
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
File: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft (raw, json)
Hash identifier: Yc2PW/9D5548Y5Si/WMeXgIRjfAlmAgx8NuVjYKhcIk=
Subject key identifier: 5E:75:02:35:B4:FF:58:AF:77:2E:C6:74:0E:24:4A:81:48:67:03:87
Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Certificate issuer: /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Certificate serial: 01984AAECEC245F9DC4BB4F8D40098A82154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 07:00:26 +0000
Manifest this update: Sun 27 Jul 2025 07:00:26 +0000
Manifest next update: Mon 28 Jul 2025 07:00:26 +0000
Files and hashes: 1: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl (hash: jEW9RlQ5Z/OBDQCBPDLKf5N8NKoG6DCTdPNPtKHw0H8=)
2: H9LigG1-eoyksArBLiDVRw0BhjU.roa (hash: oha3QLmkXpQFYs1KCF6A8sqvDCo/E/9M5bF7ey6N14M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:ce:c2:45:f9:dc:4b:b4:f8:d4:00:98:a8:21:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Validity
Not Before: Jul 27 07:00:26 2025 GMT
Not After : Jul 28 07:00:26 2025 GMT
Subject: CN=5e750235b4ff58af772ec6740e244a8148670387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b2:81:28:fc:36:30:ec:6e:1f:9a:cf:e0:63:
17:65:cd:51:88:b5:75:4b:2f:5b:83:56:9a:b8:cb:
77:f0:5d:e9:19:b3:fd:49:0f:39:e5:25:7f:cc:70:
9e:ff:cb:61:41:b6:ac:a9:eb:f1:ec:4c:c8:01:1b:
72:11:d7:fe:0c:e1:0b:40:b8:41:2e:b9:69:62:ba:
76:b4:b4:a2:e8:df:aa:c6:dc:84:a3:d5:ee:7b:e9:
16:9f:3d:94:72:27:79:53:a5:19:4d:98:a5:10:1b:
dd:b7:ec:a3:d3:37:77:d7:88:7d:c2:2b:b6:fa:07:
be:38:1f:23:4b:2a:ac:00:17:bd:79:d8:17:09:7f:
25:7f:f5:3d:71:f7:42:51:bb:18:0c:34:49:9f:93:
81:c1:89:92:f3:c0:62:df:02:27:e6:74:06:06:eb:
e2:7f:13:40:3b:6a:fb:80:8c:a2:ef:db:d0:c2:7e:
39:fb:5c:c2:6e:64:77:63:2e:ef:79:42:9c:e2:b7:
28:7a:7e:65:40:c5:2a:23:91:cd:cd:ca:ad:9c:01:
b1:3e:bb:de:29:45:6d:09:03:95:00:4e:01:82:0a:
f7:b5:da:71:55:6b:f4:02:2d:6a:70:b1:b0:19:28:
1e:fb:8f:dd:1a:80:42:84:77:60:2a:99:b0:6b:2c:
95:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:75:02:35:B4:FF:58:AF:77:2E:C6:74:0E:24:4A:81:48:67:03:87
X509v3 Authority Key Identifier:
keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1d:6f:8b:83:2c:75:c5:1d:6b:68:71:a4:f1:c2:76:5f:39:
46:19:b6:54:d1:ba:06:36:44:58:e5:53:b4:0a:2c:01:6e:bc:
2f:b6:7d:c9:8c:49:c4:5c:3f:65:d4:cd:75:80:3a:49:6b:6d:
1f:36:69:6b:e8:76:b6:c0:d4:46:bf:ac:71:85:b0:03:91:e6:
5d:1f:93:d9:bc:f2:9c:99:23:08:db:8d:d5:19:ab:67:d5:1f:
f3:d4:e4:35:15:8e:09:e0:63:e1:d0:a2:4e:a0:dd:32:94:9a:
c1:f9:b1:bf:4a:5f:ce:49:14:02:02:cc:d8:7d:62:c6:a5:30:
b2:7d:33:de:e1:8c:a7:88:be:0d:59:a0:d1:37:a1:c6:1b:03:
da:79:40:4e:ac:d5:83:26:4a:77:5b:63:19:31:3c:28:b1:6d:
67:b7:80:e5:2f:ac:41:83:5a:35:46:8e:de:25:f5:6b:9d:6e:
85:44:5c:08:bf:cd:ad:4e:d1:c9:4e:39:7e:c3:13:b2:58:74:
dd:f1:7a:71:47:01:0c:de:f9:78:03:bb:42:10:5b:06:90:0b:
b0:36:2d:4b:3c:c1:03:36:39:f7:c2:2a:2d:0e:ae:d5:d2:df:
27:9d:3c:72:1c:41:28:81:d8:95:d3:40:b9:fd:4c:c2:3b:96:
65:3c:92:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrs7CRfncS7T41ACYqCFUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZTVjNGM5OWQ2MTMxMDQ5OTgyYWY5YWQ5Yjg2NjAyYjI5
MjliYjgwHhcNMjUwNzI3MDcwMDI2WhcNMjUwNzI4MDcwMDI2WjAzMTEwLwYDVQQD
Eyg1ZTc1MDIzNWI0ZmY1OGFmNzcyZWM2NzQwZTI0NGE4MTQ4NjcwMzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47KBKPw2MOxuH5rP4GMXZc1RiLV1
Sy9bg1aauMt38F3pGbP9SQ855SV/zHCe/8thQbasqevx7EzIARtyEdf+DOELQLhB
LrlpYrp2tLSi6N+qxtyEo9Xue+kWnz2Ucid5U6UZTZilEBvdt+yj0zd314h9wiu2
+ge+OB8jSyqsABe9edgXCX8lf/U9cfdCUbsYDDRJn5OBwYmS88Bi3wIn5nQGBuvi
fxNAO2r7gIyi79vQwn45+1zCbmR3Yy7veUKc4rcoen5lQMUqI5HNzcqtnAGxPrve
KUVtCQOVAE4Bggr3tdpxVWv0Ai1qcLGwGSge+4/dGoBChHdgKpmwayyVHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF51AjW0/1ivdy7GdA4kSoFIZwOHMB8GA1UdIwQY
MBaAFOflxMmdYTEEmYKvmtm4ZgKykpu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNS1YRXlaMWhNUVNaZ3EtYTJiaG1BcktTbTdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lNzA5ZGUtNmIyZC00YmU0LTg1MDMt
YTFlNDg3N2NlZTQ4LzEvNS1YRXlaMWhNUVNaZ3EtYTJiaG1BcktTbTdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9lNzA5ZGUtNmIyZC00YmU0LTg1MDMtYTFlNDg3N2NlZTQ4
LzEvNS1YRXlaMWhNUVNaZ3EtYTJiaG1BcktTbTdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFh1vi4Ms
dcUda2hxpPHCdl85Rhm2VNG6BjZEWOVTtAosAW68L7Z9yYxJxFw/ZdTNdYA6SWtt
HzZpa+h2tsDURr+scYWwA5HmXR+T2bzynJkjCNuN1RmrZ9Uf89TkNRWOCeBj4dCi
TqDdMpSawfmxv0pfzkkUAgLM2H1ixqUwsn0z3uGMp4i+DVmg0TehxhsD2nlATqzV
gyZKd1tjGTE8KLFtZ7eA5S+sQYNaNUaO3iX1a51uhURcCL/NrU7RyU45fsMTslh0
3fF6cUcBDN75eAO7QhBbBpALsDYtSzzBAzY598IqLQ6u1dLfJ508chxBKIHYldNA
uf1MwjuWZTySNg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:37:21 2025 by rpki-client