Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
File: 5ARKnRChnmsaztrJ_3eNT0CQaMs.mft (raw, json)
Hash identifier: hilhbWeVf5mLqdkYsqehYyl+vtB+gx9OXx0YvS493hk=
Subject key identifier: 0E:54:63:C9:57:A4:D5:DD:00:68:80:C1:F3:57:3F:C4:2B:7F:C6:4E
Authority key identifier: E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
Certificate issuer: /CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Certificate serial: 01984AE5B8D3A5C50771598185A692132A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
Manifest number: 0B54
Signing time: Sun 27 Jul 2025 08:00:25 +0000
Manifest this update: Sun 27 Jul 2025 08:00:25 +0000
Manifest next update: Mon 28 Jul 2025 08:00:25 +0000
Files and hashes: 1: 5ARKnRChnmsaztrJ_3eNT0CQaMs.crl (hash: JUq+HnwBln9ar9mlZ1+yGMY/sPGLIhIRFggTfUH1eyE=)
2: ZEltVn27Wr_tDWWUDsnoIPSexys.roa (hash: nTpT1tYnBssg4bHieTQOF2MWxJ4AkBKr1Y7xxrvK7kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:b8:d3:a5:c5:07:71:59:81:85:a6:92:13:2a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Validity
Not Before: Jul 27 08:00:25 2025 GMT
Not After : Jul 28 08:00:25 2025 GMT
Subject: CN=0e5463c957a4d5dd006880c1f3573fc42b7fc64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:94:49:28:e1:e0:f1:7b:0f:fa:24:e7:6f:64:
cc:9f:d3:1f:46:5d:14:d5:b8:63:7b:d9:d6:e2:05:
a2:e7:a0:32:f6:1c:ac:4b:a9:4a:44:16:26:bb:eb:
a8:f1:35:af:ac:78:1a:c6:d6:8f:1f:98:d3:97:aa:
b4:b3:38:8b:61:22:17:ca:84:d0:28:5c:93:af:d7:
00:78:ac:73:0d:dd:54:3c:08:e9:42:57:ca:e7:5e:
2e:06:ee:50:b9:6f:58:6c:37:c8:64:1f:33:d3:00:
7f:87:7b:a8:33:7d:0f:af:53:1b:2d:f5:04:98:92:
30:d2:74:42:cf:66:8a:22:5e:0b:6a:db:04:27:34:
6f:f9:f5:df:b2:55:50:db:e4:dc:d7:d1:62:da:ca:
a7:fc:28:db:4a:44:69:23:7b:19:9a:f8:1d:f9:4f:
7d:23:b5:67:59:a3:48:ba:5b:db:83:63:0f:7f:b7:
7d:5f:fa:ef:18:2e:26:cf:33:69:91:90:2b:39:12:
55:9c:31:25:03:68:db:18:be:1a:52:58:25:56:10:
ac:28:d2:4e:37:db:35:e1:fa:1c:7d:2c:74:db:54:
ad:3e:84:4c:54:19:a6:84:c6:4d:aa:ef:06:cb:bb:
54:64:be:87:ea:10:8b:45:d9:aa:7b:3b:9e:94:33:
c8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:54:63:C9:57:A4:D5:DD:00:68:80:C1:F3:57:3F:C4:2B:7F:C6:4E
X509v3 Authority Key Identifier:
keyid:E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b3:f7:11:6e:11:cb:92:2b:26:72:df:2b:14:24:c6:84:d4:
14:b0:1b:b4:ed:19:39:68:23:a4:84:ac:ad:e9:31:f5:f3:d5:
89:ba:5a:1a:72:0f:a2:b6:61:a3:06:3c:94:0e:9c:29:a7:39:
ca:fd:f7:06:1a:a4:c5:7b:e3:6e:56:73:7c:99:72:7d:f7:bf:
cd:f0:66:be:e1:ef:42:ab:ba:1a:81:46:d3:d4:7a:d5:2b:c8:
1d:e1:92:9e:2c:4b:54:6f:29:d7:ac:7a:3d:3d:65:de:14:68:
2d:2a:48:2a:95:82:31:c1:7c:96:c0:7b:9b:42:e9:37:d5:51:
49:86:5e:39:be:58:c2:1c:a1:d4:7f:dc:0b:bf:74:99:ad:3e:
89:e9:52:a2:81:fe:4b:8b:2c:07:9b:32:04:7b:53:37:c1:cd:
47:75:ae:bc:a1:50:31:31:ba:82:93:2a:4b:89:22:a6:72:75:
df:d4:8d:88:56:1e:6d:20:fe:a8:7e:f6:bb:0a:7e:57:51:95:
f8:fb:b9:d5:7c:cc:45:57:00:78:cf:66:31:b0:6a:f3:0d:fc:
5b:79:9d:16:12:ae:04:0f:d1:d4:8c:1d:f1:7a:a1:ef:2a:59:
9c:46:b0:ee:af:0f:c5:18:16:fa:47:b9:2b:76:33:6e:34:60:
3f:4f:eb:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5bjTpcUHcVmBhaaSEyqBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MDQ0YTlkMTBhMTllNmIxYWNlZGFjOWZmNzc4ZDRmNDA5
MDY4Y2IwHhcNMjUwNzI3MDgwMDI1WhcNMjUwNzI4MDgwMDI1WjAzMTEwLwYDVQQD
EygwZTU0NjNjOTU3YTRkNWRkMDA2ODgwYzFmMzU3M2ZjNDJiN2ZjNjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJRJKOHg8XsP+iTnb2TMn9MfRl0U
1bhje9nW4gWi56Ay9hysS6lKRBYmu+uo8TWvrHgaxtaPH5jTl6q0sziLYSIXyoTQ
KFyTr9cAeKxzDd1UPAjpQlfK514uBu5QuW9YbDfIZB8z0wB/h3uoM30Pr1MbLfUE
mJIw0nRCz2aKIl4LatsEJzRv+fXfslVQ2+Tc19Fi2sqn/CjbSkRpI3sZmvgd+U99
I7VnWaNIulvbg2MPf7d9X/rvGC4mzzNpkZArORJVnDElA2jbGL4aUlglVhCsKNJO
N9s14focfSx021StPoRMVBmmhMZNqu8Gy7tUZL6H6hCLRdmqezuelDPI+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5UY8lXpNXdAGiAwfNXP8Qrf8ZOMB8GA1UdIwQY
MBaAFOQESp0QoZ5rGs7ayf93jU9AkGjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUFSS25SQ2hubXNhenRySl8zZU5UMENRYU1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wZThiNWQtZWU5OC00N2ZiLWEzODkt
MDNmYTdhOWMzNzFlLzEvNUFSS25SQ2hubXNhenRySl8zZU5UMENRYU1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wZThiNWQtZWU5OC00N2ZiLWEzODktMDNmYTdhOWMzNzFl
LzEvNUFSS25SQ2hubXNhenRySl8zZU5UMENRYU1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7P3EW4R
y5IrJnLfKxQkxoTUFLAbtO0ZOWgjpISsrekx9fPVibpaGnIPorZhowY8lA6cKac5
yv33BhqkxXvjblZzfJlyffe/zfBmvuHvQqu6GoFG09R61SvIHeGSnixLVG8p16x6
PT1l3hRoLSpIKpWCMcF8lsB7m0LpN9VRSYZeOb5Ywhyh1H/cC790ma0+ielSooH+
S4ssB5syBHtTN8HNR3WuvKFQMTG6gpMqS4kipnJ139SNiFYebSD+qH72uwp+V1GV
+Pu51XzMRVcAeM9mMbBq8w38W3mdFhKuBA/R1Iwd8Xqh7ypZnEaw7q8PxRgW+ke5
K3YzbjRgP0/rJQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:58:11 2025 by rpki-client