Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
File: 5YJfvufEOimDjqvk_IfXlDScDIA.mft (raw, json)
Hash identifier: ehYYdMKf75v6cxqZy8IS941nqyYEuED7LuwLaoa12gM=
Subject key identifier: 72:3D:14:18:82:54:01:D2:6A:E1:58:DD:C9:F8:D8:25:E8:20:8F:3F
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 01992331866D0F77353C703C40C7F2401F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
Manifest number: 13C6
Signing time: Sun 07 Sep 2025 08:01:12 +0000
Manifest this update: Sun 07 Sep 2025 08:01:12 +0000
Manifest next update: Mon 08 Sep 2025 08:01:12 +0000
Files and hashes: 1: 243IV1WXDUNyw7rjuRN5vP7IoKY.roa (hash: 0O92Hb85YHbJvLZRlVOgE6xTVbqzeKYfm5ftactSgfc=)
2: 5YJfvufEOimDjqvk_IfXlDScDIA.crl (hash: /GNjUkL6AUAGVlVmhF4ksdN7S2SZ8FHYZZ7l7f3mtMQ=)
3: QJEMytJzyAWSRjBR2dxY5oMwGis.roa (hash: 5M+REEL0tZEqMucUuofYBaLiMh3TPNgLIuPYEmYF82o=)
4: X_44cSo4WSEyK9hbGRWPV197Quc.roa (hash: HqF4r6Zk9d8QMqV8YkZoPGwq+BbeTjzJNoQ4pOBMtaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:86:6d:0f:77:35:3c:70:3c:40:c7:f2:40:1f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Sep 7 08:01:12 2025 GMT
Not After : Sep 8 08:01:12 2025 GMT
Subject: CN=723d1418825401d26ae158ddc9f8d825e8208f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5e:1f:f1:a8:df:64:54:d1:c2:30:4b:32:a6:
db:11:af:d4:85:81:4f:7e:43:ef:ad:8e:34:f9:c7:
27:e2:01:06:10:25:b5:c6:6b:02:a3:ad:db:bb:38:
85:83:86:bc:aa:1f:0d:58:f1:a6:48:6f:f9:d6:05:
b0:12:7a:31:a7:fa:0b:0a:89:b5:90:39:5d:15:3e:
61:47:e0:47:09:33:c5:de:84:cc:dc:67:1b:21:76:
5c:db:1f:25:a4:63:cf:5d:11:13:81:42:44:12:29:
6c:6e:03:6c:1d:33:3f:34:7f:ea:2f:a0:7f:df:7d:
e2:7b:b1:28:e6:61:1a:df:0b:3f:b6:be:aa:77:71:
3b:7d:75:32:32:08:40:c9:dd:ba:fb:52:fb:3b:8b:
54:ba:25:ec:b9:d4:d0:7b:0c:ca:89:be:20:99:d8:
de:71:4e:57:1a:d4:4e:e9:b5:3a:93:41:1d:cd:d1:
d9:c0:ea:e2:03:72:0a:05:34:ef:96:cf:31:10:f1:
05:7f:84:17:6e:3c:f7:10:14:5b:31:4c:84:72:d1:
b4:96:12:50:72:9d:12:3e:48:5c:b0:d5:27:c0:51:
e3:93:64:5f:8c:5f:8f:fc:a8:a6:ad:2a:bc:71:a3:
9a:b4:bb:1b:40:de:0c:e6:09:2c:95:f4:09:f3:d3:
3c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3D:14:18:82:54:01:D2:6A:E1:58:DD:C9:F8:D8:25:E8:20:8F:3F
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:90:04:df:58:f9:2f:25:df:30:4a:97:82:18:90:67:ad:fb:
ae:e0:e3:8f:29:08:23:6e:6e:3e:f9:18:29:01:03:60:44:d9:
02:17:3d:c2:31:8b:58:99:e7:fa:be:c0:2b:5a:4e:82:9c:03:
29:21:2e:1e:0f:69:3e:6e:a5:e2:37:ca:2d:02:32:72:9e:f7:
db:63:aa:ee:71:b9:c8:e5:6c:9d:cc:c0:f6:92:3d:47:f5:48:
ae:ff:09:40:f3:1b:7f:05:5b:5d:9e:2a:88:13:13:dd:6b:18:
b5:43:53:fa:80:a4:05:da:35:ca:4f:cd:fd:49:79:99:b7:6a:
0e:3e:91:a8:6b:4a:fe:53:f9:16:ea:54:02:d3:b8:53:0d:77:
c1:23:b9:f7:db:de:fa:ac:2c:37:f1:ae:9e:a6:71:ec:db:7d:
6d:6d:f7:05:4a:a5:3c:3a:07:e3:31:26:d7:0c:8a:24:fd:cf:
01:b4:a8:a1:3a:9f:cd:9c:b3:ee:56:bb:20:bf:01:c6:52:b6:
a6:14:10:7f:fa:7b:0a:0f:42:d6:31:6a:c6:7c:a0:8b:d7:ce:
4a:b8:e0:da:5e:43:97:0a:8e:3c:18:56:d9:57:03:90:82:f7:
e2:3d:68:ef:d1:6a:b4:c2:b0:50:cb:ac:1b:75:2c:79:41:fd:
25:a8:e8:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMYZtD3c1PHA8QMfyQB9/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ODI1ZmJlZTdjNDNhMjk4MzhlYWJlNGZjODdkNzk0MzQ5
YzBjODAwHhcNMjUwOTA3MDgwMTEyWhcNMjUwOTA4MDgwMTEyWjAzMTEwLwYDVQQD
Eyg3MjNkMTQxODgyNTQwMWQyNmFlMTU4ZGRjOWY4ZDgyNWU4MjA4ZjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml4f8ajfZFTRwjBLMqbbEa/UhYFP
fkPvrY40+ccn4gEGECW1xmsCo63buziFg4a8qh8NWPGmSG/51gWwEnoxp/oLCom1
kDldFT5hR+BHCTPF3oTM3GcbIXZc2x8lpGPPXRETgUJEEilsbgNsHTM/NH/qL6B/
333ie7Eo5mEa3ws/tr6qd3E7fXUyMghAyd26+1L7O4tUuiXsudTQewzKib4gmdje
cU5XGtRO6bU6k0EdzdHZwOriA3IKBTTvls8xEPEFf4QXbjz3EBRbMUyEctG0lhJQ
cp0SPkhcsNUnwFHjk2RfjF+P/KimrSq8caOatLsbQN4M5gkslfQJ89M8ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHI9FBiCVAHSauFY3cn42CXoII8/MB8GA1UdIwQY
MBaAFOWCX77nxDopg46r5PyH15Q0nAyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS83NThjOTYtNjExZC00MTY3LTgwY2Qt
MDQxYWIzMDJjMmY5LzEvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS83NThjOTYtNjExZC00MTY3LTgwY2QtMDQxYWIzMDJjMmY5
LzEvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJAE31j5
LyXfMEqXghiQZ637ruDjjykII25uPvkYKQEDYETZAhc9wjGLWJnn+r7AK1pOgpwD
KSEuHg9pPm6l4jfKLQIycp7322Oq7nG5yOVsnczA9pI9R/VIrv8JQPMbfwVbXZ4q
iBMT3WsYtUNT+oCkBdo1yk/N/Ul5mbdqDj6RqGtK/lP5FupUAtO4Uw13wSO599ve
+qwsN/GunqZx7Nt9bW33BUqlPDoH4zEm1wyKJP3PAbSooTqfzZyz7la7IL8BxlK2
phQQf/p7Cg9C1jFqxnygi9fOSrjg2l5DlwqOPBhW2VcDkIL34j1o79FqtMKwUMus
G3UseUH9JajohQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:18 2025 by rpki-client