:d0:
ac:93:4a:ee:4a:42:ed:d3:0c:06:6a:3a:4c:6b:14:b1:b3:ed:
0d:63:f6:77:71:fc:01:d2:70:0b:be:7e:96:e9:62:dd:65:7f:
29:fe:9a:a8:83:62:2f:77:2c:8a:3b:76:df:d9:6f:be:f3:85:
32:52:1f:41:c4:a9:80:6a:40:5a:35:05:f2:b8:00:a9:99:96:
00:4e:6f:0b:19:59:bc:9d:c6:63:52:82:25:98:8a:50:ec:d1:
2d:23:b1:10:60:41:a0:d9:3e:48:9c:50:93:ce:8e:aa:9b:f2:
77:c8:63:ef:15:96:36:1c:ec:95:ae:82:83:00:76:83:66:ae:
17:b2:d0:fe:f8:0c:42:3c:f8:1a:59:a9:6a:e6:3d:ad:45:53:
7e:47:d6:68:f9:5a:c4:97:b6:de:ab:26:66:b9:f4:93:05:96:
f2:e6:be:f6:ba:8b:a7:a1:9c:77:b0:77:27:4e:86:27:e4:51:
c9:60:23:98:0b:d6:82:3c:14:cb:a4:65:3f:1a:d9:01:2f:a6:
a5:e1:eb:fb:f9:07:d5:5f:71:12:d5:02:e2:8e:bc:b1:7d:26:
fc:71:63:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu9bwE5WDOVD55dHsq3fSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZTVjNGM5OWQ2MTMxMDQ5OTgyYWY5YWQ5Yjg2NjAyYjI5
MjliYjgwHhcNMjUwODIzMDcwMTUzWhcNMjUwODI0MDcwMTUzWjAzMTEwLwYDVQQD
Eyg3M2UzMTFhZTRiMzY1OGQ5MmYxYTI5YjEzMzBmYjY0OTJiYWVjNWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBEVfjA9tpuoCa7os6Bqq6zrfVwT
tpRy6hFFCr+Bz9I/uEbTY7DCy79YHVq3Pezz5FzIOXzNKpa6kOPuyHQ/Wc48XpJ8
+s+K8pSyIWS0BmkHCxV+ggGSKpX+XcyFL8I5QLIxkYxgn3Xk38rROwapD1T4msMa
OviTXw4RKZk1J89DQ02v2b9SxK6s1A2ob7cCusmWqPLepBSz0d9aREBDazYqec9c
ethelDDRu8Oen2aq8jY3AkedYB8turwSiuOyG7JCRrELHhYZ7g/TjjS9Cx6GjoNz
Qtu41DPpx417Zf1RfhOBsbkwzFThA73cUhiOS8S6XDASh5Bxb2RmGDUUPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPjEa5LNljZLxopsTMPtkkrrsXvMB8GA1UdIwQY
MBaAFOflxMmdYTEEmYKvmtm4ZgKykpu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNS1YRXlaMWhNUVNaZ3EtYTJiaG1BcktTbTdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lNzA5ZGUtNmIyZC00YmU0LTg1MDMt
YTFlNDg3N2NlZTQ4LzEvNS1YRXlaMWhNUVNaZ3EtYTJiaG1BcktTbTdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9lNzA5ZGUtNmIyZC00YmU0LTg1MDMtYTFlNDg3N2NlZTQ4
LzEvNS1YRXlaMWhNUVNaZ3EtYTJiaG1BcktTbTdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVp1OuYsx
kJIth/tc3zOXoPQAM1Tq9+tCMfpjKzt5GcXzBwvQrJNK7kpC7dMMBmo6TGsUsbPt
DWP2d3H8AdJwC75+luli3WV/Kf6aqINiL3csijt239lvvvOFMlIfQcSpgGpAWjUF
8rgAqZmWAE5vCxlZvJ3GY1KCJZiKUOzRLSOxEGBBoNk+SJxQk86Oqpvyd8hj7xWW
Nhzsla6CgwB2g2auF7LQ/vgMQjz4GlmpauY9rUVTfkfWaPlaxJe23qsmZrn0kwWW
8ua+9rqLp6Gcd7B3J06GJ+RRyWAjmAvWgjwUy6RlPxrZAS+mpeHr+/kH1V9xEtUC
4o68sX0m/HFjSQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:16 2025 by rpki-client