Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft
File: 05SToXmX0x6NWqbMyaa9dX8VwDA.mft (raw, json)
Hash identifier: 8rLRWXBJTvYY1w8xi3dAThnqrGrI5+VsJl+6qlyi1Wk=
Subject key identifier: 9A:C2:8B:13:BD:18:73:5E:7E:1B:28:C6:35:40:48:9C:28:DE:D5:92
Authority key identifier: D3:94:93:A1:79:97:D3:1E:8D:5A:A6:CC:C9:A6:BD:75:7F:15:C0:30
Certificate issuer: /CN=d39493a17997d31e8d5aa6ccc9a6bd757f15c030
Certificate serial: 01992D7DB3A527AA8AB391494615F1861AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft
Manifest number: 1679
Signing time: Tue 09 Sep 2025 08:00:36 +0000
Manifest this update: Tue 09 Sep 2025 08:00:36 +0000
Manifest next update: Wed 10 Sep 2025 08:00:36 +0000
Files and hashes: 1: 05SToXmX0x6NWqbMyaa9dX8VwDA.crl (hash: RbR0WqLIqzA53/UNFg0lgYTPjcMboRjI0Uwov6OSM+k=)
2: q-MJPgpoCVNAGtgvIouNXgLENzk.roa (hash: BsC2KZYLnHn1uQcqBwkrRXQi/zA43li7q/QWJIEDjzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:7d:b3:a5:27:aa:8a:b3:91:49:46:15:f1:86:1a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39493a17997d31e8d5aa6ccc9a6bd757f15c030
Validity
Not Before: Sep 9 08:00:36 2025 GMT
Not After : Sep 10 08:00:36 2025 GMT
Subject: CN=9ac28b13bd18735e7e1b28c63540489c28ded592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fa:51:1c:1a:22:04:03:d6:c8:2e:2c:c0:d0:
4f:f8:a6:05:c9:04:15:62:7c:8e:c2:3e:5e:66:e0:
75:b0:6d:73:4c:b4:bf:9e:15:35:f7:7f:d0:98:f1:
38:4a:34:91:5d:ab:9a:a4:0c:d7:a3:f0:d3:99:a3:
5f:05:38:51:6b:43:71:cf:18:ce:ae:7d:fd:8b:d8:
71:10:87:16:5a:18:c5:7d:04:b8:21:31:22:71:b5:
dd:f0:ac:d3:51:28:9c:80:f4:59:d4:71:0a:f4:43:
76:ea:ad:97:f2:53:08:f2:e6:df:57:d2:35:ac:3d:
bf:be:6e:ea:cf:6b:6d:36:8e:8e:a0:66:3a:38:2f:
03:51:80:85:52:4a:bf:93:63:43:fe:23:58:e7:2d:
76:b2:ea:71:59:50:ee:4f:e7:39:0f:0c:26:54:bb:
fb:8e:60:79:52:c4:e6:f3:11:1f:a9:2a:44:a7:a6:
94:23:3e:8d:2f:e0:c1:a4:33:19:3e:c8:5e:9b:ba:
95:5e:cf:eb:08:da:b4:08:6f:ef:d8:1c:8e:80:50:
7a:a0:55:4f:81:d0:10:85:dc:c6:e6:97:84:96:09:
5e:10:8b:21:77:69:07:68:53:f4:d7:d3:a7:4e:85:
84:c7:05:d4:11:4f:bf:8f:d5:ab:43:95:4e:55:0c:
7b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C2:8B:13:BD:18:73:5E:7E:1B:28:C6:35:40:48:9C:28:DE:D5:92
X509v3 Authority Key Identifier:
keyid:D3:94:93:A1:79:97:D3:1E:8D:5A:A6:CC:C9:A6:BD:75:7F:15:C0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a4:6a:d2:bd:80:5b:9c:fd:28:d1:c2:75:7a:62:5f:65:e7:
4c:c3:63:21:95:fa:f0:48:15:59:d6:43:43:14:6a:8e:b5:83:
ac:3a:a7:8c:81:35:57:ef:a2:9c:f0:97:81:ba:a4:fa:62:ef:
1a:a2:63:e2:87:63:d3:6e:ba:45:99:e4:6b:be:4c:69:43:08:
75:28:1f:74:0b:5f:90:65:75:65:17:09:82:13:81:23:0b:69:
7f:09:d9:8d:2b:10:42:53:81:5a:c9:92:1d:29:eb:72:a9:ac:
7e:7e:7a:c0:e0:47:3d:ce:88:3b:e0:0f:ba:72:54:4d:c8:47:
ba:14:37:8c:5f:f2:dd:41:b3:7b:2b:0b:c1:f5:c4:b7:05:0b:
65:a5:fd:6e:52:7a:91:2c:cb:aa:00:7d:c9:89:24:99:2a:2a:
96:9d:cb:c8:6e:0b:1f:ca:bc:85:0a:7f:38:70:dc:51:fe:97:
f6:8c:3f:8d:ff:49:89:04:b7:38:44:dd:01:64:cb:a0:38:51:
04:98:bf:1d:90:91:8d:4b:39:b3:fd:fa:c7:6a:97:d3:8b:5b:
55:2e:29:ed:f6:89:6c:c4:61:b5:7b:8f:ff:b8:17:5a:b4:55:
9f:d8:ee:e4:3c:c9:bf:9d:9a:ea:50:b6:8f:71:ed:c4:e9:f9:
85:67:25:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZktfbOlJ6qKs5FJRhXxhhqrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzOTQ5M2ExNzk5N2QzMWU4ZDVhYTZjY2M5YTZiZDc1N2Yx
NWMwMzAwHhcNMjUwOTA5MDgwMDM2WhcNMjUwOTEwMDgwMDM2WjAzMTEwLwYDVQQD
Eyg5YWMyOGIxM2JkMTg3MzVlN2UxYjI4YzYzNTQwNDg5YzI4ZGVkNTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PpRHBoiBAPWyC4swNBP+KYFyQQV
YnyOwj5eZuB1sG1zTLS/nhU193/QmPE4SjSRXauapAzXo/DTmaNfBThRa0NxzxjO
rn39i9hxEIcWWhjFfQS4ITEicbXd8KzTUSicgPRZ1HEK9EN26q2X8lMI8ubfV9I1
rD2/vm7qz2ttNo6OoGY6OC8DUYCFUkq/k2ND/iNY5y12supxWVDuT+c5DwwmVLv7
jmB5UsTm8xEfqSpEp6aUIz6NL+DBpDMZPshem7qVXs/rCNq0CG/v2ByOgFB6oFVP
gdAQhdzG5peElgleEIshd2kHaFP019OnToWExwXUEU+/j9WrQ5VOVQx7pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrCixO9GHNefhsoxjVASJwo3tWSMB8GA1UdIwQY
MBaAFNOUk6F5l9MejVqmzMmmvXV/FcAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDVTVG9YbVgweDZOV3FiTXlhYTlkWDhWd0RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lODA0ZTQtN2YzMC00MDQ5LTk0OGIt
OTc5MjMyOTdjZGE3LzEvMDVTVG9YbVgweDZOV3FiTXlhYTlkWDhWd0RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lODA0ZTQtN2YzMC00MDQ5LTk0OGItOTc5MjMyOTdjZGE3
LzEvMDVTVG9YbVgweDZOV3FiTXlhYTlkWDhWd0RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6Rq0r2A
W5z9KNHCdXpiX2XnTMNjIZX68EgVWdZDQxRqjrWDrDqnjIE1V++inPCXgbqk+mLv
GqJj4odj0266RZnka75MaUMIdSgfdAtfkGV1ZRcJghOBIwtpfwnZjSsQQlOBWsmS
HSnrcqmsfn56wOBHPc6IO+APunJUTchHuhQ3jF/y3UGzeysLwfXEtwULZaX9blJ6
kSzLqgB9yYkkmSoqlp3LyG4LH8q8hQp/OHDcUf6X9ow/jf9JiQS3OETdAWTLoDhR
BJi/HZCRjUs5s/36x2qX04tbVS4p7faJbMRhtXuP/7gXWrRVn9ju5DzJv52a6lC2
j3HtxOn5hWclxQ==
-----END CERTIFICATE-----
Generated at Tue Sep 9 15:39:46 2025 by rpki-client