Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
File: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft (raw, json)
Hash identifier: FEhHePmQ1WK3olDnfbYlMG6n9f4SmH3QFkbvrhCO/SM=
Subject key identifier: 2A:AA:F9:56:02:5F:7D:92:13:AA:69:14:C6:D6:DD:9D:E3:D3:09:65
Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
Certificate issuer: /CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Certificate serial: 0199228CAB8FE71C5C6CE4090C8721A1F111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 05:01:08 +0000
Manifest this update: Sun 07 Sep 2025 05:01:08 +0000
Manifest next update: Mon 08 Sep 2025 05:01:08 +0000
Files and hashes: 1: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl (hash: XJg0gHbdhIGh/XKTGST7UnhL9vAixxsn3Qx/LKr5BhU=)
2: qvfFT1waDERLpkfbuL979IFfQzo.roa (hash: paMjx2cHD10xNMb2RegQEWwQPemRR0QtwqJzV/kovDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:ab:8f:e7:1c:5c:6c:e4:09:0c:87:21:a1:f1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Validity
Not Before: Sep 7 05:01:08 2025 GMT
Not After : Sep 8 05:01:08 2025 GMT
Subject: CN=2aaaf956025f7d9213aa6914c6d6dd9de3d30965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:1d:5f:f9:0a:e4:5f:bf:1f:39:27:d3:b3:
7e:9c:f2:f8:d6:66:91:ba:75:47:9c:e2:12:48:cc:
cf:30:70:f4:0f:79:58:51:70:0a:d9:50:53:dc:eb:
72:78:61:b8:37:cd:15:57:b5:2d:c7:95:3d:39:f1:
d8:40:94:9c:24:bd:d8:e5:d1:54:9a:81:3e:04:3f:
0b:46:93:45:cf:d6:7c:c6:83:28:65:10:09:0e:94:
70:cd:4d:fa:78:18:b4:b8:21:2c:aa:91:52:b7:3f:
80:83:fd:ea:d3:67:b1:1d:df:e0:de:45:c3:b4:df:
40:35:05:89:21:ed:c5:ed:e2:0b:a6:b4:79:ad:9f:
dc:b1:49:b9:c5:53:2e:de:72:71:8c:30:e2:07:36:
71:a0:81:25:6c:c9:d9:6c:67:51:42:b2:ad:fc:52:
1b:b7:3d:20:83:09:6a:21:c8:8f:fb:f5:33:93:a8:
4f:bd:27:4d:1c:1b:a7:08:38:ab:74:d1:bb:70:71:
09:1f:0d:8e:a0:40:2f:42:c4:90:37:6a:43:d0:db:
cd:35:d2:51:6f:57:60:82:2a:0b:a7:25:a0:21:b1:
e1:14:80:9a:44:9f:f3:d7:e1:62:67:4c:f8:3f:9b:
df:9b:0a:21:dd:66:f0:17:ec:01:bf:f8:d1:2f:de:
73:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AA:F9:56:02:5F:7D:92:13:AA:69:14:C6:D6:DD:9D:E3:D3:09:65
X509v3 Authority Key Identifier:
keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a9:a7:4e:42:8e:1e:3c:d6:05:f8:1b:04:fc:ef:72:16:9a:
12:38:ba:c3:f2:b5:2b:98:0d:b3:57:e8:73:da:df:d2:ed:f3:
37:aa:86:1c:8e:d7:8c:4a:48:4f:11:49:68:3f:9d:f0:61:a1:
e7:02:93:f2:cb:9e:22:3b:17:3e:2b:f5:7d:3b:f4:5d:42:5c:
ac:64:3a:68:6f:c7:d9:e3:22:54:74:32:a4:e9:48:a3:1a:20:
c7:14:36:ae:ff:48:d4:b0:33:a4:ff:1a:a5:90:85:23:a1:48:
27:c1:68:ad:08:88:d1:ea:34:ae:ba:6e:6a:be:59:51:3d:e6:
97:8c:e1:dd:74:cb:af:07:9b:69:7e:ce:33:cf:87:4e:0b:f2:
81:fc:ad:c9:c0:0c:72:d4:b0:c4:fb:64:c0:d8:05:57:27:f2:
5f:5b:37:76:20:7e:36:f0:6d:5f:8c:a9:98:46:4d:aa:aa:ee:
55:b1:50:6a:f8:e6:99:6f:4f:42:80:d0:06:d6:bf:9c:da:71:
8d:47:c8:4f:4c:84:9c:d1:4f:3c:c1:f6:9e:af:16:62:6d:cf:
2d:fa:e0:10:74:2c:a0:51:1c:a8:ac:2b:59:42:d8:f8:4a:8f:
6c:53:de:3c:01:05:a0:62:77:46:e4:38:1d:e5:1c:43:a2:ac:
c7:9e:2e:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijKuP5xxcbOQJDIchofERMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MWQ3MDlkOGIxODRjNWE1MGM5NDMxZGNjYWY2NDliYzg2
ODQ3MDQwHhcNMjUwOTA3MDUwMTA4WhcNMjUwOTA4MDUwMTA4WjAzMTEwLwYDVQQD
EygyYWFhZjk1NjAyNWY3ZDkyMTNhYTY5MTRjNmQ2ZGQ5ZGUzZDMwOTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN4dX/kK5F+/Hzkn07N+nPL41maR
unVHnOISSMzPMHD0D3lYUXAK2VBT3OtyeGG4N80VV7Utx5U9OfHYQJScJL3Y5dFU
moE+BD8LRpNFz9Z8xoMoZRAJDpRwzU36eBi0uCEsqpFStz+Ag/3q02exHd/g3kXD
tN9ANQWJIe3F7eILprR5rZ/csUm5xVMu3nJxjDDiBzZxoIElbMnZbGdRQrKt/FIb
tz0ggwlqIciP+/Uzk6hPvSdNHBunCDirdNG7cHEJHw2OoEAvQsSQN2pD0NvNNdJR
b1dggioLpyWgIbHhFICaRJ/z1+FiZ0z4P5vfmwoh3WbwF+wBv/jRL95zlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqq+VYCX32SE6ppFMbW3Z3j0wllMB8GA1UdIwQY
MBaAFOcdcJ2LGExaUMlDHcyvZJvIaEcEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXgxd25Zc1lURnBReVVNZHpLOWttOGhvUndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80Nzk5ZjYtNzY1Zi00YWQyLThjNDMt
MWM1YjEwMTJkMmMzLzEvNXgxd25Zc1lURnBReVVNZHpLOWttOGhvUndRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80Nzk5ZjYtNzY1Zi00YWQyLThjNDMtMWM1YjEwMTJkMmMz
LzEvNXgxd25Zc1lURnBReVVNZHpLOWttOGhvUndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcamnTkKO
HjzWBfgbBPzvchaaEji6w/K1K5gNs1foc9rf0u3zN6qGHI7XjEpITxFJaD+d8GGh
5wKT8sueIjsXPiv1fTv0XUJcrGQ6aG/H2eMiVHQypOlIoxogxxQ2rv9I1LAzpP8a
pZCFI6FIJ8ForQiI0eo0rrpuar5ZUT3ml4zh3XTLrwebaX7OM8+HTgvygfytycAM
ctSwxPtkwNgFVyfyX1s3diB+NvBtX4ypmEZNqqruVbFQavjmmW9PQoDQBta/nNpx
jUfIT0yEnNFPPMH2nq8WYm3PLfrgEHQsoFEcqKwrWULY+EqPbFPePAEFoGJ3RuQ4
HeUcQ6Ksx54uNA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:17 2025 by rpki-client