Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
File: 5q1QzkYdtcs3pYPnKbcVSZjssRc.mft (raw, json)
Hash identifier: 8VeYka9oioYP02ZjwgnpRvKWjmS6iv/bxEMK72ky1vE=
Subject key identifier: 50:32:3B:C8:3E:23:B5:70:C5:2F:C1:6F:73:1E:27:8F:5B:AD:5F:2F
Authority key identifier: E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17
Certificate issuer: /CN=e6ad50ce461db5cb37a583e729b7154998ecb117
Certificate serial: 019921B1903EC9A9E27DBFEBA7E7439475DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
Manifest number: 0425
Signing time: Sun 07 Sep 2025 01:01:48 +0000
Manifest this update: Sun 07 Sep 2025 01:01:48 +0000
Manifest next update: Mon 08 Sep 2025 01:01:48 +0000
Files and hashes: 1: 5q1QzkYdtcs3pYPnKbcVSZjssRc.crl (hash: ReKoFFkj1pdfAUUXz3GkyM2yZ6EhB5yhHJfj6bRgOuI=)
2: IGFfOsfuRBLRoDQXZrvrXPV6GDg.roa (hash: GBdaIeCW55nvw4wNP3jzu/1bBBTCqNE/C3I0UV/65Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:90:3e:c9:a9:e2:7d:bf:eb:a7:e7:43:94:75:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ad50ce461db5cb37a583e729b7154998ecb117
Validity
Not Before: Sep 7 01:01:48 2025 GMT
Not After : Sep 8 01:01:48 2025 GMT
Subject: CN=50323bc83e23b570c52fc16f731e278f5bad5f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:9e:bb:6c:96:ac:98:76:a4:d7:09:f6:d1:
fc:5e:b6:91:18:5c:7e:f6:c9:9c:73:bb:2f:03:29:
29:56:9f:13:af:43:67:7f:f9:91:33:ad:6f:93:51:
3c:44:05:74:a9:30:6a:f2:2e:86:85:19:a5:d5:72:
01:5f:10:9c:f2:68:f7:ab:a9:a4:66:86:de:9e:ef:
39:fc:ed:ea:56:6b:3b:92:16:11:5d:31:43:d8:5e:
8d:02:29:ed:fe:84:7c:bf:d6:7c:77:20:a7:2d:6f:
8f:16:fe:4d:dd:19:25:3f:a1:b8:d5:88:54:42:c2:
94:de:28:9e:da:db:fe:a1:37:63:d1:8f:93:bd:ed:
5b:0e:76:a4:31:ad:f7:a9:e6:44:8b:bd:fa:20:e4:
80:d5:4f:94:4a:fd:64:51:b3:21:48:92:2d:43:cc:
f7:6a:ae:57:25:0f:80:0f:d1:f4:fb:b3:b3:99:e7:
21:e0:d1:c5:0f:cc:72:88:0b:c6:d8:24:e0:ad:39:
18:1e:b3:20:7e:3d:d5:7c:29:0d:22:33:18:60:3f:
5d:f8:f4:c9:d6:60:e4:57:4a:b6:79:07:8f:97:11:
86:2e:bf:69:3e:40:bb:2f:44:a1:a3:cc:38:b0:58:
02:b4:4a:e2:94:a0:31:f3:70:8c:b1:24:61:8d:89:
ee:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:32:3B:C8:3E:23:B5:70:C5:2F:C1:6F:73:1E:27:8F:5B:AD:5F:2F
X509v3 Authority Key Identifier:
keyid:E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:11:63:f3:be:0d:1b:6b:80:51:a9:45:c9:b7:99:50:cb:ab:
1b:08:f1:c4:42:3e:8d:76:b9:5a:14:a3:c0:e3:eb:37:ae:8f:
ab:0d:13:b1:49:52:7b:3e:7f:e4:9c:99:12:70:15:95:c8:72:
de:65:54:d2:75:1b:4e:8b:2f:bb:79:e4:9c:97:fa:83:4a:4d:
ec:6f:03:6c:fa:99:e6:70:1e:f0:c8:ff:9b:9a:31:8e:62:0e:
3e:82:7c:35:d6:75:ea:cc:92:a9:a3:2c:fa:62:34:13:06:03:
2d:eb:60:af:5f:81:a9:3b:ea:09:13:96:e0:3a:4c:7e:3d:10:
64:a1:70:24:6a:7a:96:d9:86:ab:2b:5e:96:16:07:b8:05:58:
88:49:a3:e8:39:91:d4:26:03:e4:24:46:3a:20:a8:cc:78:73:
53:4b:8a:ed:3a:1d:eb:76:e9:17:c3:7a:e6:d1:b3:93:b2:f0:
72:99:92:ba:bd:70:95:6d:5f:8b:9e:68:9e:bf:fb:d8:3d:bd:
2d:48:f6:6a:f6:1b:e4:64:ac:a2:5c:00:f2:0f:97:10:3c:ef:
fd:e8:2c:b8:6b:71:f4:3c:58:17:2c:6e:fc:da:cc:e4:c7:c3:
52:05:c1:0d:94:a0:a4:6b:3f:7e:e2:ed:8e:24:50:02:b0:92:
9c:5c:7a:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsZA+yanifb/rp+dDlHXeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YWQ1MGNlNDYxZGI1Y2IzN2E1ODNlNzI5YjcxNTQ5OThl
Y2IxMTcwHhcNMjUwOTA3MDEwMTQ4WhcNMjUwOTA4MDEwMTQ4WjAzMTEwLwYDVQQD
Eyg1MDMyM2JjODNlMjNiNTcwYzUyZmMxNmY3MzFlMjc4ZjViYWQ1ZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum+eu2yWrJh2pNcJ9tH8XraRGFx+
9smcc7svAykpVp8Tr0Nnf/mRM61vk1E8RAV0qTBq8i6GhRml1XIBXxCc8mj3q6mk
Zobenu85/O3qVms7khYRXTFD2F6NAint/oR8v9Z8dyCnLW+PFv5N3RklP6G41YhU
QsKU3iie2tv+oTdj0Y+Tve1bDnakMa33qeZEi736IOSA1U+USv1kUbMhSJItQ8z3
aq5XJQ+AD9H0+7Ozmech4NHFD8xyiAvG2CTgrTkYHrMgfj3VfCkNIjMYYD9d+PTJ
1mDkV0q2eQePlxGGLr9pPkC7L0Sho8w4sFgCtErilKAx83CMsSRhjYnuVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAyO8g+I7VwxS/Bb3MeJ49brV8vMB8GA1UdIwQY
MBaAFOatUM5GHbXLN6WD5ym3FUmY7LEXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXExUXprWWR0Y3MzcFlQbktiY1ZTWmpzc1JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lYTE3MjUtZGNkNS00OTkwLTk0NDgt
MGViM2JhNTEzNzRjLzEvNXExUXprWWR0Y3MzcFlQbktiY1ZTWmpzc1JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9lYTE3MjUtZGNkNS00OTkwLTk0NDgtMGViM2JhNTEzNzRj
LzEvNXExUXprWWR0Y3MzcFlQbktiY1ZTWmpzc1JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvRFj874N
G2uAUalFybeZUMurGwjxxEI+jXa5WhSjwOPrN66Pqw0TsUlSez5/5JyZEnAVlchy
3mVU0nUbTosvu3nknJf6g0pN7G8DbPqZ5nAe8Mj/m5oxjmIOPoJ8NdZ16sySqaMs
+mI0EwYDLetgr1+BqTvqCROW4DpMfj0QZKFwJGp6ltmGqytelhYHuAVYiEmj6DmR
1CYD5CRGOiCozHhzU0uK7Tod63bpF8N65tGzk7LwcpmSur1wlW1fi55onr/72D29
LUj2avYb5GSsolwA8g+XEDzv/egsuGtx9DxYFyxu/NrM5MfDUgXBDZSgpGs/fuLt
jiRQArCSnFx6FQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:07 2025 by rpki-client