Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
File: 5oBHj67Itn3f7OY1fPJc8sodhdA.mft (raw, json)
Hash identifier: ZbQtKWTJHLLI9v0fT04Z7X1IvBS0rX0jk6wm8G9KU5g=
Subject key identifier: 90:1D:94:3D:6A:5E:03:1D:BB:6A:65:EF:F9:6A:2C:B5:19:24:42:90
Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
Certificate issuer: /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Certificate serial: 019845884C4A35A9DE8174B038307AD9890C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 07:00:16 +0000
Manifest this update: Sat 26 Jul 2025 07:00:16 +0000
Manifest next update: Sun 27 Jul 2025 07:00:16 +0000
Files and hashes: 1: 5oBHj67Itn3f7OY1fPJc8sodhdA.crl (hash: As2pbQL6iqo2u0KTRA1Fjni0YxCZRaKDlaL5Wshe+kE=)
2: tRzSJb7DVEfQEAa9U4BrDqM_SWA.roa (hash: XZPt+PoWwjSkw1pIWuwBcMWbKd9UU7K0EsDZzwNXa5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:4c:4a:35:a9:de:81:74:b0:38:30:7a:d9:89:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Validity
Not Before: Jul 26 07:00:16 2025 GMT
Not After : Jul 27 07:00:16 2025 GMT
Subject: CN=901d943d6a5e031dbb6a65eff96a2cb519244290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a5:93:5a:13:f7:f5:b5:13:d6:4f:b4:b5:9e:
d9:09:d3:87:66:bc:12:af:3a:c1:69:bd:75:20:64:
a5:aa:76:3c:70:19:54:87:1d:e3:c7:47:74:c3:38:
3a:86:f1:f5:60:50:23:e6:56:e3:6f:c3:93:40:be:
5d:34:9b:7a:77:f2:9c:13:a5:a2:bf:18:17:68:3f:
c4:84:86:22:a8:7f:d0:c1:a2:e4:ab:55:a7:00:ab:
95:4d:57:6e:f6:b6:68:b6:02:68:70:d5:5d:ae:6b:
1d:bd:7a:4e:8e:0c:0c:19:7e:0a:48:d8:d7:66:0f:
7e:a4:de:76:53:d8:c7:05:0c:6e:a6:37:67:6d:ea:
b3:28:0b:bb:22:82:74:3c:01:09:b3:06:71:38:d5:
8b:f8:af:86:a1:e8:84:fa:9f:32:a6:3f:09:55:9c:
08:93:f2:3a:4a:84:76:d8:db:bf:cc:52:f0:13:52:
a8:6a:70:c6:b1:50:8b:37:da:fd:88:9d:00:31:46:
6c:d0:87:78:31:d8:77:08:bd:41:11:c5:86:db:55:
ed:74:ae:04:22:30:bb:9b:91:17:4c:47:cc:5b:7c:
1f:8f:0a:c2:67:e1:1c:f7:4e:4a:b8:33:e5:94:e1:
73:e6:47:25:fb:95:1d:1c:dd:87:e8:e7:88:2d:00:
69:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1D:94:3D:6A:5E:03:1D:BB:6A:65:EF:F9:6A:2C:B5:19:24:42:90
X509v3 Authority Key Identifier:
keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7e:d5:37:02:bb:d3:c0:69:b5:db:45:63:dd:8f:91:2b:c5:
61:e2:22:9e:ee:de:d3:03:b1:3c:02:2a:e4:f1:cc:92:54:15:
de:15:97:da:4c:25:46:e7:ec:15:4c:37:01:4c:8e:f9:32:cb:
d6:98:24:30:f6:2d:4b:c9:a1:ff:49:32:63:4c:e6:25:3b:7a:
be:8e:c4:e4:2c:0f:ad:d5:48:7b:48:bf:ac:a7:3c:07:4a:c6:
46:68:75:bf:42:17:e9:f7:e3:85:94:3a:65:ea:9a:d9:40:c6:
38:79:35:85:a4:81:3c:5b:88:f5:c0:73:5f:f3:9b:f7:c2:27:
36:49:c7:db:99:cb:49:43:b7:68:3d:4e:7e:7e:53:24:bc:16:
f0:c1:69:ef:2e:df:72:0e:ce:14:26:f9:34:6e:6c:79:42:fd:
c0:fb:a1:1d:23:10:a0:0e:c2:5c:04:a7:38:05:f9:e9:f9:6b:
b3:af:e7:df:3e:61:73:1f:31:5e:3e:4b:2b:ad:5b:f8:76:69:
4c:05:c9:5c:52:b6:e0:e3:79:e9:c7:f8:40:40:b7:11:25:53:
46:3c:8f:25:fe:d6:bb:30:ee:23:d2:d9:51:64:71:08:47:83:
13:f0:86:a9:d8:ff:c1:a4:3e:35:c0:0f:82:b0:48:53:84:9a:
fa:c0:0d:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFiExKNanegXSwODB62YkMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ODA0NzhmYWVjOGI2N2RkZmVjZTYzNTdjZjI1Y2YyY2Ex
ZDg1ZDAwHhcNMjUwNzI2MDcwMDE2WhcNMjUwNzI3MDcwMDE2WjAzMTEwLwYDVQQD
Eyg5MDFkOTQzZDZhNWUwMzFkYmI2YTY1ZWZmOTZhMmNiNTE5MjQ0MjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aWTWhP39bUT1k+0tZ7ZCdOHZrwS
rzrBab11IGSlqnY8cBlUhx3jx0d0wzg6hvH1YFAj5lbjb8OTQL5dNJt6d/KcE6Wi
vxgXaD/EhIYiqH/QwaLkq1WnAKuVTVdu9rZotgJocNVdrmsdvXpOjgwMGX4KSNjX
Zg9+pN52U9jHBQxupjdnbeqzKAu7IoJ0PAEJswZxONWL+K+GoeiE+p8ypj8JVZwI
k/I6SoR22Nu/zFLwE1KoanDGsVCLN9r9iJ0AMUZs0Id4Mdh3CL1BEcWG21XtdK4E
IjC7m5EXTEfMW3wfjwrCZ+Ec905KuDPllOFz5kcl+5UdHN2H6OeILQBpCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAdlD1qXgMdu2pl7/lqLLUZJEKQMB8GA1UdIwQY
MBaAFOaAR4+uyLZ93+zmNXzyXPLKHYXQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW9CSGo2N0l0bjNmN09ZMWZQSmM4c29kaGRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yNWEwMWItNWZiMC00NDRlLWEyYzct
MzM5YzlkNDg3NzRjLzEvNW9CSGo2N0l0bjNmN09ZMWZQSmM4c29kaGRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yNWEwMWItNWZiMC00NDRlLWEyYzctMzM5YzlkNDg3NzRj
LzEvNW9CSGo2N0l0bjNmN09ZMWZQSmM4c29kaGRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm37VNwK7
08BptdtFY92PkSvFYeIinu7e0wOxPAIq5PHMklQV3hWX2kwlRufsFUw3AUyO+TLL
1pgkMPYtS8mh/0kyY0zmJTt6vo7E5CwPrdVIe0i/rKc8B0rGRmh1v0IX6ffjhZQ6
Zeqa2UDGOHk1haSBPFuI9cBzX/Ob98InNknH25nLSUO3aD1Ofn5TJLwW8MFp7y7f
cg7OFCb5NG5seUL9wPuhHSMQoA7CXASnOAX56flrs6/n3z5hcx8xXj5LK61b+HZp
TAXJXFK24ON56cf4QEC3ESVTRjyPJf7WuzDuI9LZUWRxCEeDE/CGqdj/waQ+NcAP
grBIU4Sa+sANeA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:27:52 2025 by rpki-client