Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
File: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft (raw, json)
Hash identifier: ZOe5CZyixsVQ1lyVnwV4QDXm5cy51YAC8c1MD//+HGU=
Subject key identifier: 1E:32:96:30:2C:E3:85:7A:08:4C:39:92:9A:1C:F4:A7:B6:22:24:86
Authority key identifier: E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
Certificate issuer: /CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Certificate serial: 01992DB54D039B197B5CBA8227BB2BC7A4B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
Manifest number: 0702
Signing time: Tue 09 Sep 2025 09:01:20 +0000
Manifest this update: Tue 09 Sep 2025 09:01:20 +0000
Manifest next update: Wed 10 Sep 2025 09:01:20 +0000
Files and hashes: 1: 00lUHR0HsWF62e0OhdTMmz1D8cI.roa (hash: 7/l5GLFu9biLRhRjYyy3+K05xs5xfnn4gHwWEjQvlNY=)
2: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl (hash: dvHjA69LuaF/G0QZh3+2701AlX3nW1Df2VFcFEl3KLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:b5:4d:03:9b:19:7b:5c:ba:82:27:bb:2b:c7:a4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Validity
Not Before: Sep 9 09:01:20 2025 GMT
Not After : Sep 10 09:01:20 2025 GMT
Subject: CN=1e3296302ce3857a084c39929a1cf4a7b6222486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:15:40:4e:12:32:7f:64:a3:11:9d:54:94:
c6:51:3d:62:39:dc:d7:12:c2:71:26:4d:9c:85:c2:
ff:8a:4a:c6:e3:84:af:92:dd:72:45:bf:82:26:25:
89:32:91:a2:b9:9a:99:ea:27:d1:5a:d2:10:14:46:
e8:17:50:b2:e6:7a:f9:6a:5b:89:0f:57:78:f3:f7:
75:bd:44:a8:d3:a0:f0:4c:93:22:f6:1c:8d:0a:f6:
cf:fa:d0:e1:5b:a3:3d:58:15:3f:3e:48:f6:42:62:
84:a9:28:74:74:a3:79:ea:ba:91:fd:5e:27:29:6d:
c1:71:0a:9c:00:6d:46:50:0b:e0:91:aa:7d:79:fd:
a5:8a:e4:97:c1:c0:7d:a5:64:c0:51:03:1e:08:33:
84:89:8a:a4:b8:1f:05:93:c6:38:0b:7d:db:9f:17:
8a:30:29:24:2e:b8:f3:69:f8:5f:f9:cd:14:23:d9:
13:c8:10:ad:13:7e:12:b4:69:17:c3:ee:f7:49:84:
2b:c7:4d:9c:47:a5:6d:5c:47:b2:80:e7:05:9f:ab:
a2:33:0a:dc:ae:f6:fe:17:d9:b4:d6:2d:7b:51:76:
95:8b:52:35:d9:f9:08:bd:ab:d2:a6:bd:c9:9a:66:
e3:ff:94:2f:6e:da:79:b6:52:e2:ac:57:cf:2b:ab:
c6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:32:96:30:2C:E3:85:7A:08:4C:39:92:9A:1C:F4:A7:B6:22:24:86
X509v3 Authority Key Identifier:
keyid:E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:81:0f:7a:46:cd:60:9c:2c:3c:61:e4:72:62:53:88:60:08:
6f:e9:4a:dd:fb:0f:98:59:82:1f:c6:e8:4c:28:8c:25:5f:c0:
d0:99:bd:99:c3:63:bf:ae:6f:1c:a5:64:9a:9a:25:03:98:8d:
c5:25:60:75:c7:e0:70:ce:75:db:c1:1c:a3:9a:85:86:a0:08:
6f:5e:bf:79:bd:ca:a6:2c:16:89:3a:55:89:32:42:43:73:74:
8a:0a:e9:31:ee:32:eb:c8:b7:a2:a1:91:1e:87:ce:4f:93:10:
c1:e0:df:bd:de:d9:80:2f:7e:7f:4f:6f:bc:ef:f4:34:04:d1:
84:da:38:a2:42:0b:af:8d:7a:28:bb:1c:1a:f2:a7:35:b8:08:
6c:3f:e0:f1:de:54:2a:e8:e5:0a:58:9b:bd:aa:95:a5:44:56:
4e:33:4a:89:78:b2:c6:5e:69:ed:a2:aa:be:f2:cd:d3:e9:a0:
91:41:08:0b:94:07:96:a0:d1:ad:ef:f9:ef:80:96:eb:65:6f:
1e:4e:16:04:26:41:d0:f6:36:be:88:c0:07:15:20:cf:4d:35:
05:ad:33:17:cb:20:96:2b:48:d1:bd:23:45:94:52:66:50:1d:
7f:44:1e:4b:31:36:95:38:fa:f5:aa:3c:6d:a5:72:88:0a:58:
fd:c7:ce:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkttU0Dmxl7XLqCJ7srx6SwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZjUxNzQxZGYxMzZmOTM4OTI1NGVmZGU0YmE5YWRjZmIw
ZGU2YmYwHhcNMjUwOTA5MDkwMTIwWhcNMjUwOTEwMDkwMTIwWjAzMTEwLwYDVQQD
EygxZTMyOTYzMDJjZTM4NTdhMDg0YzM5OTI5YTFjZjRhN2I2MjIyNDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMcVQE4SMn9koxGdVJTGUT1iOdzX
EsJxJk2chcL/ikrG44Svkt1yRb+CJiWJMpGiuZqZ6ifRWtIQFEboF1Cy5nr5aluJ
D1d48/d1vUSo06DwTJMi9hyNCvbP+tDhW6M9WBU/Pkj2QmKEqSh0dKN56rqR/V4n
KW3BcQqcAG1GUAvgkap9ef2liuSXwcB9pWTAUQMeCDOEiYqkuB8Fk8Y4C33bnxeK
MCkkLrjzafhf+c0UI9kTyBCtE34StGkXw+73SYQrx02cR6VtXEeygOcFn6uiMwrc
rvb+F9m01i17UXaVi1I12fkIvavSpr3Jmmbj/5Qvbtp5tlLirFfPK6vGIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4yljAs44V6CEw5kpoc9Ke2IiSGMB8GA1UdIwQY
MBaAFOT1F0HfE2+TiSVO/eS6mtz7Dea/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hZjFiOTMtZDZlMy00NTNkLTkxY2Mt
NDFkNzM1YmQ4YzAzLzEvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hZjFiOTMtZDZlMy00NTNkLTkxY2MtNDFkNzM1YmQ4YzAz
LzEvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjoEPekbN
YJwsPGHkcmJTiGAIb+lK3fsPmFmCH8boTCiMJV/A0Jm9mcNjv65vHKVkmpolA5iN
xSVgdcfgcM5128Eco5qFhqAIb16/eb3KpiwWiTpViTJCQ3N0igrpMe4y68i3oqGR
HofOT5MQweDfvd7ZgC9+f09vvO/0NATRhNo4okILr416KLscGvKnNbgIbD/g8d5U
KujlClibvaqVpURWTjNKiXiyxl5p7aKqvvLN0+mgkUEIC5QHlqDRre/574CW62Vv
Hk4WBCZB0PY2vojABxUgz001Ba0zF8sglitI0b0jRZRSZlAdf0QeSzE2lTj69ao8
baVyiApY/cfOSg==
-----END CERTIFICATE-----
Generated at Tue Sep 9 18:22:32 2025 by rpki-client