Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
File: A5D0YbjFGyArIQDfLMQzD2kiGME.mft (raw, json)
Hash identifier: Mi7YorNWiRQn0RuzMksKeM+xMrZ1lx96PPzq0IJ14Jo=
Subject key identifier: AB:ED:05:F0:FB:B7:BE:9D:1D:8E:BF:FE:DB:99:AE:4B:30:CD:27:7D
Authority key identifier: 03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
Certificate issuer: /CN=0390f461b8c51b202b2100df2cc4330f692218c1
Certificate serial: 0198D7A8B3FF31FBE8E85508EB82F9B36AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
Manifest number: 15D8
Signing time: Sat 23 Aug 2025 16:00:14 +0000
Manifest this update: Sat 23 Aug 2025 16:00:14 +0000
Manifest next update: Sun 24 Aug 2025 16:00:14 +0000
Files and hashes: 1: A5D0YbjFGyArIQDfLMQzD2kiGME.crl (hash: oYGLmBY4R/5BuNCULL0TDtAzBv9AEoqZwoGP4AWzgq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:b3:ff:31:fb:e8:e8:55:08:eb:82:f9:b3:6a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0390f461b8c51b202b2100df2cc4330f692218c1
Validity
Not Before: Aug 23 16:00:14 2025 GMT
Not After : Aug 24 16:00:14 2025 GMT
Subject: CN=abed05f0fbb7be9d1d8ebffedb99ae4b30cd277d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:29:b2:a7:ae:24:ef:d7:72:b5:a3:4f:29:
e8:66:87:29:58:50:83:5b:b2:1d:b2:ee:f8:2d:ab:
d1:f5:d6:30:c8:fe:d0:10:d1:3b:e8:00:95:a4:c5:
26:6e:48:66:0b:e7:6f:7e:92:33:e8:e5:9d:9a:a5:
43:17:d4:4e:e7:c1:56:17:96:f8:80:38:02:42:0d:
bf:c0:bd:7b:f3:00:52:c2:cb:1d:25:5d:2a:03:56:
f9:42:2c:50:21:04:31:00:f9:a9:54:91:5c:ef:89:
5a:12:b0:dc:cb:42:2b:15:b0:9e:88:81:f4:1b:8c:
5a:ac:53:95:bb:72:ca:f7:0d:7a:da:30:b5:f3:c5:
0e:5d:1b:ff:fa:27:f6:f8:b7:d4:a6:02:7f:5f:77:
4c:cb:fe:11:d2:61:ad:01:24:c8:13:99:96:7a:62:
2d:eb:88:d1:60:2b:57:2a:a7:bd:d5:3f:61:bf:62:
a5:6e:a4:e2:ec:9d:4a:66:24:3b:67:44:30:ac:1e:
cb:41:44:95:4b:d4:15:0a:0b:33:76:1e:25:ec:b6:
32:a2:99:23:59:d1:44:3a:96:d3:eb:7f:7e:57:b4:
2d:79:02:3e:df:1b:2f:69:6a:54:30:da:9d:fc:21:
cc:1c:fb:5f:98:f7:33:78:d4:70:16:26:f6:33:ce:
aa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:ED:05:F0:FB:B7:BE:9D:1D:8E:BF:FE:DB:99:AE:4B:30:CD:27:7D
X509v3 Authority Key Identifier:
keyid:03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4d:33:8e:e1:3b:69:95:f9:8e:f9:14:b7:cf:da:24:aa:dd:
36:ea:12:5f:5a:fa:dd:0e:8e:a9:a5:8b:7f:e9:70:89:11:2d:
fb:1e:b5:5c:fc:54:08:bb:ee:c2:b9:8e:bf:bd:18:f1:39:8f:
7b:ba:ad:f2:03:bf:8d:c6:60:9f:6a:6f:36:e0:68:8b:6e:0d:
87:64:84:60:02:0f:47:6a:5b:0d:b1:78:5e:6b:3b:a4:df:12:
54:b5:7a:f7:d9:e9:5b:6b:da:36:f9:37:5e:1a:eb:f9:48:40:
64:6e:aa:3d:c6:be:28:d3:39:38:a2:b4:08:44:06:ad:0e:42:
39:26:ea:00:90:24:80:9b:b7:6b:0a:03:aa:36:6f:ff:4c:b0:
2b:1b:8f:a0:bb:c9:09:06:2f:10:f2:4a:d4:cb:e2:67:fb:dd:
df:12:3e:0f:6f:82:2d:5b:38:a6:53:4b:a4:53:6e:9f:94:4b:
bd:33:a0:e2:01:dc:ed:91:ef:2f:54:1c:a7:9a:9c:cb:c8:eb:
da:34:e7:1f:a6:12:3a:83:ad:6c:c9:fb:91:c0:2c:d2:4f:3b:
c7:86:fa:10:ca:77:c2:11:7b:bf:dd:a9:fb:90:e4:0e:e1:ae:
8f:d1:2d:4c:ba:ab:d0:c0:4e:ff:c6:ec:35:b3:5d:c1:96:ab:
0c:95:23:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqLP/Mfvo6FUI64L5s2q1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOTBmNDYxYjhjNTFiMjAyYjIxMDBkZjJjYzQzMzBmNjky
MjE4YzEwHhcNMjUwODIzMTYwMDE0WhcNMjUwODI0MTYwMDE0WjAzMTEwLwYDVQQD
EyhhYmVkMDVmMGZiYjdiZTlkMWQ4ZWJmZmVkYjk5YWU0YjMwY2QyNzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM8psqeuJO/XcrWjTynoZocpWFCD
W7Idsu74LavR9dYwyP7QENE76ACVpMUmbkhmC+dvfpIz6OWdmqVDF9RO58FWF5b4
gDgCQg2/wL178wBSwssdJV0qA1b5QixQIQQxAPmpVJFc74laErDcy0IrFbCeiIH0
G4xarFOVu3LK9w162jC188UOXRv/+if2+LfUpgJ/X3dMy/4R0mGtASTIE5mWemIt
64jRYCtXKqe91T9hv2KlbqTi7J1KZiQ7Z0QwrB7LQUSVS9QVCgszdh4l7LYyopkj
WdFEOpbT639+V7QteQI+3xsvaWpUMNqd/CHMHPtfmPczeNRwFib2M86qxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvtBfD7t76dHY6//tuZrkswzSd9MB8GA1UdIwQY
MBaAFAOQ9GG4xRsgKyEA3yzEMw9pIhjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTVEMFliakZHeUFySVFEZkxNUXpEMmtpR01FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9mNzJhNmMtZGEyNy00MmM3LTk0ODMt
ZDAwMTdmY2Q0MmYxLzEvQTVEMFliakZHeUFySVFEZkxNUXpEMmtpR01FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9mNzJhNmMtZGEyNy00MmM3LTk0ODMtZDAwMTdmY2Q0MmYx
LzEvQTVEMFliakZHeUFySVFEZkxNUXpEMmtpR01FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUE0zjuE7
aZX5jvkUt8/aJKrdNuoSX1r63Q6OqaWLf+lwiREt+x61XPxUCLvuwrmOv70Y8TmP
e7qt8gO/jcZgn2pvNuBoi24Nh2SEYAIPR2pbDbF4Xms7pN8SVLV699npW2vaNvk3
Xhrr+UhAZG6qPca+KNM5OKK0CEQGrQ5COSbqAJAkgJu3awoDqjZv/0ywKxuPoLvJ
CQYvEPJK1MviZ/vd3xI+D2+CLVs4plNLpFNun5RLvTOg4gHc7ZHvL1Qcp5qcy8jr
2jTnH6YSOoOtbMn7kcAs0k87x4b6EMp3whF7v92p+5DkDuGuj9EtTLqr0MBO/8bs
NbNdwZarDJUj1A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:39:09 2025 by rpki-client