Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft
File: 5cfDmlkS3cIen2tRmJZyV2ISeDM.mft (raw, json)
Hash identifier: PvTOOz62u5v1YmJ5M6Tx6ryG9/chuyrfK8URk0alc+M=
Subject key identifier: 67:03:98:30:4B:1C:AA:A8:73:6A:20:3F:81:80:BB:37:19:02:91:76
Authority key identifier: E5:C7:C3:9A:59:12:DD:C2:1E:9F:6B:51:98:96:72:57:62:12:78:33
Certificate issuer: /CN=e5c7c39a5912ddc21e9f6b519896725762127833
Certificate serial: 019849658FDCA8F911333A031A42F3BFD791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cfDmlkS3cIen2tRmJZyV2ISeDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft
Manifest number: 017B
Signing time: Sun 27 Jul 2025 01:00:49 +0000
Manifest this update: Sun 27 Jul 2025 01:00:49 +0000
Manifest next update: Mon 28 Jul 2025 01:00:49 +0000
Files and hashes: 1: 5cfDmlkS3cIen2tRmJZyV2ISeDM.crl (hash: Vzss2qMfC5TfK9mQR5xp7DYyXQveSnEyEj6mwPExreM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cfDmlkS3cIen2tRmJZyV2ISeDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:8f:dc:a8:f9:11:33:3a:03:1a:42:f3:bf:d7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c7c39a5912ddc21e9f6b519896725762127833
Validity
Not Before: Jul 27 01:00:49 2025 GMT
Not After : Jul 28 01:00:49 2025 GMT
Subject: CN=670398304b1caaa8736a203f8180bb3719029176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:77:8b:b9:88:35:a7:99:63:e5:10:18:b0:08:
f9:0d:97:6e:8a:bf:34:1e:88:6d:cb:a0:18:5f:6d:
56:f8:38:e6:22:13:00:21:49:3f:40:49:63:84:7e:
2b:25:5b:f1:68:cb:9e:53:28:d6:91:1c:d5:49:87:
8e:8c:d6:89:6f:87:fb:5a:31:62:cb:86:28:0c:51:
b6:40:f3:de:9f:05:c9:8a:aa:b1:43:0c:77:af:c3:
6c:63:32:a8:ca:3c:6f:d2:df:b5:75:50:ad:bc:46:
43:85:60:1b:78:43:f0:f0:ed:df:92:cd:be:a8:ec:
36:57:8d:68:d3:44:e4:59:3b:b7:3b:a9:23:f5:e8:
81:03:b9:0a:13:63:30:2e:2a:96:59:55:19:4a:af:
37:88:71:ea:61:0a:ee:91:df:27:0a:a9:ad:4c:32:
c8:98:5b:57:35:af:f9:88:62:60:ac:ef:8b:f0:2c:
78:35:2f:9b:77:f7:56:b4:af:7d:4c:c4:44:16:1d:
d6:b1:55:3b:b8:fa:7f:48:aa:50:ce:b6:0e:d4:93:
f2:56:96:1a:77:b8:a4:71:93:ac:16:36:32:c1:f8:
55:b0:f2:ac:5f:0b:26:83:e9:b0:9d:5d:5a:87:40:
d8:e2:67:3c:68:75:69:93:42:7a:fe:c3:3a:34:f8:
4e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:03:98:30:4B:1C:AA:A8:73:6A:20:3F:81:80:BB:37:19:02:91:76
X509v3 Authority Key Identifier:
keyid:E5:C7:C3:9A:59:12:DD:C2:1E:9F:6B:51:98:96:72:57:62:12:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cfDmlkS3cIen2tRmJZyV2ISeDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:46:fe:0e:92:be:09:ab:db:83:b5:0a:2b:1c:c0:14:13:d5:
ca:f4:e5:f9:a4:b1:c4:74:14:c2:77:0b:b5:6c:57:1b:ce:92:
4d:46:29:8d:4d:84:94:ed:68:83:a4:5d:ea:dd:46:6a:f8:ca:
17:27:64:5b:06:23:fa:d8:b7:b1:44:2b:5b:56:10:46:3a:ff:
3f:15:d7:9b:77:04:cb:f3:a5:05:07:0f:02:9f:8b:46:01:48:
44:4e:ec:38:24:fc:28:1a:bf:f2:cd:a5:78:52:b7:f4:1b:b0:
ca:c2:cd:1e:a5:fd:17:29:50:e4:08:8c:72:f9:4a:b2:ea:97:
1e:30:b5:08:5a:e4:54:4c:2d:bb:73:a6:a5:4c:57:cf:26:d8:
37:18:a1:df:84:68:e5:b7:8f:0d:bd:b0:3d:0c:db:f6:f9:b4:
37:91:16:85:a5:3f:6c:36:9c:56:cb:79:15:99:db:75:12:36:
52:69:24:09:03:be:9e:e5:2d:fe:38:30:f6:24:8b:48:a3:d4:
cc:b8:4e:fb:6c:e2:94:52:22:6d:39:f4:45:a5:71:44:1b:0c:
11:da:3b:4b:3a:d0:89:f5:91:4c:e6:d0:86:d2:80:e1:09:c2:
69:9d:57:92:16:74:e7:5d:6d:46:cd:90:02:8d:f3:49:ec:23:
ce:8d:d3:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZY/cqPkRMzoDGkLzv9eRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YzdjMzlhNTkxMmRkYzIxZTlmNmI1MTk4OTY3MjU3NjIx
Mjc4MzMwHhcNMjUwNzI3MDEwMDQ5WhcNMjUwNzI4MDEwMDQ5WjAzMTEwLwYDVQQD
Eyg2NzAzOTgzMDRiMWNhYWE4NzM2YTIwM2Y4MTgwYmIzNzE5MDI5MTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHeLuYg1p5lj5RAYsAj5DZduir80
Hohty6AYX21W+DjmIhMAIUk/QEljhH4rJVvxaMueUyjWkRzVSYeOjNaJb4f7WjFi
y4YoDFG2QPPenwXJiqqxQwx3r8NsYzKoyjxv0t+1dVCtvEZDhWAbeEPw8O3fks2+
qOw2V41o00TkWTu3O6kj9eiBA7kKE2MwLiqWWVUZSq83iHHqYQrukd8nCqmtTDLI
mFtXNa/5iGJgrO+L8Cx4NS+bd/dWtK99TMREFh3WsVU7uPp/SKpQzrYO1JPyVpYa
d7ikcZOsFjYywfhVsPKsXwsmg+mwnV1ah0DY4mc8aHVpk0J6/sM6NPhOSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcDmDBLHKqoc2ogP4GAuzcZApF2MB8GA1UdIwQY
MBaAFOXHw5pZEt3CHp9rUZiWcldiEngzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWNmRG1sa1MzY0llbjJ0Um1KWnlWMklTZURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xMGFmODMtMDhmNS00OTE5LWJhMWQt
MzhmODY0YTM0Yjc4LzEvNWNmRG1sa1MzY0llbjJ0Um1KWnlWMklTZURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8xMGFmODMtMDhmNS00OTE5LWJhMWQtMzhmODY0YTM0Yjc4
LzEvNWNmRG1sa1MzY0llbjJ0Um1KWnlWMklTZURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0b+DpK+
Cavbg7UKKxzAFBPVyvTl+aSxxHQUwncLtWxXG86STUYpjU2ElO1og6Rd6t1GavjK
FydkWwYj+ti3sUQrW1YQRjr/PxXXm3cEy/OlBQcPAp+LRgFIRE7sOCT8KBq/8s2l
eFK39BuwysLNHqX9FylQ5AiMcvlKsuqXHjC1CFrkVEwtu3OmpUxXzybYNxih34Ro
5bePDb2wPQzb9vm0N5EWhaU/bDacVst5FZnbdRI2UmkkCQO+nuUt/jgw9iSLSKPU
zLhO+2zilFIibTn0RaVxRBsMEdo7SzrQifWRTObQhtKA4QnCaZ1XkhZ0511tRs2Q
Ao3zSewjzo3T1A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 03:47:31 2025 by rpki-client