Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft
File: 5SBEb3n_wtfDqe80DOneJXI6cZo.mft (raw, json)
Hash identifier: BNwBKxin8H+oguzl9uUxnAmVMx7SZkOIgWTXsHvz+JM=
Subject key identifier: 3A:3E:14:D8:B9:FA:0D:AD:17:68:34:3D:06:49:5A:75:47:AD:4C:55
Authority key identifier: E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
Certificate issuer: /CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Certificate serial: 0199239F0C7C58FEEFEBCB73691C1767F555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft
Manifest number: 0CEA
Signing time: Sun 07 Sep 2025 10:00:49 +0000
Manifest this update: Sun 07 Sep 2025 10:00:49 +0000
Manifest next update: Mon 08 Sep 2025 10:00:49 +0000
Files and hashes: 1: 5SBEb3n_wtfDqe80DOneJXI6cZo.crl (hash: pYm4IW7qRQGR96A4r6659nG/mePZ9YlV3sazQMJjLvE=)
2: KwGp6Z3v_f_qdKMLeB5RP3eXNRo.roa (hash: A2C/O+Kqn5BMFDMcQh3sDt1p5I358AiHafCSfwd+Wn0=)
3: lX6hj9K_SgWpbjs9Vm4h-iLqKxg.roa (hash: sh68gHRxqa7fIqQfLrHiW3Yb8Ld23ANUs7IVCd+duFY=)
4: r9qf6KgX9IgFo0eq5J1Iki9tbIU.roa (hash: 5vA2NlXN7t+qJxC8MfIinBSgfDV+e3NTP2tOSZC2XEw=)
5: tZVX3qYygm8mhqLKvtgCUl1qics.roa (hash: C3pcGXYwCjQl9eRypOyqTAkBmg+sjPi6ucd+K6cZcQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:0c:7c:58:fe:ef:eb:cb:73:69:1c:17:67:f5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Validity
Not Before: Sep 7 10:00:49 2025 GMT
Not After : Sep 8 10:00:49 2025 GMT
Subject: CN=3a3e14d8b9fa0dad1768343d06495a7547ad4c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:b0:1a:4c:08:0d:19:b5:8e:7a:61:15:08:
c9:3e:30:57:6b:40:ce:fa:81:a7:4c:7e:ec:b9:58:
69:fe:11:87:79:35:8d:cb:59:99:22:07:e8:06:c9:
f2:7a:d1:dd:ef:c5:27:75:7a:ad:df:11:3e:2e:21:
b0:ea:2f:0e:05:27:b6:f5:be:b7:af:7f:eb:64:70:
ad:a5:36:87:69:07:20:d6:c9:de:5d:1e:76:67:8e:
24:8a:22:d5:88:ab:79:fa:32:15:06:18:6a:29:f6:
02:05:68:29:7d:d4:e6:39:ec:cb:b0:97:55:c4:50:
78:03:d3:12:9a:44:57:f3:05:2c:66:d2:0c:71:fe:
46:0f:f7:af:1c:07:6c:9a:4b:52:24:7a:b1:8b:2c:
c2:6d:36:7f:2b:6b:47:ac:c0:6a:0b:5d:72:26:60:
fa:50:4c:1f:9e:bd:38:d7:3c:8d:1b:50:06:32:ac:
2e:56:b4:1d:22:8e:a6:b8:dd:4f:59:72:29:21:4a:
19:dd:80:da:40:1d:24:f9:99:bb:69:49:c1:e7:4f:
b4:98:23:66:8a:a6:f2:de:36:6b:e2:5e:b9:dd:6f:
30:18:15:25:5f:38:e9:98:6a:43:be:d6:4b:fd:f0:
4d:9a:dc:c0:29:27:1e:22:22:67:77:f5:ee:82:88:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3E:14:D8:B9:FA:0D:AD:17:68:34:3D:06:49:5A:75:47:AD:4C:55
X509v3 Authority Key Identifier:
keyid:E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:eb:0a:9e:bf:bb:fe:eb:e5:ac:fe:75:ba:51:92:81:2f:0b:
09:60:3b:54:02:fe:f9:4f:89:fe:14:17:89:4a:35:0b:6f:3e:
5d:37:ae:e5:5c:23:57:8a:20:b4:c7:c7:c8:24:4d:06:99:28:
e5:d9:01:79:64:6c:98:f1:59:3a:db:b3:ae:a0:41:45:4d:3a:
0d:dc:9b:dc:05:e5:ea:7d:2b:5d:b5:87:ea:45:36:ec:f5:ee:
8f:42:ae:e5:eb:48:08:59:ee:58:d7:e9:45:42:b1:d0:af:9e:
ac:ce:10:ed:cd:fa:ea:b6:6b:3b:bf:f6:7f:ef:1a:b0:62:75:
51:48:aa:1f:b7:74:2f:76:30:1c:ff:71:9d:22:1d:6d:3b:e8:
45:a7:23:90:27:23:5b:d9:f9:20:0e:22:0b:2e:aa:5a:2f:b1:
8d:26:60:e2:d7:50:0b:e5:c1:c0:6b:2f:a5:77:62:c6:72:f1:
06:ec:ab:24:52:6c:eb:cd:7c:41:dc:38:b6:54:7f:1e:9f:f3:
9a:fa:e5:0c:97:68:80:71:2a:99:fd:37:ec:92:18:86:d9:f1:
52:a4:df:b5:9b:ea:9f:9f:93:8e:45:2f:5b:1b:23:2c:8b:f6:
47:e1:00:19:97:f6:19:21:5e:bd:e7:2a:85:d5:5c:13:7e:0a:
7f:dc:0b:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnwx8WP7v68tzaRwXZ/VVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MjA0NDZmNzlmZmMyZDdjM2E5ZWYzNDBjZTlkZTI1NzIz
YTcxOWEwHhcNMjUwOTA3MTAwMDQ5WhcNMjUwOTA4MTAwMDQ5WjAzMTEwLwYDVQQD
EygzYTNlMTRkOGI5ZmEwZGFkMTc2ODM0M2QwNjQ5NWE3NTQ3YWQ0YzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpWwGkwIDRm1jnphFQjJPjBXa0DO
+oGnTH7suVhp/hGHeTWNy1mZIgfoBsnyetHd78UndXqt3xE+LiGw6i8OBSe29b63
r3/rZHCtpTaHaQcg1sneXR52Z44kiiLViKt5+jIVBhhqKfYCBWgpfdTmOezLsJdV
xFB4A9MSmkRX8wUsZtIMcf5GD/evHAdsmktSJHqxiyzCbTZ/K2tHrMBqC11yJmD6
UEwfnr041zyNG1AGMqwuVrQdIo6muN1PWXIpIUoZ3YDaQB0k+Zm7aUnB50+0mCNm
iqby3jZr4l653W8wGBUlXzjpmGpDvtZL/fBNmtzAKSceIiJnd/XugogWsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDo+FNi5+g2tF2g0PQZJWnVHrUxVMB8GA1UdIwQY
MBaAFOUgRG95/8LXw6nvNAzp3iVyOnGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVNCRWIzbl93dGZEcWU4MERPbmVKWEk2Y1pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMTFlZjItNzAxMi00YTZlLThhMWMt
MGUwZTEzN2U1NTkxLzEvNVNCRWIzbl93dGZEcWU4MERPbmVKWEk2Y1pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wMTFlZjItNzAxMi00YTZlLThhMWMtMGUwZTEzN2U1NTkx
LzEvNVNCRWIzbl93dGZEcWU4MERPbmVKWEk2Y1pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+sKnr+7
/uvlrP51ulGSgS8LCWA7VAL++U+J/hQXiUo1C28+XTeu5VwjV4ogtMfHyCRNBpko
5dkBeWRsmPFZOtuzrqBBRU06Ddyb3AXl6n0rXbWH6kU27PXuj0Ku5etICFnuWNfp
RUKx0K+erM4Q7c366rZrO7/2f+8asGJ1UUiqH7d0L3YwHP9xnSIdbTvoRacjkCcj
W9n5IA4iCy6qWi+xjSZg4tdQC+XBwGsvpXdixnLxBuyrJFJs6818Qdw4tlR/Hp/z
mvrlDJdogHEqmf037JIYhtnxUqTftZvqn5+TjkUvWxsjLIv2R+EAGZf2GSFevecq
hdVcE34Kf9wL7Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:51 2025 by rpki-client