
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
File: 5pySw7nuYLoBPZQYIgQvJQBMlew.mft (raw, json)
Hash identifier: aD+BSwNNcDOA1OmOOGw6I9f/0pyDBtp/WlzSO8K0kVQ=
Subject key identifier: 0F:99:C6:8E:6A:CE:E2:A1:0F:AD:30:F4:61:46:15:C7:D3:88:EE:B0
Authority key identifier: E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
Certificate issuer: /CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Certificate serial: 0199225587CEAAAC00DF0B4AF931FF586FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 04:00:54 +0000
Manifest this update: Sun 07 Sep 2025 04:00:54 +0000
Manifest next update: Mon 08 Sep 2025 04:00:54 +0000
Files and hashes: 1: 5pySw7nuYLoBPZQYIgQvJQBMlew.crl (hash: P0yBmFJZowyX3IBrL/S1cANk5Xw1/q5cGfJFG8XUxno=)
2: rR9_uvw4xytf2agupQ_iUhFHPXQ.roa (hash: X8fcaKRyDp0VyO5muGsQviUm1Dvz7ExE7FAL5YYozyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:87:ce:aa:ac:00:df:0b:4a:f9:31:ff:58:6f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Validity
Not Before: Sep 7 04:00:54 2025 GMT
Not After : Sep 8 04:00:54 2025 GMT
Subject: CN=0f99c68e6acee2a10fad30f4614615c7d388eeb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:ba:95:a5:9b:7a:49:40:d1:90:73:19:bf:
31:9f:8f:75:0e:9b:3d:84:c6:dd:7f:16:91:57:38:
be:5c:cc:ee:7d:1b:ff:b1:6e:d5:be:b6:d6:4c:04:
21:b1:df:aa:b9:27:f8:26:b2:5e:2a:4e:fa:89:1b:
1b:15:c2:46:4d:1d:ed:b6:4a:37:99:7e:92:3f:10:
57:b4:c8:17:b8:4c:a0:90:05:06:ca:0e:21:43:ed:
ab:35:f6:91:bf:37:4b:9a:e6:e5:6b:4a:9c:21:de:
e6:ac:70:40:5b:33:cf:2d:58:fb:62:63:e4:4f:ae:
6d:8c:04:28:1d:52:1f:cc:4b:47:14:dc:7a:9d:fe:
af:29:47:41:c6:b6:e0:0a:c3:b4:1a:45:f8:64:7e:
a2:54:8a:52:18:03:00:48:6b:82:9e:51:16:ce:72:
1f:89:6b:5a:6f:7e:15:83:04:31:e4:a9:2f:f0:02:
80:ae:79:8e:63:78:ca:f7:66:d9:1c:67:c1:18:44:
91:c8:b9:d6:0f:b2:38:30:98:7f:36:1e:8a:b6:ec:
33:9e:59:eb:8e:4a:86:5a:fd:35:9c:7d:8e:7e:79:
7a:c4:ea:16:e4:74:99:ba:d7:78:2a:31:96:28:bc:
98:91:7f:da:a8:98:b4:02:e7:cb:55:e5:2d:c2:be:
63:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:99:C6:8E:6A:CE:E2:A1:0F:AD:30:F4:61:46:15:C7:D3:88:EE:B0
X509v3 Authority Key Identifier:
keyid:E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:bd:84:e7:ee:54:60:84:4b:8a:a1:91:89:a7:54:fc:a6:8e:
7a:a5:fd:b3:b3:54:cb:db:82:b6:6f:71:91:82:6c:d9:a0:d1:
1b:1f:92:be:95:7f:72:fe:c7:42:95:8e:32:b0:d9:dd:4a:08:
4a:b2:19:b1:60:30:e2:8c:9e:2e:de:5c:3f:c7:f2:23:d9:3f:
94:3c:54:80:e1:99:52:fb:3c:b9:c7:0e:91:ac:cf:ed:13:8f:
0c:e7:d3:18:b6:11:8e:8c:da:84:3b:8c:94:6f:03:79:e5:77:
78:99:cb:c0:4a:71:b1:b6:fb:0f:22:44:ed:bf:8a:fc:fb:1c:
9c:67:9a:6b:34:66:9c:09:d1:79:96:2c:9e:ce:f2:d8:35:ea:
3f:ca:70:ff:99:bd:71:28:93:2a:8c:b7:54:5a:fd:24:b6:7f:
f2:71:57:e5:75:14:41:43:d1:75:e5:35:8b:2e:c8:13:95:b0:
22:a4:b5:f4:49:65:62:87:25:e5:c5:f9:ba:f7:86:57:74:23:
7f:e4:53:18:39:46:cf:77:a2:81:d6:ce:c1:64:c0:71:82:55:
ac:b8:a6:19:47:61:5b:cb:67:2c:f4:81:f9:d0:e0:22:23:70:
36:a6:cc:4b:5a:00:12:c9:be:8a:cf:b7:ad:46:e0:ee:55:a0:
df:c7:bb:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVYfOqqwA3wtK+TH/WG/9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2OWM5MmMzYjllZTYwYmEwMTNkOTQxODIyMDQyZjI1MDA0
Yzk1ZWMwHhcNMjUwOTA3MDQwMDU0WhcNMjUwOTA4MDQwMDU0WjAzMTEwLwYDVQQD
EygwZjk5YzY4ZTZhY2VlMmExMGZhZDMwZjQ2MTQ2MTVjN2QzODhlZWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp26laWbeklA0ZBzGb8xn491Dps9
hMbdfxaRVzi+XMzufRv/sW7VvrbWTAQhsd+quSf4JrJeKk76iRsbFcJGTR3ttko3
mX6SPxBXtMgXuEygkAUGyg4hQ+2rNfaRvzdLmubla0qcId7mrHBAWzPPLVj7YmPk
T65tjAQoHVIfzEtHFNx6nf6vKUdBxrbgCsO0GkX4ZH6iVIpSGAMASGuCnlEWznIf
iWtab34VgwQx5Kkv8AKArnmOY3jK92bZHGfBGESRyLnWD7I4MJh/Nh6Ktuwznlnr
jkqGWv01nH2Ofnl6xOoW5HSZutd4KjGWKLyYkX/aqJi0AufLVeUtwr5jCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+Zxo5qzuKhD60w9GFGFcfTiO6wMB8GA1UdIwQY
MBaAFOacksO57mC6AT2UGCIELyUATJXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXB5U3c3bnVZTG9CUFpRWUlnUXZKUUJNbGV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85Yjg0YzMtZDdmZC00M2Q4LWE4ZjEt
OTEzNzEwM2M5M2VmLzEvNXB5U3c3bnVZTG9CUFpRWUlnUXZKUUJNbGV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS85Yjg0YzMtZDdmZC00M2Q4LWE4ZjEtOTEzNzEwM2M5M2Vm
LzEvNXB5U3c3bnVZTG9CUFpRWUlnUXZKUUJNbGV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcr2E5+5U
YIRLiqGRiadU/KaOeqX9s7NUy9uCtm9xkYJs2aDRGx+SvpV/cv7HQpWOMrDZ3UoI
SrIZsWAw4oyeLt5cP8fyI9k/lDxUgOGZUvs8uccOkazP7ROPDOfTGLYRjozahDuM
lG8DeeV3eJnLwEpxsbb7DyJE7b+K/PscnGeaazRmnAnReZYsns7y2DXqP8pw/5m9
cSiTKoy3VFr9JLZ/8nFX5XUUQUPRdeU1iy7IE5WwIqS19EllYocl5cX5uveGV3Qj
f+RTGDlGz3eigdbOwWTAcYJVrLimGUdhW8tnLPSB+dDgIiNwNqbMS1oAEsm+is+3
rUbg7lWg38e73A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:39 2025 by rpki-client