Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
File: 5zcPsJ5SI60eRI9MDxYv6plae1Y.mft (raw, json)
Hash identifier: 91fBbdd6CHkC0JghCsRBv3h/wAGzupeAJSI57NFTZIo=
Subject key identifier: 86:37:D6:E2:FB:FB:B1:AF:6C:E8:DB:B5:3E:49:B9:1A:72:EC:29:F9
Authority key identifier: E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56
Certificate issuer: /CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
Certificate serial: 01993500B6A22C6E8196520B6A804D76CBE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
Manifest number: 149A
Signing time: Wed 10 Sep 2025 19:01:02 +0000
Manifest this update: Wed 10 Sep 2025 19:01:02 +0000
Manifest next update: Thu 11 Sep 2025 19:01:02 +0000
Files and hashes: 1: 5zcPsJ5SI60eRI9MDxYv6plae1Y.crl (hash: LDMnDjVjcDondi4bT3EiQ59CSGQi/ot3P335VkecgcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:b6:a2:2c:6e:81:96:52:0b:6a:80:4d:76:cb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
Validity
Not Before: Sep 10 19:01:02 2025 GMT
Not After : Sep 11 19:01:02 2025 GMT
Subject: CN=8637d6e2fbfbb1af6ce8dbb53e49b91a72ec29f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a5:f5:41:9d:5a:4c:12:c6:4e:6b:e8:2e:77:
55:5c:1d:fd:81:af:f3:60:72:d8:eb:3f:60:99:91:
b9:9b:c8:9f:43:8e:65:a5:37:39:65:54:c7:df:6f:
d8:f9:ef:19:60:58:4e:82:fb:a3:10:03:5b:03:dd:
cf:d5:55:f9:c4:43:85:1c:89:b8:5e:21:4f:df:31:
f8:cc:4a:f6:7e:1e:36:4e:a6:eb:06:97:19:14:43:
d1:14:f4:5b:85:d1:32:84:f2:34:01:f1:76:92:92:
7c:e2:c6:66:fe:4f:5d:d7:a3:5c:40:f2:7f:36:40:
e9:b4:08:30:eb:cc:44:f1:23:04:36:fe:dc:36:0d:
65:c9:b8:2b:8c:41:0d:bb:d9:9f:8a:81:b4:31:07:
e6:34:41:5f:41:84:6e:e0:a5:7d:b5:a5:0a:fd:68:
75:5e:16:28:e5:8d:45:78:82:a8:26:4b:4f:12:1e:
1c:33:08:ac:f8:98:ed:aa:1d:6c:c1:f4:9c:aa:7a:
4c:0a:f8:2d:a8:e2:1c:a0:36:ad:55:7d:f0:fe:db:
9f:8c:8e:1e:79:bf:ad:91:80:03:50:a1:52:e5:8c:
cb:10:5a:5d:31:ad:4c:95:9f:0b:9c:e1:01:a8:d1:
c2:b5:65:91:00:fd:08:4c:2a:e1:28:b4:6d:f9:1e:
0e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:37:D6:E2:FB:FB:B1:AF:6C:E8:DB:B5:3E:49:B9:1A:72:EC:29:F9
X509v3 Authority Key Identifier:
keyid:E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:93:4e:a5:3d:80:48:df:24:9c:d4:88:dd:e1:89:a4:b4:eb:
b4:00:40:be:3d:14:f4:ed:80:f1:cb:bf:85:40:5d:bd:40:70:
15:52:11:2b:cd:60:82:1a:b4:1a:89:fe:06:c4:4c:22:88:d4:
95:86:9b:e9:8c:32:d9:9b:ee:b0:c9:28:87:14:3c:f7:00:53:
78:74:45:ea:e9:e4:58:e0:86:7c:29:01:a7:77:50:3a:fa:55:
1d:4e:2b:4b:e7:31:d4:39:07:7a:7b:8f:07:4d:21:c4:1f:ca:
0c:25:56:19:66:9e:54:d9:52:d9:a5:f8:e4:f1:52:b7:0a:b5:
b1:bf:06:d1:3f:07:8b:a4:b5:33:e8:b4:9b:98:36:f7:9e:66:
e1:09:e5:3a:41:68:53:d0:0d:da:91:1f:28:7d:0a:11:a1:b6:
ed:d6:18:92:4e:2f:35:5b:d7:37:44:ad:f7:44:60:9d:ce:c5:
88:4e:d3:14:b8:9c:fb:eb:66:fe:63:05:40:a2:28:ce:ee:40:
11:2d:be:3b:62:9e:0d:aa:c3:7e:aa:36:1d:0a:53:06:86:8d:
f2:6b:27:42:0c:0b:1e:e8:f4:25:71:b3:2f:65:5c:02:52:a6:
8a:aa:eb:d3:c2:ac:eb:98:a7:65:f8:f0:2a:a0:5c:dc:7e:8a:
e3:bd:d3:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1ALaiLG6BllILaoBNdsvgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MzcwZmIwOWU1MjIzYWQxZTQ0OGY0YzBmMTYyZmVhOTk1
YTdiNTYwHhcNMjUwOTEwMTkwMTAyWhcNMjUwOTExMTkwMTAyWjAzMTEwLwYDVQQD
Eyg4NjM3ZDZlMmZiZmJiMWFmNmNlOGRiYjUzZTQ5YjkxYTcyZWMyOWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06X1QZ1aTBLGTmvoLndVXB39ga/z
YHLY6z9gmZG5m8ifQ45lpTc5ZVTH32/Y+e8ZYFhOgvujEANbA93P1VX5xEOFHIm4
XiFP3zH4zEr2fh42TqbrBpcZFEPRFPRbhdEyhPI0AfF2kpJ84sZm/k9d16NcQPJ/
NkDptAgw68xE8SMENv7cNg1lybgrjEENu9mfioG0MQfmNEFfQYRu4KV9taUK/Wh1
XhYo5Y1FeIKoJktPEh4cMwis+Jjtqh1swfScqnpMCvgtqOIcoDatVX3w/tufjI4e
eb+tkYADUKFS5YzLEFpdMa1MlZ8LnOEBqNHCtWWRAP0ITCrhKLRt+R4OWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIY31uL7+7GvbOjbtT5JuRpy7Cn5MB8GA1UdIwQY
MBaAFOc3D7CeUiOtHkSPTA8WL+qZWntWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXpjUHNKNVNJNjBlUkk5TUR4WXY2cGxhZTFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84ZjIyOTMtN2RiYS00MzdiLWFmODUt
OTdlMzU1ZTUxZWYzLzEvNXpjUHNKNVNJNjBlUkk5TUR4WXY2cGxhZTFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC84ZjIyOTMtN2RiYS00MzdiLWFmODUtOTdlMzU1ZTUxZWYz
LzEvNXpjUHNKNVNJNjBlUkk5TUR4WXY2cGxhZTFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZNOpT2A
SN8knNSI3eGJpLTrtABAvj0U9O2A8cu/hUBdvUBwFVIRK81gghq0Gon+BsRMIojU
lYab6Ywy2ZvusMkohxQ89wBTeHRF6unkWOCGfCkBp3dQOvpVHU4rS+cx1DkHenuP
B00hxB/KDCVWGWaeVNlS2aX45PFStwq1sb8G0T8Hi6S1M+i0m5g2955m4QnlOkFo
U9AN2pEfKH0KEaG27dYYkk4vNVvXN0St90Rgnc7FiE7TFLic++tm/mMFQKIozu5A
ES2+O2KeDarDfqo2HQpTBoaN8msnQgwLHuj0JXGzL2VcAlKmiqrr08Ks65inZfjw
KqBc3H6K473Tqw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 23:19:42 2025 by rpki-client