Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
File: 5fmtISzWWrTuK46bP4uDPDkA6n0.mft (raw, json)
Hash identifier: IxrtAx7BngV0cj+pCMccA/SGhDMXIrOllAq3LZzv8SA=
Subject key identifier: 49:70:26:4C:10:E1:73:B0:30:25:E3:A3:F3:06:04:2D:3F:59:59:2D
Authority key identifier: E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
Certificate issuer: /CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
Certificate serial: 019848F721530C77EDEFB39844658B4C45E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
Manifest number: 0943
Signing time: Sat 26 Jul 2025 23:00:12 +0000
Manifest this update: Sat 26 Jul 2025 23:00:12 +0000
Manifest next update: Sun 27 Jul 2025 23:00:12 +0000
Files and hashes: 1: 5SbPyjmIYXelitOmA1AVO3bhm0Q.roa (hash: 1XIxpyYBD9DDRIa0BTpbMKp2ZvPzaojB9NovyRazhxQ=)
2: 5fmtISzWWrTuK46bP4uDPDkA6n0.crl (hash: 0GYCOWLtcpTghWC3CVFBMgI42YU4/Gi5jbvKuH7qhds=)
3: 7HHw1TGIKZGT4OMQXJ2kcRpWokQ.roa (hash: MAqlIYjH1775SsM1oEUQoqGZ7ZtgZ752pYJj6tU1DkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:21:53:0c:77:ed:ef:b3:98:44:65:8b:4c:45:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
Validity
Not Before: Jul 26 23:00:12 2025 GMT
Not After : Jul 27 23:00:12 2025 GMT
Subject: CN=4970264c10e173b03025e3a3f306042d3f59592d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:8c:8c:ec:4b:c6:75:7e:29:6e:54:3d:60:
e4:73:57:fb:27:3f:ae:6b:4e:8f:e1:a9:b4:52:d0:
61:83:22:3a:70:e5:1c:06:e4:0d:21:9d:ec:1b:e4:
b2:6c:33:4d:f6:43:09:fa:58:62:73:63:a7:4a:67:
60:0a:1f:ed:c6:e3:16:3f:37:6d:7b:fa:6f:58:8b:
0b:c2:21:c0:cf:4f:9e:36:ca:b1:22:15:bd:5d:88:
f9:c1:28:22:8e:08:93:ad:77:fb:de:84:f6:32:e6:
88:cd:23:e8:6c:ca:5f:0f:02:fe:a2:3c:27:a5:93:
13:9b:6b:4e:fc:07:19:88:1a:18:b0:f2:c0:4a:83:
ec:3d:ad:d2:f1:4a:ec:7c:9b:68:71:64:86:3d:75:
03:07:21:a7:32:08:b9:af:66:42:c9:e8:e3:14:a1:
a9:65:11:a4:09:af:fd:51:19:b2:33:0f:d5:ff:35:
5a:69:5a:5b:8c:02:f8:39:c1:a7:7d:6f:de:2c:99:
bb:dd:b5:9e:71:2f:8e:de:cc:97:fb:f3:fb:51:94:
df:6d:24:20:72:bc:0b:48:36:76:25:5e:25:93:e8:
d2:b5:18:c1:8b:0a:8f:63:29:3b:b1:63:de:57:a0:
57:3d:89:10:81:70:cb:d8:fc:f6:d6:ed:16:a4:cb:
05:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:70:26:4C:10:E1:73:B0:30:25:E3:A3:F3:06:04:2D:3F:59:59:2D
X509v3 Authority Key Identifier:
keyid:E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:df:6b:a4:b3:f2:5e:14:69:d8:3e:ab:f2:6a:0f:89:8b:0b:
7b:12:1e:93:d4:03:60:74:a9:03:71:fa:9d:67:16:fb:38:ee:
5c:cf:e7:08:bf:74:2b:77:4b:ba:d3:bd:c8:31:af:ed:e4:6c:
12:f8:ed:48:36:bb:12:f5:ba:4e:c8:d1:6e:76:45:e0:9c:dc:
5f:dd:44:c3:05:ea:3d:86:b2:e3:35:a2:90:a1:fc:66:48:f9:
d2:42:63:4f:27:1e:7b:b2:65:08:42:8f:0d:10:50:38:ff:9a:
2c:ea:2f:ea:fa:f9:3f:7b:16:98:9c:31:dc:15:d4:61:d8:11:
6e:37:81:6a:70:80:1d:90:36:ba:5b:af:1f:67:96:98:27:d4:
a1:99:be:c5:d8:1e:05:0f:07:c9:09:43:01:68:87:a0:87:34:
25:4c:ff:8d:56:f6:63:ce:9f:3d:60:92:d7:d8:0f:81:af:f8:
81:0a:18:ca:90:82:b0:e1:0b:50:49:3d:00:2e:42:43:18:e8:
e8:8e:8e:5a:58:0e:12:35:05:35:48:13:42:1e:4d:a9:22:88:
f8:21:c7:64:5b:1c:c0:5b:f5:6a:6b:74:0f:5f:4b:06:61:5a:
cc:f6:51:d0:f5:fa:cd:9c:16:ff:60:1c:27:14:51:d1:31:80:
3e:be:e4:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI9yFTDHft77OYRGWLTEXoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZjlhZDIxMmNkNjVhYjRlZTJiOGU5YjNmOGI4MzNjMzkw
MGVhN2QwHhcNMjUwNzI2MjMwMDEyWhcNMjUwNzI3MjMwMDEyWjAzMTEwLwYDVQQD
Eyg0OTcwMjY0YzEwZTE3M2IwMzAyNWUzYTNmMzA2MDQyZDNmNTk1OTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCmMjOxLxnV+KW5UPWDkc1f7Jz+u
a06P4am0UtBhgyI6cOUcBuQNIZ3sG+SybDNN9kMJ+lhic2OnSmdgCh/txuMWPzdt
e/pvWIsLwiHAz0+eNsqxIhW9XYj5wSgijgiTrXf73oT2MuaIzSPobMpfDwL+ojwn
pZMTm2tO/AcZiBoYsPLASoPsPa3S8UrsfJtocWSGPXUDByGnMgi5r2ZCyejjFKGp
ZRGkCa/9URmyMw/V/zVaaVpbjAL4OcGnfW/eLJm73bWecS+O3syX+/P7UZTfbSQg
crwLSDZ2JV4lk+jStRjBiwqPYyk7sWPeV6BXPYkQgXDL2Pz21u0WpMsFQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElwJkwQ4XOwMCXjo/MGBC0/WVktMB8GA1UdIwQY
MBaAFOX5rSEs1lq07iuOmz+Lgzw5AOp9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWZtdElTeldXclR1SzQ2YlA0dURQRGtBNm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mODA5MjYtZTlhOS00MWY5LTk1YTAt
OWI4MTNhMjAwMmFhLzEvNWZtdElTeldXclR1SzQ2YlA0dURQRGtBNm4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mODA5MjYtZTlhOS00MWY5LTk1YTAtOWI4MTNhMjAwMmFh
LzEvNWZtdElTeldXclR1SzQ2YlA0dURQRGtBNm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAit9rpLPy
XhRp2D6r8moPiYsLexIek9QDYHSpA3H6nWcW+zjuXM/nCL90K3dLutO9yDGv7eRs
EvjtSDa7EvW6TsjRbnZF4JzcX91EwwXqPYay4zWikKH8Zkj50kJjTycee7JlCEKP
DRBQOP+aLOov6vr5P3sWmJwx3BXUYdgRbjeBanCAHZA2uluvH2eWmCfUoZm+xdge
BQ8HyQlDAWiHoIc0JUz/jVb2Y86fPWCS19gPga/4gQoYypCCsOELUEk9AC5CQxjo
6I6OWlgOEjUFNUgTQh5NqSKI+CHHZFscwFv1amt0D19LBmFazPZR0PX6zZwW/2Ac
JxRR0TGAPr7k7g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:40:25 2025 by rpki-client