Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
File: 5jEQtJQcMhHihW_w6K39FXgqyXM.mft (raw, json)
Hash identifier: AYFFAhEwHNYBPNfHSr/OGK4snR2aS4v4WjlO0RmRFeU=
Subject key identifier: 08:0B:1C:DA:02:0C:F3:BB:76:38:B1:83:D9:55:AF:7C:B7:16:D4:79
Authority key identifier: E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73
Certificate issuer: /CN=e63110b4941c3211e2856ff0e8adfd15782ac973
Certificate serial: 019923A0AE2BEE94EE76137EDC7601152FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
Manifest number: 0DD2
Signing time: Sun 07 Sep 2025 10:02:36 +0000
Manifest this update: Sun 07 Sep 2025 10:02:36 +0000
Manifest next update: Mon 08 Sep 2025 10:02:36 +0000
Files and hashes: 1: 5jEQtJQcMhHihW_w6K39FXgqyXM.crl (hash: Ji+DYJmVGm+7bAEKDxoFq3axiMSmr+2DuG4PvZ3jZjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:ae:2b:ee:94:ee:76:13:7e:dc:76:01:15:2f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63110b4941c3211e2856ff0e8adfd15782ac973
Validity
Not Before: Sep 7 10:02:36 2025 GMT
Not After : Sep 8 10:02:36 2025 GMT
Subject: CN=080b1cda020cf3bb7638b183d955af7cb716d479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f5:6a:0f:40:2f:e7:65:3c:5a:3e:87:74:b2:
a5:36:2f:52:32:8d:13:51:a6:34:0b:aa:c8:d4:cc:
7d:0a:15:1d:e3:e5:ed:5e:2f:3d:3c:54:41:01:c5:
e7:94:8f:20:1d:9f:a5:0d:d0:da:95:d8:f7:b3:9c:
55:c8:52:4e:ee:f9:48:8f:9a:55:88:a9:92:c5:a4:
bd:22:19:78:86:3a:0a:fe:2b:a5:50:4e:4e:60:85:
07:b3:9e:07:4f:86:68:23:cf:b1:61:d9:39:55:f6:
8a:d6:ac:9d:75:94:2d:83:44:e2:9e:c3:80:d8:7b:
24:8f:d2:bb:d3:dc:e2:63:f6:b3:c2:50:dd:2f:bc:
5a:3e:15:0b:f3:e9:f9:3d:fb:9b:05:d3:5f:c8:cf:
18:04:1c:a5:f3:23:9e:bd:1f:f2:38:5c:89:4d:b8:
0d:83:07:52:52:92:4c:ff:d0:be:f6:a8:db:57:59:
2d:38:cd:24:6d:aa:55:ee:0c:36:2c:e5:a1:b3:8a:
ad:c1:06:5a:41:79:09:42:32:b8:d0:e4:a4:46:c5:
84:20:bb:84:9a:29:62:15:ec:df:cd:ff:7a:cd:e0:
e7:53:9d:91:e4:6d:9e:a6:ba:11:5f:97:78:3d:be:
f2:af:28:75:b1:4f:46:4d:0e:6d:6c:0e:94:30:87:
08:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0B:1C:DA:02:0C:F3:BB:76:38:B1:83:D9:55:AF:7C:B7:16:D4:79
X509v3 Authority Key Identifier:
keyid:E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:cc:43:3f:55:19:fa:44:dd:a8:de:32:b2:9a:84:7d:0d:62:
12:ff:b8:36:26:fa:31:8e:5b:3a:0a:ac:5f:df:9b:e4:19:48:
f6:1d:df:e0:18:93:c2:89:a9:c6:c6:f7:8a:75:50:23:31:f7:
f1:4c:ff:ca:4e:1d:ff:c8:d1:b8:87:d2:a4:75:ad:7e:9a:60:
b0:99:26:ec:8e:a8:f6:c1:27:30:41:bb:ee:96:56:2b:d6:88:
1e:ca:93:c7:8e:18:4a:19:f3:88:81:e3:f3:8e:a0:31:83:f5:
36:1b:d6:d4:6c:68:fd:83:cf:b0:80:4f:08:9f:b0:a8:cb:b2:
0c:c6:82:5a:11:89:74:03:91:03:3a:56:34:54:2f:63:14:e0:
32:80:19:be:a6:72:59:4a:5e:33:af:3d:52:d6:2c:11:d7:07:
95:b3:d9:0d:3d:a8:27:fc:e6:1b:d5:51:56:3c:87:4b:d9:4a:
39:09:08:93:d5:f8:ac:f0:c7:a1:45:03:88:9d:d1:36:d9:00:
6e:16:06:09:50:ff:1f:01:db:87:2e:51:2e:77:d1:76:49:f0:
1a:82:6f:78:ad:6d:d6:f9:96:9b:f0:4c:d9:20:83:ca:a4:30:
65:96:4d:47:25:d8:63:58:62:ec:b3:e0:4e:8c:30:55:ef:d4:
3c:99:09:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoK4r7pTudhN+3HYBFS/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MzExMGI0OTQxYzMyMTFlMjg1NmZmMGU4YWRmZDE1Nzgy
YWM5NzMwHhcNMjUwOTA3MTAwMjM2WhcNMjUwOTA4MTAwMjM2WjAzMTEwLwYDVQQD
EygwODBiMWNkYTAyMGNmM2JiNzYzOGIxODNkOTU1YWY3Y2I3MTZkNDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vVqD0Av52U8Wj6HdLKlNi9SMo0T
UaY0C6rI1Mx9ChUd4+XtXi89PFRBAcXnlI8gHZ+lDdDaldj3s5xVyFJO7vlIj5pV
iKmSxaS9Ihl4hjoK/iulUE5OYIUHs54HT4ZoI8+xYdk5VfaK1qyddZQtg0TinsOA
2Hskj9K709ziY/azwlDdL7xaPhUL8+n5PfubBdNfyM8YBByl8yOevR/yOFyJTbgN
gwdSUpJM/9C+9qjbV1ktOM0kbapV7gw2LOWhs4qtwQZaQXkJQjK40OSkRsWEILuE
miliFezfzf96zeDnU52R5G2eproRX5d4Pb7yryh1sU9GTQ5tbA6UMIcIbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgLHNoCDPO7djixg9lVr3y3FtR5MB8GA1UdIwQY
MBaAFOYxELSUHDIR4oVv8Oit/RV4KslzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWpFUXRKUWNNaEhpaFdfdzZLMzlGWGdxeVhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8yNDNmYjAtZjM5MS00Yzk2LWIwM2Et
OTE1ZTYxNDMzYjNiLzEvNWpFUXRKUWNNaEhpaFdfdzZLMzlGWGdxeVhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8yNDNmYjAtZjM5MS00Yzk2LWIwM2EtOTE1ZTYxNDMzYjNi
LzEvNWpFUXRKUWNNaEhpaFdfdzZLMzlGWGdxeVhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqMxDP1UZ
+kTdqN4yspqEfQ1iEv+4Nib6MY5bOgqsX9+b5BlI9h3f4BiTwompxsb3inVQIzH3
8Uz/yk4d/8jRuIfSpHWtfppgsJkm7I6o9sEnMEG77pZWK9aIHsqTx44YShnziIHj
846gMYP1NhvW1Gxo/YPPsIBPCJ+wqMuyDMaCWhGJdAORAzpWNFQvYxTgMoAZvqZy
WUpeM689UtYsEdcHlbPZDT2oJ/zmG9VRVjyHS9lKOQkIk9X4rPDHoUUDiJ3RNtkA
bhYGCVD/HwHbhy5RLnfRdknwGoJveK1t1vmWm/BM2SCDyqQwZZZNRyXYY1hi7LPg
TowwVe/UPJkJbw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:51:01 2025 by rpki-client