Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
File: 5tM83lfaCcfZM3ce6hQllAdvmiM.mft (raw, json)
Hash identifier: CGaroG0UatRg+vnx4mKalmWuLg0yzKQet7bcWscqV2c=
Subject key identifier: A1:8C:FB:0A:E9:7C:6A:33:11:80:6A:73:2E:D6:11:71:26:D5:F3:CD
Authority key identifier: E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
Certificate issuer: /CN=e6d33cde57da09c7d933771eea142594076f9a23
Certificate serial: 0198D5BBA16862B6BAA3BEBA3E4C7C4754A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 07:01:40 +0000
Manifest this update: Sat 23 Aug 2025 07:01:40 +0000
Manifest next update: Sun 24 Aug 2025 07:01:40 +0000
Files and hashes: 1: 5tM83lfaCcfZM3ce6hQllAdvmiM.crl (hash: TEW3YDw+mdkkNiHXM8OpL8b+BAYGLq1AG4ka2RkIjfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a1:68:62:b6:ba:a3:be:ba:3e:4c:7c:47:54:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6d33cde57da09c7d933771eea142594076f9a23
Validity
Not Before: Aug 23 07:01:40 2025 GMT
Not After : Aug 24 07:01:40 2025 GMT
Subject: CN=a18cfb0ae97c6a3311806a732ed6117126d5f3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3f:1a:6d:a5:27:cc:49:2d:66:e1:5a:43:0b:
72:1d:e8:37:c1:db:cd:27:50:8c:34:ec:62:70:2e:
c6:5b:9b:ed:c9:38:7d:84:61:b9:86:0d:02:ef:29:
6c:cc:d1:65:20:a6:95:3d:af:4e:e8:82:cd:aa:e1:
58:df:b3:85:13:1c:15:0d:b5:94:56:0e:20:4b:3f:
1b:63:fe:93:c2:e7:05:e1:57:27:49:e6:b8:60:00:
93:db:c0:03:29:3f:72:2c:f4:f9:c1:1f:66:bd:57:
47:88:d8:a7:21:ce:c3:c4:e3:01:b5:e4:3d:4d:d8:
b1:11:75:14:ae:46:fa:55:82:71:9f:47:fc:a6:4b:
57:70:06:d8:69:5e:36:a4:d7:d4:3c:33:42:ad:a8:
d1:3a:82:07:08:24:28:39:a5:d3:ce:83:37:94:93:
16:c1:55:6a:43:79:8e:bd:02:3d:59:0f:ae:b9:9e:
26:eb:6b:ba:ec:99:73:bf:d5:75:a3:df:a4:24:79:
e0:04:dd:8e:b3:55:03:bb:23:b8:61:63:9c:2b:1a:
57:51:5c:f0:47:be:bd:1a:f0:75:7f:6f:06:91:be:
ac:3d:ff:47:13:ae:26:d8:92:6a:2b:1f:cd:1d:7f:
a5:57:82:ad:52:d8:40:1f:13:00:fe:1b:de:1a:45:
d6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8C:FB:0A:E9:7C:6A:33:11:80:6A:73:2E:D6:11:71:26:D5:F3:CD
X509v3 Authority Key Identifier:
keyid:E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:02:d0:df:48:7d:26:f6:59:f1:d3:40:65:e4:2f:44:01:b5:
57:da:a9:5a:3a:b1:ac:cd:13:b0:93:5c:f2:c5:64:c8:05:b1:
19:f7:f8:3c:93:8c:aa:3c:58:00:c6:23:be:98:41:65:0b:c0:
7f:c5:69:35:1e:44:c8:19:14:d0:17:0e:30:75:7d:a3:f7:74:
e3:df:df:8d:3d:f3:59:46:63:d0:ea:22:11:2f:a5:cd:a6:0a:
f0:9c:78:72:db:bc:02:79:be:b4:bc:68:f4:43:f5:da:08:40:
97:dc:83:73:d3:88:66:44:f1:3d:d3:04:0c:ec:8a:9e:7d:d3:
14:50:12:d2:cf:de:79:5a:1f:57:df:c5:da:8f:1b:74:05:c9:
d1:d0:d9:8c:ed:ef:f3:ee:9c:4a:c5:9f:1a:80:a1:1c:ac:c7:
e6:18:46:43:4f:84:07:93:79:95:ec:3a:37:d5:1d:50:3c:23:
43:29:34:ce:fa:53:13:9c:47:b0:31:c9:96:2a:2e:bd:e0:6c:
20:38:2d:ed:72:c1:ac:e9:30:aa:67:a6:1f:c6:40:06:88:a8:
19:00:48:d1:5f:aa:7d:05:2f:63:97:77:be:22:aa:6a:3d:54:
1b:ed:8b:47:3a:2f:41:3b:b2:49:41:60:2f:48:6e:4b:53:7f:
c8:16:84:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu6FoYra6o766Pkx8R1SmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZDMzY2RlNTdkYTA5YzdkOTMzNzcxZWVhMTQyNTk0MDc2
ZjlhMjMwHhcNMjUwODIzMDcwMTQwWhcNMjUwODI0MDcwMTQwWjAzMTEwLwYDVQQD
EyhhMThjZmIwYWU5N2M2YTMzMTE4MDZhNzMyZWQ2MTE3MTI2ZDVmM2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6z8abaUnzEktZuFaQwtyHeg3wdvN
J1CMNOxicC7GW5vtyTh9hGG5hg0C7ylszNFlIKaVPa9O6ILNquFY37OFExwVDbWU
Vg4gSz8bY/6TwucF4VcnSea4YACT28ADKT9yLPT5wR9mvVdHiNinIc7DxOMBteQ9
TdixEXUUrkb6VYJxn0f8pktXcAbYaV42pNfUPDNCrajROoIHCCQoOaXTzoM3lJMW
wVVqQ3mOvQI9WQ+uuZ4m62u67Jlzv9V1o9+kJHngBN2Os1UDuyO4YWOcKxpXUVzw
R769GvB1f28Gkb6sPf9HE64m2JJqKx/NHX+lV4KtUthAHxMA/hveGkXW5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGM+wrpfGozEYBqcy7WEXEm1fPNMB8GA1UdIwQY
MBaAFObTPN5X2gnH2TN3HuoUJZQHb5ojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXRNODNsZmFDY2ZaTTNjZTZoUWxsQWR2bWlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80ZjlkNGMtMTk0Ni00YWY5LThjMjIt
NDE5NzUzZDNmODhkLzEvNXRNODNsZmFDY2ZaTTNjZTZoUWxsQWR2bWlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80ZjlkNGMtMTk0Ni00YWY5LThjMjItNDE5NzUzZDNmODhk
LzEvNXRNODNsZmFDY2ZaTTNjZTZoUWxsQWR2bWlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQLQ30h9
JvZZ8dNAZeQvRAG1V9qpWjqxrM0TsJNc8sVkyAWxGff4PJOMqjxYAMYjvphBZQvA
f8VpNR5EyBkU0BcOMHV9o/d049/fjT3zWUZj0OoiES+lzaYK8Jx4ctu8Anm+tLxo
9EP12ghAl9yDc9OIZkTxPdMEDOyKnn3TFFAS0s/eeVofV9/F2o8bdAXJ0dDZjO3v
8+6cSsWfGoChHKzH5hhGQ0+EB5N5lew6N9UdUDwjQyk0zvpTE5xHsDHJliouveBs
IDgt7XLBrOkwqmemH8ZABoioGQBI0V+qfQUvY5d3viKqaj1UG+2LRzovQTuySUFg
L0huS1N/yBaEiQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:04 2025 by rpki-client