Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
File: 5b86csrW9LPcMFtMvjEIcFHZg_Y.mft (raw, json)
Hash identifier: 4YG3LDOWU2zMXXzOwWg08U2CDsD1JWvAGtoiyF96GKU=
Subject key identifier: B2:76:50:CB:B3:60:1F:71:44:F4:7F:09:24:FA:57:80:EB:D2:36:5C
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 01992FA3CFE167371D515E70AD2C2916FEDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
Manifest number: 0F7B
Signing time: Tue 09 Sep 2025 18:01:28 +0000
Manifest this update: Tue 09 Sep 2025 18:01:28 +0000
Manifest next update: Wed 10 Sep 2025 18:01:28 +0000
Files and hashes: 1: 0RZPruEGTKhoR1hKNPIRExdYXzg.roa (hash: Ylgp4cjK+Zluy/09si0hlIXpapeYNCr3ajFNEzNms3k=)
2: 5b86csrW9LPcMFtMvjEIcFHZg_Y.crl (hash: dIVHNT9TW/jvVNkSgDE57pZVnYrEZLwsDEA+aI+di8k=)
3: FZgBPNc92MthOGwVWSdqr1P0HSA.roa (hash: KZQtxJF/nJvZgDa2DTtteEZwkrQ1v1OtGNXAavMBEZw=)
4: VwQVaP5PIxPzgzQslxsV-wlq09Y.roa (hash: WHonlIhX4uSQGOOrCo26yMPlgaauP4nxJI/ozD4levU=)
5: XdxSdG11uJFuStkGGDZEuqDpedA.roa (hash: cY0Wtfs/4ERYCWgjaGMffb7og7Xm7Edv+oFQtm2dqsY=)
6: gjjNG2AUNgoUUT8zwJCb0qV39gA.roa (hash: gKOOsRGMh8IWKlduiqod4keZzvv275i5NBRO12AH9MA=)
7: xUGm3kpTiMAlzgkonjqufuYlmQk.roa (hash: 3q3AXsJge0KIrT2tTs/ggx0aF7QEDS7JWPpyt1gZZ38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 18:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:a3:cf:e1:67:37:1d:51:5e:70:ad:2c:29:16:fe:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Sep 9 18:01:28 2025 GMT
Not After : Sep 10 18:01:28 2025 GMT
Subject: CN=b27650cbb3601f7144f47f0924fa5780ebd2365c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7f:fd:5f:1a:f0:27:4c:c7:48:76:79:34:30:
76:48:67:31:ef:31:02:f4:69:02:b8:24:97:1d:77:
a4:c8:c6:d3:41:db:72:66:f6:78:32:de:45:a4:26:
0e:7f:0f:50:87:d2:46:d0:ca:0b:90:a1:40:93:1d:
fb:97:a2:6f:e8:be:4a:55:36:24:91:14:2f:06:24:
75:3e:13:7e:c4:4f:1c:d8:86:bc:6a:e6:5e:f4:2b:
b9:fc:d1:69:26:be:3c:83:35:8b:ea:7c:c6:3f:fc:
c1:a9:0e:09:d3:85:84:f6:05:4f:53:fc:44:2c:50:
02:d2:1d:e3:12:a4:c0:69:48:d5:93:33:fd:ed:72:
dd:20:d1:1d:3f:4b:db:92:7d:25:20:3f:16:ac:27:
d4:b6:2a:e5:03:07:4f:9e:e0:90:0a:3b:6d:89:7b:
79:16:4c:78:7f:3e:3d:f2:b1:26:4d:72:98:f7:8b:
10:a0:8a:ed:e9:b2:f6:41:42:ce:32:0b:45:ab:ec:
35:70:20:09:93:01:00:e2:6d:f0:6f:3f:61:ca:66:
63:0b:f6:0c:b2:ee:4a:43:fb:7c:0f:a7:3b:71:8a:
cf:64:a0:52:28:87:34:da:d1:98:a3:b4:9a:c6:65:
14:3a:df:8f:56:a1:d8:b4:0e:b6:1f:a3:60:4c:71:
49:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:76:50:CB:B3:60:1F:71:44:F4:7F:09:24:FA:57:80:EB:D2:36:5C
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:cb:60:fa:7d:c9:74:fd:13:55:d6:49:ff:33:74:c6:ca:6e:
4d:5b:b0:b1:34:66:f4:a0:c1:f7:7b:c7:b6:98:33:6e:b8:ab:
74:23:cc:b4:6c:a6:ef:c3:6e:42:7a:25:f5:0d:d8:a9:4a:7f:
27:80:3e:69:ff:29:46:c1:8c:61:0d:de:cd:49:dc:a9:2b:2b:
0e:5d:3f:58:d3:37:41:be:fb:a2:bc:57:b1:a2:2a:f8:3b:fa:
08:10:a9:c9:95:6b:5e:eb:39:58:05:b1:a2:57:5a:90:3e:74:
7b:a7:de:a8:92:dd:9a:f7:4a:de:93:a6:9b:91:7a:b3:32:c8:
10:8e:56:a5:89:b2:38:75:4a:19:fc:f0:5c:54:7a:1d:37:70:
60:59:0c:c6:c4:65:4e:57:78:5f:5b:1b:1c:b1:ff:20:08:dd:
02:74:23:10:13:73:52:8a:47:42:54:1c:40:0f:f9:cd:64:ae:
8c:1a:8e:e8:cb:b5:ef:17:2c:68:ea:55:2b:d7:ce:30:53:74:
04:0c:a2:2d:41:36:63:41:93:42:9d:f0:d6:e1:a6:4f:c2:58:
09:67:2d:48:42:4b:07:c9:ef:80:a3:ce:57:b6:e5:4b:89:2f:
6d:8b:39:7e:d1:95:07:a3:39:d3:7c:0b:5b:ba:81:72:68:7e:
f4:3b:38:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkvo8/hZzcdUV5wrSwpFv7fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YmYzYTcyY2FkNmY0YjNkYzMwNWI0Y2JlMzEwODcwNTFk
OTgzZjYwHhcNMjUwOTA5MTgwMTI4WhcNMjUwOTEwMTgwMTI4WjAzMTEwLwYDVQQD
EyhiMjc2NTBjYmIzNjAxZjcxNDRmNDdmMDkyNGZhNTc4MGViZDIzNjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn/9XxrwJ0zHSHZ5NDB2SGcx7zEC
9GkCuCSXHXekyMbTQdtyZvZ4Mt5FpCYOfw9Qh9JG0MoLkKFAkx37l6Jv6L5KVTYk
kRQvBiR1PhN+xE8c2Ia8auZe9Cu5/NFpJr48gzWL6nzGP/zBqQ4J04WE9gVPU/xE
LFAC0h3jEqTAaUjVkzP97XLdINEdP0vbkn0lID8WrCfUtirlAwdPnuCQCjttiXt5
Fkx4fz498rEmTXKY94sQoIrt6bL2QULOMgtFq+w1cCAJkwEA4m3wbz9hymZjC/YM
su5KQ/t8D6c7cYrPZKBSKIc02tGYo7SaxmUUOt+PVqHYtA62H6NgTHFJQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJ2UMuzYB9xRPR/CST6V4Dr0jZcMB8GA1UdIwQY
MBaAFOW/OnLK1vSz3DBbTL4xCHBR2YP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEt
MDliZTlkYjExZjY2LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEtMDliZTlkYjExZjY2
LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMtg+n3J
dP0TVdZJ/zN0xspuTVuwsTRm9KDB93vHtpgzbrirdCPMtGym78NuQnol9Q3YqUp/
J4A+af8pRsGMYQ3ezUncqSsrDl0/WNM3Qb77orxXsaIq+Dv6CBCpyZVrXus5WAWx
oldakD50e6feqJLdmvdK3pOmm5F6szLIEI5WpYmyOHVKGfzwXFR6HTdwYFkMxsRl
Tld4X1sbHLH/IAjdAnQjEBNzUopHQlQcQA/5zWSujBqO6Mu17xcsaOpVK9fOMFN0
BAyiLUE2Y0GTQp3w1uGmT8JYCWctSEJLB8nvgKPOV7blS4kvbYs5ftGVB6M503wL
W7qBcmh+9Ds4vw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 03:58:08 2025 by rpki-client