Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
File: 5UGkwVK194bWI9hcQUZSmc3aM4k.mft (raw, json)
Hash identifier: bod5QLV+EL+2dTZJK51Fo1/bVRnOsOnTCaQei+he9+k=
Subject key identifier: 52:29:3F:B8:BB:09:E9:D6:9F:0D:FB:F5:67:14:00:F9:46:F5:03:79
Authority key identifier: E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
Certificate issuer: /CN=e541a4c152b5f786d623d85c41465299cdda3389
Certificate serial: 01984AAF140DBF4943192AF69DB984563ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 07:00:44 +0000
Manifest this update: Sun 27 Jul 2025 07:00:44 +0000
Manifest next update: Mon 28 Jul 2025 07:00:44 +0000
Files and hashes: 1: 5UGkwVK194bWI9hcQUZSmc3aM4k.crl (hash: KJpH1FxmkaVd5zpm+wcEdjW/9GnJEX1SRdMaKMck5Lw=)
2: kenow9ooVwL0t4IuHSVvvQIsN8M.roa (hash: tJkXtVd1TBPTWkBnhiKcyLiHlQeoQgvy5+UbWV83vUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:14:0d:bf:49:43:19:2a:f6:9d:b9:84:56:3a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e541a4c152b5f786d623d85c41465299cdda3389
Validity
Not Before: Jul 27 07:00:44 2025 GMT
Not After : Jul 28 07:00:44 2025 GMT
Subject: CN=52293fb8bb09e9d69f0dfbf5671400f946f50379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:a9:45:ec:d3:1e:0d:e4:8d:3d:d1:5c:c8:
25:a7:9f:cd:82:2b:18:27:f9:f9:fb:39:8e:fc:86:
db:34:f9:6a:1f:e8:10:27:bb:bc:7f:82:13:75:ba:
92:23:8a:80:ab:94:95:4a:49:cb:53:ba:56:b0:e8:
0d:8f:32:bc:bf:73:d2:bf:3d:67:4a:2c:e2:ff:17:
e5:15:b9:3c:e0:2c:38:26:f1:ef:44:ee:f1:35:90:
3d:4f:e7:5f:61:48:03:31:69:c4:5b:06:c3:62:25:
69:57:38:59:2d:4e:f2:44:3f:38:54:d9:27:1f:38:
fc:48:41:1a:d8:86:b8:29:16:61:7b:bc:f8:e8:f1:
c6:c6:cd:b0:5b:56:1a:61:77:08:9a:63:91:fa:d4:
38:b4:41:d5:e9:31:a7:8b:da:90:c5:85:d6:cd:c5:
43:52:0a:b3:df:0d:8b:f2:50:3f:de:22:92:0e:d1:
93:12:f2:a5:08:f5:ae:57:cc:a5:5b:c5:09:02:3e:
b9:dc:8b:95:69:b3:c4:a1:b7:e3:91:3c:5d:c5:ef:
3a:f0:ee:c2:aa:f3:03:0c:73:83:b0:a6:bd:4b:fd:
03:99:ed:f1:c5:3f:4a:1d:73:ae:34:df:5f:d8:b7:
b3:3b:73:6f:90:ce:fa:46:45:46:25:e3:43:f9:a2:
8c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:29:3F:B8:BB:09:E9:D6:9F:0D:FB:F5:67:14:00:F9:46:F5:03:79
X509v3 Authority Key Identifier:
keyid:E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b8:f3:4b:44:d6:2d:fc:08:27:56:d1:4f:68:d1:09:6d:68:
7c:a4:40:84:d0:f6:26:b7:c7:b4:12:c7:e4:12:cb:29:de:18:
34:68:b0:85:90:1d:b3:9f:51:3c:40:2e:7b:3d:1e:c0:0a:a1:
ae:03:93:64:37:dc:ff:17:6f:84:cc:7c:88:f2:f5:cd:73:4c:
78:08:33:66:ab:bf:88:1e:a5:43:64:1d:3e:1f:fb:af:c3:5b:
fd:63:98:0a:fb:db:fc:2d:9a:96:05:8c:ac:1f:65:71:e2:ef:
df:d8:37:e4:77:85:81:cf:ff:e3:26:b5:c8:76:6d:65:59:2d:
f4:6f:f4:c1:ce:c2:d0:1c:52:ee:7e:b0:ee:bb:be:ab:14:44:
47:fd:6f:8f:4b:0c:8e:72:b9:3a:9a:1b:7b:2b:e1:76:12:03:
fd:93:fe:1c:e8:e7:eb:38:76:3b:c9:69:b4:d8:fa:f7:6f:93:
db:11:f7:82:e7:25:dc:6c:5c:80:50:e2:3a:91:ac:a6:fc:a4:
cd:41:78:00:c5:4b:2f:c0:5d:aa:de:64:98:c5:13:cd:5f:b1:
9a:56:53:97:5d:d0:8e:43:8f:13:e5:7d:fc:3c:88:e5:c3:08:
39:40:3b:30:58:3e:b1:7b:65:20:d0:b4:53:4d:a9:71:46:81:
57:96:29:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrxQNv0lDGSr2nbmEVjq/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NDFhNGMxNTJiNWY3ODZkNjIzZDg1YzQxNDY1Mjk5Y2Rk
YTMzODkwHhcNMjUwNzI3MDcwMDQ0WhcNMjUwNzI4MDcwMDQ0WjAzMTEwLwYDVQQD
Eyg1MjI5M2ZiOGJiMDllOWQ2OWYwZGZiZjU2NzE0MDBmOTQ2ZjUwMzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg+pRezTHg3kjT3RXMglp5/NgisY
J/n5+zmO/IbbNPlqH+gQJ7u8f4ITdbqSI4qAq5SVSknLU7pWsOgNjzK8v3PSvz1n
Sizi/xflFbk84Cw4JvHvRO7xNZA9T+dfYUgDMWnEWwbDYiVpVzhZLU7yRD84VNkn
Hzj8SEEa2Ia4KRZhe7z46PHGxs2wW1YaYXcImmOR+tQ4tEHV6TGni9qQxYXWzcVD
Ugqz3w2L8lA/3iKSDtGTEvKlCPWuV8ylW8UJAj653IuVabPEobfjkTxdxe868O7C
qvMDDHODsKa9S/0Dme3xxT9KHXOuNN9f2LezO3NvkM76RkVGJeND+aKMKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIpP7i7CenWnw379WcUAPlG9QN5MB8GA1UdIwQY
MBaAFOVBpMFStfeG1iPYXEFGUpnN2jOJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVVHa3dWSzE5NGJXSTloY1FVWlNtYzNhTTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kNzEyNjktNGI1Ni00NTcyLWE3MTEt
ZDg0ZWNiMjUwNWM0LzEvNVVHa3dWSzE5NGJXSTloY1FVWlNtYzNhTTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9kNzEyNjktNGI1Ni00NTcyLWE3MTEtZDg0ZWNiMjUwNWM0
LzEvNVVHa3dWSzE5NGJXSTloY1FVWlNtYzNhTTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWbjzS0TW
LfwIJ1bRT2jRCW1ofKRAhND2JrfHtBLH5BLLKd4YNGiwhZAds59RPEAuez0ewAqh
rgOTZDfc/xdvhMx8iPL1zXNMeAgzZqu/iB6lQ2QdPh/7r8Nb/WOYCvvb/C2algWM
rB9lceLv39g35HeFgc//4ya1yHZtZVkt9G/0wc7C0BxS7n6w7ru+qxRER/1vj0sM
jnK5OpobeyvhdhID/ZP+HOjn6zh2O8lptNj692+T2xH3gucl3GxcgFDiOpGspvyk
zUF4AMVLL8Bdqt5kmMUTzV+xmlZTl13QjkOPE+V9/DyI5cMIOUA7MFg+sXtlINC0
U02pcUaBV5Ypig==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:39:52 2025 by rpki-client