Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
File: 5NJxw_qQOlkP31SJlEnmmPLpxjI.mft (raw, json)
Hash identifier: INX58GlPMCadfK2J+FUb9T5bUeQwD2wS/Gco83L0fpQ=
Subject key identifier: A4:ED:5B:6A:01:C7:CE:1D:CA:CA:0F:39:0C:38:8F:EF:D6:1C:45:26
Authority key identifier: E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
Certificate issuer: /CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Certificate serial: 0199221E86D9606ED7B4FA37DBAF159B6F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 03:00:49 +0000
Manifest this update: Sun 07 Sep 2025 03:00:49 +0000
Manifest next update: Mon 08 Sep 2025 03:00:49 +0000
Files and hashes: 1: 5NJxw_qQOlkP31SJlEnmmPLpxjI.crl (hash: haYRVXPI7LsMyDzDOa3uzO6lmu0KSPW1OB97xBvfu9o=)
2: uY1QhTOWxV4UKC9D82RM9yb0zNE.roa (hash: Bvx8t4Oi0CQUF3Zey6rE/7ccr+hwq753xh5wAVW5P6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:86:d9:60:6e:d7:b4:fa:37:db:af:15:9b:6f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Validity
Not Before: Sep 7 03:00:49 2025 GMT
Not After : Sep 8 03:00:49 2025 GMT
Subject: CN=a4ed5b6a01c7ce1dcaca0f390c388fefd61c4526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:dc:2e:95:a9:d5:e4:be:45:d6:49:d5:bc:
73:12:95:ea:81:cf:8c:50:d7:9c:22:06:e0:72:1d:
65:3e:4f:9b:05:01:0d:5d:5d:8e:d3:71:12:01:cd:
19:b2:77:73:5f:8c:ed:88:e3:06:9c:72:22:cc:a0:
59:35:c9:f6:c0:16:29:0a:b9:64:9e:04:60:6c:aa:
68:26:20:55:af:ad:e3:e8:24:bf:91:10:dc:a0:ae:
6f:d9:8e:12:12:73:5a:d5:5f:11:55:f7:7e:1f:b8:
66:cd:a1:6a:c3:c9:67:fa:b7:46:89:2c:f2:0c:b9:
ec:a8:fc:7e:5c:94:72:65:26:56:02:c5:3b:40:39:
8b:70:ff:92:a5:77:61:89:c0:72:de:6f:83:c4:11:
c6:17:21:22:a0:7d:14:26:1f:2b:8e:b4:fe:c2:97:
2e:df:b8:ae:27:74:39:88:3a:b6:49:64:f6:c8:18:
1a:e6:d8:62:03:69:cb:1b:2e:27:99:68:63:c3:6f:
69:8b:56:5b:3e:ab:be:18:28:e6:aa:40:42:f8:66:
72:fb:da:70:3a:fc:72:9c:2b:b6:8c:ab:8d:69:4b:
50:9a:0e:f9:7c:33:6f:9c:27:ae:13:4f:0d:23:bf:
eb:9f:5f:1d:bd:88:b6:13:a9:06:58:47:d9:ff:9a:
60:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:ED:5B:6A:01:C7:CE:1D:CA:CA:0F:39:0C:38:8F:EF:D6:1C:45:26
X509v3 Authority Key Identifier:
keyid:E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:c6:f6:f1:2b:c5:23:f6:ed:e9:e6:27:2b:f8:57:33:6a:93:
1c:01:8c:d1:a8:24:cb:93:51:c2:71:0b:41:d6:ab:58:8f:f8:
5c:d3:02:62:7a:f3:86:f3:0c:e0:eb:dc:54:9a:92:e3:da:68:
1b:37:62:9b:82:e7:4f:97:10:2e:35:24:c6:45:9a:db:d5:4d:
ce:fe:94:37:c1:e2:3a:b9:24:3b:cd:fe:d7:66:28:44:0b:7c:
fe:01:4b:47:1e:c5:f9:95:db:24:db:7a:42:5a:70:1c:12:64:
9b:e7:1a:a7:82:a7:64:c1:d8:44:6a:d7:a4:6e:8b:af:41:fd:
e1:95:cf:79:5d:dd:ee:17:0f:e0:52:84:6d:bf:c6:f8:b4:4f:
eb:79:92:73:fe:1c:7e:a4:55:d7:8a:09:ee:28:0d:02:e8:d4:
61:1c:3d:7e:45:c1:b2:2e:bd:83:24:e4:9a:51:c8:d2:17:64:
f6:92:20:99:11:5e:2b:d9:fd:91:3e:1f:be:eb:31:c0:08:da:
c4:16:d3:26:91:90:f4:1b:70:93:6b:bf:a3:d9:77:fc:ec:2f:
0a:9e:99:62:ce:52:90:78:e6:9a:6c:c0:0e:fe:ca:56:af:13:
34:3d:09:2a:4d:f0:66:c4:cb:59:13:67:48:50:32:9d:8d:e7:
af:94:d0:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHobZYG7XtPo3268Vm2+RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZDI3MWMzZmE5MDNhNTkwZmRmNTQ4OTk0NDllNjk4ZjJl
OWM2MzIwHhcNMjUwOTA3MDMwMDQ5WhcNMjUwOTA4MDMwMDQ5WjAzMTEwLwYDVQQD
EyhhNGVkNWI2YTAxYzdjZTFkY2FjYTBmMzkwYzM4OGZlZmQ2MWM0NTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsADcLpWp1eS+RdZJ1bxzEpXqgc+M
UNecIgbgch1lPk+bBQENXV2O03ESAc0ZsndzX4ztiOMGnHIizKBZNcn2wBYpCrlk
ngRgbKpoJiBVr63j6CS/kRDcoK5v2Y4SEnNa1V8RVfd+H7hmzaFqw8ln+rdGiSzy
DLnsqPx+XJRyZSZWAsU7QDmLcP+SpXdhicBy3m+DxBHGFyEioH0UJh8rjrT+wpcu
37iuJ3Q5iDq2SWT2yBga5thiA2nLGy4nmWhjw29pi1ZbPqu+GCjmqkBC+GZy+9pw
OvxynCu2jKuNaUtQmg75fDNvnCeuE08NI7/rn18dvYi2E6kGWEfZ/5pgwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTtW2oBx84dysoPOQw4j+/WHEUmMB8GA1UdIwQY
MBaAFOTSccP6kDpZD99UiZRJ5pjy6cYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC84OTcwOTItMDc1MC00ZDk2LWIzMmYt
NWYyMDUyMzZkZTFmLzEvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC84OTcwOTItMDc1MC00ZDk2LWIzMmYtNWYyMDUyMzZkZTFm
LzEvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtMb28SvF
I/bt6eYnK/hXM2qTHAGM0agky5NRwnELQdarWI/4XNMCYnrzhvMM4OvcVJqS49po
Gzdim4LnT5cQLjUkxkWa29VNzv6UN8HiOrkkO83+12YoRAt8/gFLRx7F+ZXbJNt6
QlpwHBJkm+cap4KnZMHYRGrXpG6Lr0H94ZXPeV3d7hcP4FKEbb/G+LRP63mSc/4c
fqRV14oJ7igNAujUYRw9fkXBsi69gyTkmlHI0hdk9pIgmRFeK9n9kT4fvusxwAja
xBbTJpGQ9Btwk2u/o9l3/OwvCp6ZYs5SkHjmmmzADv7KVq8TND0JKk3wZsTLWRNn
SFAynY3nr5TQJQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:35 2025 by rpki-client