Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
File: 5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft (raw, json)
Hash identifier: s9zH0g6ACaYFlBorwYy3IsULpG2AvO4R+YLZb8RDR70=
Subject key identifier: 92:45:6E:61:B3:6A:96:CE:04:0B:F1:DA:2B:9B:92:AB:79:ED:4A:86
Authority key identifier: E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
Certificate issuer: /CN=e46a3f838688843758d28057007dc6cd2898ecca
Certificate serial: 0199221E9EBEB17EA2B9312E2043EF80E40C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
Manifest number: 137F
Signing time: Sun 07 Sep 2025 03:00:56 +0000
Manifest this update: Sun 07 Sep 2025 03:00:56 +0000
Manifest next update: Mon 08 Sep 2025 03:00:56 +0000
Files and hashes: 1: 0x1lqWA0KZOHOORQhJDoeRssVQ0.roa (hash: 7p6FxiYzO+LvJNJvXWwPz8wlUJ/sKTNUZeXhx0HXHCY=)
2: 5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl (hash: BwNn6KVKHoUcAAIW6Tef0lDJTav+SJAwJ4qUMCuJZyA=)
3: K79jAuNL4y91z3YYrxbmadc1H3A.roa (hash: Ce4Ha+miko3MGw4iNBYx8goUwnDzuBC5+eb8kUBjaGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:9e:be:b1:7e:a2:b9:31:2e:20:43:ef:80:e4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46a3f838688843758d28057007dc6cd2898ecca
Validity
Not Before: Sep 7 03:00:56 2025 GMT
Not After : Sep 8 03:00:56 2025 GMT
Subject: CN=92456e61b36a96ce040bf1da2b9b92ab79ed4a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b7:15:17:71:67:84:64:d9:9a:e4:98:e5:52:
28:26:13:31:ba:8f:25:09:da:a4:e9:67:55:7b:6b:
85:35:5f:cd:d7:60:12:58:58:b6:2d:6a:bf:82:40:
fb:d1:74:e7:8a:38:ee:dc:0a:37:39:c4:94:2b:54:
27:7d:82:56:85:73:a6:14:11:9d:43:78:83:00:00:
f9:35:3c:27:ff:ca:29:d3:39:a7:ff:36:30:0c:33:
fe:21:b2:b5:8c:0c:60:a5:67:9f:51:3d:0e:07:14:
12:13:b9:36:2b:65:11:b5:6e:0e:87:8d:6f:3f:4c:
7b:91:37:31:a0:96:e3:e0:d4:64:51:63:80:90:40:
59:a4:8c:6b:4c:7e:6b:7a:d7:a2:2e:a9:ba:76:b8:
36:fe:43:36:ad:3b:b3:6d:9e:0d:71:2b:0c:b3:d8:
10:0d:03:75:30:22:bc:c8:b9:e1:6d:9e:c9:0b:45:
26:11:7a:6f:1c:02:61:ae:5e:c3:51:e1:88:79:5f:
db:41:a6:6a:a1:02:0b:a8:55:66:ea:8c:4f:ec:27:
ef:a0:2f:88:e2:39:fe:e8:b6:cb:e9:d6:bd:fd:a2:
d9:ad:5a:58:b9:73:c8:e3:93:6b:c4:d0:18:8a:a8:
f9:28:79:f7:81:09:02:86:7d:6e:f4:3b:94:3b:1f:
c3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:45:6E:61:B3:6A:96:CE:04:0B:F1:DA:2B:9B:92:AB:79:ED:4A:86
X509v3 Authority Key Identifier:
keyid:E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:29:1c:44:a2:76:69:df:de:7c:72:7d:4c:e9:19:85:4d:b9:
da:29:ae:e1:29:c6:05:b5:c3:05:89:fd:05:a1:8f:3e:13:13:
cd:99:be:aa:da:67:51:ec:39:a0:ff:2b:49:37:6b:3a:e3:9f:
39:4f:d7:93:dc:41:48:58:ec:5c:3b:4b:52:e6:93:0b:65:33:
c0:cd:af:40:de:eb:eb:a4:43:e9:dc:34:27:5d:ce:11:e2:5c:
9b:7f:ec:c3:a7:e7:50:7a:1d:7e:cf:0a:96:fe:2c:04:47:71:
43:42:0c:b9:c4:79:a6:b5:f8:89:41:ee:3f:92:22:c4:52:5a:
9b:e3:c1:30:36:fc:93:ef:f4:15:d4:03:d8:9f:af:3c:f9:dc:
2d:24:91:26:09:a4:28:43:d4:18:41:24:04:1c:20:bd:ba:7c:
cb:ee:c0:e9:40:ad:b2:04:a1:36:d6:8e:1a:a4:0b:7f:4e:ec:
db:7d:3d:92:15:6e:e6:37:d8:4b:c8:67:be:15:43:1e:f8:9d:
2f:13:15:63:fe:a3:36:30:99:20:6d:c9:f1:19:ea:e6:fb:47:
58:7d:a8:db:20:b0:b2:f7:b8:5a:9e:cb:40:97:0b:d1:9b:f9:
2b:6c:c6:da:58:3d:13:1a:75:82:36:14:f4:fd:33:85:fe:23:
54:1e:9a:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHp6+sX6iuTEuIEPvgOQMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NmEzZjgzODY4ODg0Mzc1OGQyODA1NzAwN2RjNmNkMjg5
OGVjY2EwHhcNMjUwOTA3MDMwMDU2WhcNMjUwOTA4MDMwMDU2WjAzMTEwLwYDVQQD
Eyg5MjQ1NmU2MWIzNmE5NmNlMDQwYmYxZGEyYjliOTJhYjc5ZWQ0YTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLcVF3FnhGTZmuSY5VIoJhMxuo8l
Cdqk6WdVe2uFNV/N12ASWFi2LWq/gkD70XTnijju3Ao3OcSUK1QnfYJWhXOmFBGd
Q3iDAAD5NTwn/8op0zmn/zYwDDP+IbK1jAxgpWefUT0OBxQSE7k2K2URtW4Oh41v
P0x7kTcxoJbj4NRkUWOAkEBZpIxrTH5reteiLqm6drg2/kM2rTuzbZ4NcSsMs9gQ
DQN1MCK8yLnhbZ7JC0UmEXpvHAJhrl7DUeGIeV/bQaZqoQILqFVm6oxP7CfvoC+I
4jn+6LbL6da9/aLZrVpYuXPI45NrxNAYiqj5KHn3gQkChn1u9DuUOx/DLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJFbmGzapbOBAvx2iubkqt57UqGMB8GA1UdIwQY
MBaAFORqP4OGiIQ3WNKAVwB9xs0omOzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUdvX2c0YUloRGRZMG9CWEFIM0d6U2lZN01vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC81MmNmOTktZTc5OC00Y2FiLWEzMDMt
YTNiMDZkNGU0Nzc1LzEvNUdvX2c0YUloRGRZMG9CWEFIM0d6U2lZN01vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC81MmNmOTktZTc5OC00Y2FiLWEzMDMtYTNiMDZkNGU0Nzc1
LzEvNUdvX2c0YUloRGRZMG9CWEFIM0d6U2lZN01vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnSkcRKJ2
ad/efHJ9TOkZhU252imu4SnGBbXDBYn9BaGPPhMTzZm+qtpnUew5oP8rSTdrOuOf
OU/Xk9xBSFjsXDtLUuaTC2UzwM2vQN7r66RD6dw0J13OEeJcm3/sw6fnUHodfs8K
lv4sBEdxQ0IMucR5prX4iUHuP5IixFJam+PBMDb8k+/0FdQD2J+vPPncLSSRJgmk
KEPUGEEkBBwgvbp8y+7A6UCtsgShNtaOGqQLf07s2309khVu5jfYS8hnvhVDHvid
LxMVY/6jNjCZIG3J8Rnq5vtHWH2o2yCwsve4Wp7LQJcL0Zv5K2zG2lg9Exp1gjYU
9P0zhf4jVB6axw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:56 2025 by rpki-client