Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
File: t5msmJxEsuHNq8JY6WypPKrUvWQ.mft (raw, json)
Hash identifier: o2cMFYoqB8yST8r2vZEiaq6sCgxsK6mlTlPLW/c1jqg=
Subject key identifier: DF:D9:03:54:74:A0:9E:46:96:82:15:C7:3C:19:73:19:FA:75:1E:D5
Authority key identifier: B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64
Certificate issuer: /CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
Certificate serial: 019856EA1721C9768270B418A3DC84884FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
Manifest number: 09AA
Signing time: Tue 29 Jul 2025 16:00:38 +0000
Manifest this update: Tue 29 Jul 2025 16:00:38 +0000
Manifest next update: Wed 30 Jul 2025 16:00:38 +0000
Files and hashes: 1: N5hZORY6BH0_7cHTBNOVNkVCEYU.roa (hash: WR+MD/xxBtQVHPY1qaKKu6KnkMSkFI0jT+q93Z2CIUM=)
2: eG7qPRRyMuGDnTaL5wdOylUl9yc.roa (hash: wEVy8BCY3//obLJ2YEaxXlAcf2i+3jpwZETui93UpjU=)
3: eZ9lsBSBE-9HylowSORYyQP1H3Y.roa (hash: 4bc1g2EfiPBsisazV/A2lyPDwqt6FApY78qkMRjIEcc=)
4: t5msmJxEsuHNq8JY6WypPKrUvWQ.crl (hash: mYNVSsVrc6kdpEJeiBA2SejmKmyklWQxNLz93gnJP/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:ea:17:21:c9:76:82:70:b4:18:a3:dc:84:88:4f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
Validity
Not Before: Jul 29 16:00:38 2025 GMT
Not After : Jul 30 16:00:38 2025 GMT
Subject: CN=dfd9035474a09e46968215c73c197319fa751ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fd:0b:c9:e6:4b:cd:ae:bf:31:9f:4e:3d:bc:
b6:4f:32:34:27:ba:3a:59:8d:a4:57:2b:4e:d7:db:
62:af:30:d2:eb:a9:f8:b0:44:dd:59:3c:6b:db:5c:
97:90:db:ae:80:ee:af:ca:ca:f8:1e:4a:93:c0:d0:
39:61:3d:06:a0:3f:31:f6:14:c2:36:4f:ed:b2:6f:
e4:b8:e1:ca:12:43:5b:73:ef:9b:8b:f6:29:8c:76:
9e:4c:80:e2:cf:26:53:70:82:a0:81:92:36:88:4c:
2e:11:7b:1a:b6:13:c9:a6:0f:e6:d9:a4:2c:79:41:
19:a4:de:fb:1e:27:76:2f:d2:40:69:18:08:82:07:
b9:ca:dd:46:19:9f:33:7f:82:6f:22:37:1d:fe:ea:
73:da:f0:58:01:7a:8a:62:23:f6:64:2e:fe:c2:a3:
78:c9:b1:a5:7a:46:57:dd:c1:4d:a9:07:94:9c:02:
87:63:05:a1:ee:01:bd:8e:f2:ef:54:2a:be:6c:ff:
46:bc:83:1d:91:2e:1b:b5:7d:e7:19:03:71:f2:f9:
00:52:c2:a2:a0:e5:30:83:09:2f:a0:44:c6:54:e9:
4d:60:ed:0f:9a:a5:4a:aa:2b:36:45:d2:e5:32:bf:
61:8c:3c:c4:fb:36:d8:95:05:47:fd:72:f9:f7:61:
0e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D9:03:54:74:A0:9E:46:96:82:15:C7:3C:19:73:19:FA:75:1E:D5
X509v3 Authority Key Identifier:
keyid:B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ed:8a:c3:93:f3:76:00:6b:a9:52:97:31:fc:82:86:c9:64:
d1:dd:11:c9:63:6e:b7:2e:59:eb:d2:d1:22:6d:54:16:4b:4a:
02:88:52:02:cc:c5:12:8f:49:d5:c6:f0:05:ab:d9:22:ea:88:
bc:83:07:cc:e1:a5:87:10:c4:27:75:64:be:fa:07:40:6f:0d:
d4:b2:50:87:0c:ce:1f:a8:83:33:32:ee:97:2b:46:db:11:2e:
3c:d0:e1:2c:c1:e1:45:a4:06:a2:b2:d5:cf:df:bb:10:c0:c6:
80:4b:bb:d4:b0:b1:fb:1b:e4:ac:13:b0:cb:4c:42:c7:d8:18:
6c:8d:51:24:bd:93:30:15:73:cf:97:b3:b7:b9:2c:20:c5:6e:
75:79:31:51:be:0d:43:8f:a8:39:3c:70:c3:f0:11:6b:75:07:
cd:f8:5a:ea:3b:ca:28:a9:3a:21:6e:56:cb:02:d5:42:45:a2:
a6:4a:15:a1:71:1f:01:f1:29:46:d4:96:5b:15:b2:27:55:18:
cd:96:d6:84:40:30:fd:17:d3:c4:d4:74:1d:27:7d:68:5e:aa:
e5:11:7a:01:cb:c8:f8:7c:04:e6:c3:20:16:a7:26:e9:51:85:
a2:ac:ec:79:37:21:6a:95:33:dd:d9:37:8f:f6:1f:95:46:0e:
13:cb:82:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhW6hchyXaCcLQYo9yEiE+jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OTlhYzk4OWM0NGIyZTFjZGFiYzI1OGU5NmNhOTNjYWFk
NGJkNjQwHhcNMjUwNzI5MTYwMDM4WhcNMjUwNzMwMTYwMDM4WjAzMTEwLwYDVQQD
EyhkZmQ5MDM1NDc0YTA5ZTQ2OTY4MjE1YzczYzE5NzMxOWZhNzUxZWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P0LyeZLza6/MZ9OPby2TzI0J7o6
WY2kVytO19tirzDS66n4sETdWTxr21yXkNuugO6vysr4HkqTwNA5YT0GoD8x9hTC
Nk/tsm/kuOHKEkNbc++bi/YpjHaeTIDizyZTcIKggZI2iEwuEXsathPJpg/m2aQs
eUEZpN77Hid2L9JAaRgIgge5yt1GGZ8zf4JvIjcd/upz2vBYAXqKYiP2ZC7+wqN4
ybGlekZX3cFNqQeUnAKHYwWh7gG9jvLvVCq+bP9GvIMdkS4btX3nGQNx8vkAUsKi
oOUwgwkvoETGVOlNYO0PmqVKqis2RdLlMr9hjDzE+zbYlQVH/XL592EOCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/ZA1R0oJ5GloIVxzwZcxn6dR7VMB8GA1UdIwQY
MBaAFLeZrJicRLLhzavCWOlsqTyq1L1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDVtc21KeEVzdUhOcThKWTZXeXBQS3JVdldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yZTVjNDktMGQ3NC00ODdhLWE4MWMt
OTE3NGRmNGRkYjlhLzEvdDVtc21KeEVzdUhOcThKWTZXeXBQS3JVdldRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8yZTVjNDktMGQ3NC00ODdhLWE4MWMtOTE3NGRmNGRkYjlh
LzEvdDVtc21KeEVzdUhOcThKWTZXeXBQS3JVdldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAme2Kw5Pz
dgBrqVKXMfyChslk0d0RyWNuty5Z69LRIm1UFktKAohSAszFEo9J1cbwBavZIuqI
vIMHzOGlhxDEJ3VkvvoHQG8N1LJQhwzOH6iDMzLulytG2xEuPNDhLMHhRaQGorLV
z9+7EMDGgEu71LCx+xvkrBOwy0xCx9gYbI1RJL2TMBVzz5ezt7ksIMVudXkxUb4N
Q4+oOTxww/ARa3UHzfha6jvKKKk6IW5WywLVQkWipkoVoXEfAfEpRtSWWxWyJ1UY
zZbWhEAw/RfTxNR0HSd9aF6q5RF6AcvI+HwE5sMgFqcm6VGFoqzseTchapUz3dk3
j/YflUYOE8uCUw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 18:55:16 2025 by rpki-client