Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
File: 5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json)
Hash identifier: qvbvvgTU0K/strCwCMEiY3C6jqMxqHH2db7+7cQqeMI=
Subject key identifier: 56:5C:46:64:E7:48:2D:88:30:B8:9E:D7:32:03:FA:84:CC:6E:85:D9
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial: 019936EEECD72637C1327FA0C03A4860A334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 04:00:51 +0000
Manifest this update: Thu 11 Sep 2025 04:00:51 +0000
Manifest next update: Fri 12 Sep 2025 04:00:51 +0000
Files and hashes: 1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: jTcWNCxlTr73Es+Os1rkhjNeV8qs90qCbekCa1riURA=)
2: O7xkMgYDWmT39_oyZPNETli4dGo.roa (hash: BJVxC4UljGsK/BbuRqwBk8+Scbbux5UgI7xaPeJbQCA=)
3: mTHF4xRS849mOw36faqzyw4dbV0.roa (hash: wG6gmT9BywW9Amqbl4suJT23ZQUJGIpmhCizynoZqms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ee:ec:d7:26:37:c1:32:7f:a0:c0:3a:48:60:a3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Validity
Not Before: Sep 11 04:00:51 2025 GMT
Not After : Sep 12 04:00:51 2025 GMT
Subject: CN=565c4664e7482d8830b89ed73203fa84cc6e85d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:66:0a:19:f2:49:ef:e7:20:0b:71:8d:16:48:
5a:1e:24:b8:28:b0:15:74:8f:72:c3:4e:3b:03:d6:
c3:c8:2f:b8:97:00:fa:81:c6:e3:04:04:35:12:08:
09:03:87:57:8f:c8:13:bf:8c:c7:6e:32:88:91:6f:
42:8a:04:00:51:4d:c6:f1:49:65:9e:e3:6f:7f:54:
ca:67:06:78:a5:10:f7:b7:9f:c0:b0:16:5d:8d:76:
34:95:00:0a:21:98:1c:61:9d:fe:e4:b1:40:8c:b7:
9a:a0:d1:a4:7a:a8:b3:f2:0b:cc:7b:49:b9:76:08:
f7:78:ba:b4:32:59:61:1c:ba:0f:4b:33:62:f2:b9:
f2:d1:59:7d:0b:57:8a:cb:3e:79:9a:bd:d2:ec:fc:
46:6b:ce:d3:c0:84:07:5f:17:7b:80:47:86:89:ee:
c2:dd:7e:c1:2e:a8:62:7e:b9:f6:f6:a0:a9:e1:19:
cb:db:60:7b:b7:96:da:b6:8c:c9:01:21:d7:82:f2:
77:a0:5c:4b:99:ec:d5:72:4c:44:86:4f:76:a5:e9:
72:ee:8e:80:3c:43:26:c4:23:b5:97:fc:55:e9:60:
cb:38:b8:4b:8b:52:41:85:4e:fd:92:c6:09:2b:f2:
1f:0f:f9:ec:8f:9c:45:fe:9f:b0:9b:46:77:f7:cc:
fb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5C:46:64:E7:48:2D:88:30:B8:9E:D7:32:03:FA:84:CC:6E:85:D9
X509v3 Authority Key Identifier:
keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:27:ab:b7:32:20:1b:81:84:0c:52:22:d9:12:32:c1:91:53:
f2:65:74:f6:a2:8c:07:ce:3e:8b:4f:2b:58:16:a5:48:a5:c8:
eb:ec:15:82:b3:7f:57:5b:0e:91:2f:6c:d7:97:a1:7b:b9:37:
70:4e:6e:53:ca:85:6a:39:bc:df:80:8b:49:82:69:90:b8:a3:
bf:87:2c:03:d4:02:87:bd:41:61:cd:d7:cf:b8:81:73:8e:37:
b8:8f:33:7e:99:a6:58:70:ce:61:1f:44:b2:a2:1f:b5:27:30:
a6:95:17:2a:59:76:56:11:79:00:ef:a8:d9:95:b2:32:bc:29:
57:7a:5a:ae:34:71:af:63:36:3a:c7:c2:13:14:7d:88:28:28:
6d:33:48:e7:37:3c:2e:4e:1b:45:36:d1:07:d4:47:cb:02:1e:
56:9a:4f:f1:bd:19:e4:2c:87:9e:a1:66:72:b7:d9:35:fd:6a:
8c:1b:63:cc:32:f4:9c:87:53:b7:02:80:a5:c9:33:ba:de:80:
94:f9:10:0f:5d:c7:db:92:aa:b1:21:9c:6e:cb:63:26:68:7b:
89:b7:4a:68:59:c3:a7:68:4f:53:b8:1d:ac:9b:10:0b:24:b3:
cf:11:c3:d0:4e:38:d8:f4:44:ac:72:d4:1b:45:17:36:f6:51:
d1:34:08:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk27uzXJjfBMn+gwDpIYKM0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZmUwMmYyYWE3NmM0MDJiN2Q3NmExMTRkYzc3MzVkNWY5
MzViODgwHhcNMjUwOTExMDQwMDUxWhcNMjUwOTEyMDQwMDUxWjAzMTEwLwYDVQQD
Eyg1NjVjNDY2NGU3NDgyZDg4MzBiODllZDczMjAzZmE4NGNjNmU4NWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GYKGfJJ7+cgC3GNFkhaHiS4KLAV
dI9yw047A9bDyC+4lwD6gcbjBAQ1EggJA4dXj8gTv4zHbjKIkW9CigQAUU3G8Ull
nuNvf1TKZwZ4pRD3t5/AsBZdjXY0lQAKIZgcYZ3+5LFAjLeaoNGkeqiz8gvMe0m5
dgj3eLq0MllhHLoPSzNi8rny0Vl9C1eKyz55mr3S7PxGa87TwIQHXxd7gEeGie7C
3X7BLqhifrn29qCp4RnL22B7t5batozJASHXgvJ3oFxLmezVckxEhk92pely7o6A
PEMmxCO1l/xV6WDLOLhLi1JBhU79ksYJK/IfD/nsj5xF/p+wm0Z398z7ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZcRmTnSC2IMLie1zID+oTMboXZMB8GA1UdIwQY
MBaAFOX+AvKqdsQCt9dqEU3Hc11fk1uIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgt
ZmM2MGZiMTI1NTczLzEvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgtZmM2MGZiMTI1NTcz
LzEvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSertzIg
G4GEDFIi2RIywZFT8mV09qKMB84+i08rWBalSKXI6+wVgrN/V1sOkS9s15ehe7k3
cE5uU8qFajm834CLSYJpkLijv4csA9QCh71BYc3Xz7iBc443uI8zfpmmWHDOYR9E
sqIftScwppUXKll2VhF5AO+o2ZWyMrwpV3parjRxr2M2OsfCExR9iCgobTNI5zc8
Lk4bRTbRB9RHywIeVppP8b0Z5CyHnqFmcrfZNf1qjBtjzDL0nIdTtwKApckzut6A
lPkQD13H25KqsSGcbstjJmh7ibdKaFnDp2hPU7gdrJsQCySzzxHD0E442PRErHLU
G0UXNvZR0TQIDA==
-----END CERTIFICATE-----
Generated at Thu Sep 11 12:44:59 2025 by rpki-client