Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
File: 5mNquBo0Op_9glfqyx3exTiWaAQ.mft (raw, json)
Hash identifier: uxUP0mUi1cWmtP1Rx1iXbaq50Rwy2mSTfF/DtosE0ZE=
Subject key identifier: 4A:70:B2:73:23:28:F3:EB:F8:86:16:38:E4:23:07:F3:54:9A:B6:34
Authority key identifier: E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
Certificate issuer: /CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Certificate serial: 01991EE681BE46DC007D504C7452883830D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
Manifest number: 10F4
Signing time: Sat 06 Sep 2025 12:00:46 +0000
Manifest this update: Sat 06 Sep 2025 12:00:46 +0000
Manifest next update: Sun 07 Sep 2025 12:00:46 +0000
Files and hashes: 1: 5mNquBo0Op_9glfqyx3exTiWaAQ.crl (hash: Ja8Kx/0Bl/dwPZKqTHLA8NtBmlo8mEAvv0+sMJ0TE5k=)
2: qBH3YGMaFK7YFVrKhQ5pFdeSVI0.roa (hash: 0gWn80uN/F/B7m+caBdi8E0X9ChrpKW2B3Hw8j3IN30=)
3: vMTodOq6xsRuVpjojWIKyaTkK_Y.roa (hash: wkJrOUu2B+xH8ypfmdsSGQvJ0AuehbonV39UjaZS0FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:e6:81:be:46:dc:00:7d:50:4c:74:52:88:38:30:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Validity
Not Before: Sep 6 12:00:46 2025 GMT
Not After : Sep 7 12:00:46 2025 GMT
Subject: CN=4a70b2732328f3ebf8861638e42307f3549ab634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:46:2c:40:50:87:0e:a0:ea:16:dc:1b:ee:
10:01:84:11:4f:1e:ba:e8:67:a2:9a:7b:41:02:e0:
a9:1d:c3:73:62:49:10:5c:d3:6c:fa:07:97:20:32:
7d:8d:ee:3d:0f:56:f6:e9:5e:fd:fe:f4:0d:77:95:
e8:73:65:5b:0e:c0:50:5c:dd:2e:69:08:95:26:00:
38:dd:2f:52:9b:70:49:90:8d:0d:ac:c0:cc:43:50:
30:af:fb:da:60:9a:93:0e:eb:2c:76:ce:59:20:72:
1b:76:eb:ce:d5:bc:22:15:8a:14:2c:0b:7a:bb:7f:
c2:1e:ca:61:51:4a:94:72:25:e7:55:08:93:68:65:
3e:7c:b9:38:04:9f:bf:1b:41:a2:36:fd:16:2e:b0:
c7:90:ea:f4:b3:51:df:ee:6e:c0:e8:03:75:2e:05:
62:20:e6:9e:5d:86:4e:26:b8:9d:7a:a1:11:16:5b:
b1:83:f2:a0:1b:2b:18:34:73:e2:5b:7f:5f:63:f3:
08:17:4b:1a:c7:f2:8e:ac:0d:cf:06:a0:03:cc:3b:
7c:40:64:a0:1e:70:20:33:c3:d0:10:e9:f0:d4:90:
84:47:08:1c:08:b8:77:e0:2f:51:ca:bc:96:5b:72:
20:05:51:04:a4:9f:4e:19:86:9a:e1:1f:a8:4f:82:
17:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:70:B2:73:23:28:F3:EB:F8:86:16:38:E4:23:07:F3:54:9A:B6:34
X509v3 Authority Key Identifier:
keyid:E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c2:4d:3b:93:fb:cd:94:83:ee:83:a0:a4:78:d5:77:2b:95:
34:7c:61:6e:48:90:b8:c9:90:7b:68:a8:07:9b:57:d2:a9:b7:
11:8d:09:68:94:54:02:d9:16:c1:95:31:68:42:3c:db:03:5c:
a2:92:b0:80:69:84:31:0e:a7:c9:21:0f:d9:2e:85:c0:30:03:
dc:40:5e:57:c8:1a:e2:13:d7:e3:33:31:33:9b:68:c6:ec:90:
c3:48:28:6a:b2:b9:f4:86:74:1e:e4:c0:99:29:89:4b:1d:b9:
a3:99:d4:42:bc:22:a9:67:ee:7c:dd:10:58:6d:a9:8f:1f:26:
03:33:db:fc:36:fe:e1:8d:40:ee:32:61:ec:1d:e8:bf:98:d9:
ea:28:23:3e:5d:7b:61:f4:6f:c0:98:0d:0e:5b:ee:8d:9e:6f:
28:8a:c4:c9:d2:a4:6d:e5:de:04:4a:bd:d2:1c:d9:ba:d5:43:
3b:25:87:0d:66:45:15:60:4e:8e:41:7f:82:a3:68:8e:80:be:
fd:1f:d5:8e:4b:6d:12:29:1b:27:f6:b4:4d:21:3f:68:e9:d8:
72:af:35:c3:5f:dc:63:8d:ea:29:5f:37:f9:b4:83:a6:ee:23:
07:5a:73:10:a0:05:34:00:1e:b3:17:bf:af:f3:31:fb:0b:e2:
8f:31:b0:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZke5oG+RtwAfVBMdFKIODDUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NjM2YWI4MWEzNDNhOWZmZDgyNTdlYWNiMWRkZWM1Mzg5
NjY4MDQwHhcNMjUwOTA2MTIwMDQ2WhcNMjUwOTA3MTIwMDQ2WjAzMTEwLwYDVQQD
Eyg0YTcwYjI3MzIzMjhmM2ViZjg4NjE2MzhlNDIzMDdmMzU0OWFiNjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA5GLEBQhw6g6hbcG+4QAYQRTx66
6GeimntBAuCpHcNzYkkQXNNs+geXIDJ9je49D1b26V79/vQNd5Xoc2VbDsBQXN0u
aQiVJgA43S9Sm3BJkI0NrMDMQ1Awr/vaYJqTDussds5ZIHIbduvO1bwiFYoULAt6
u3/CHsphUUqUciXnVQiTaGU+fLk4BJ+/G0GiNv0WLrDHkOr0s1Hf7m7A6AN1LgVi
IOaeXYZOJrideqERFluxg/KgGysYNHPiW39fY/MIF0sax/KOrA3PBqADzDt8QGSg
HnAgM8PQEOnw1JCERwgcCLh34C9RyryWW3IgBVEEpJ9OGYaa4R+oT4IX+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpwsnMjKPPr+IYWOOQjB/NUmrY0MB8GA1UdIwQY
MBaAFOZjargaNDqf/YJX6ssd3sU4lmgEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW1OcXVCbzBPcF85Z2xmcXl4M2V4VGlXYUFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xNDU1ZDItNzI0YS00MzllLTk2ZWQt
OTg3NmFlYmJkMmM5LzEvNW1OcXVCbzBPcF85Z2xmcXl4M2V4VGlXYUFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8xNDU1ZDItNzI0YS00MzllLTk2ZWQtOTg3NmFlYmJkMmM5
LzEvNW1OcXVCbzBPcF85Z2xmcXl4M2V4VGlXYUFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMJNO5P7
zZSD7oOgpHjVdyuVNHxhbkiQuMmQe2ioB5tX0qm3EY0JaJRUAtkWwZUxaEI82wNc
opKwgGmEMQ6nySEP2S6FwDAD3EBeV8ga4hPX4zMxM5toxuyQw0goarK59IZ0HuTA
mSmJSx25o5nUQrwiqWfufN0QWG2pjx8mAzPb/Db+4Y1A7jJh7B3ov5jZ6igjPl17
YfRvwJgNDlvujZ5vKIrEydKkbeXeBEq90hzZutVDOyWHDWZFFWBOjkF/gqNojoC+
/R/VjkttEikbJ/a0TSE/aOnYcq81w1/cY43qKV83+bSDpu4jB1pzEKAFNAAesxe/
r/Mx+wvijzGwEw==
-----END CERTIFICATE-----
Generated at Sat Sep 6 14:15:39 2025 by rpki-client