Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
File: 5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json)
Hash identifier: rjBzeAIpcMcxx7qlxK0qysyI7PKEmP0woEqYhMgi3/s=
Subject key identifier: DD:C7:C9:1F:9E:D3:A2:80:AF:2C:ED:97:08:15:C3:94:AD:A5:81:72
Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
Certificate issuer: /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Certificate serial: 019921E747670E1BBAC4E9F912DFE8882AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 02:00:29 +0000
Manifest this update: Sun 07 Sep 2025 02:00:29 +0000
Manifest next update: Mon 08 Sep 2025 02:00:29 +0000
Files and hashes: 1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: YBK8UbyiyuFFMUenoYBGF33VWbEBEVMp3Ey2iBL/GKY=)
2: QdF1_Zq92wXCrTWLXFHsTX1fLOE.roa (hash: 3ntgOindNlTLmT1RU6YRq18wFcBPHz2TO/Rc5iQY6kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:47:67:0e:1b:ba:c4:e9:f9:12:df:e8:88:2a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Validity
Not Before: Sep 7 02:00:29 2025 GMT
Not After : Sep 8 02:00:29 2025 GMT
Subject: CN=ddc7c91f9ed3a280af2ced970815c394ada58172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:78:ea:50:45:f5:ee:87:38:6f:99:8f:77:48:
82:88:6a:ee:b9:b3:b5:0b:8d:65:62:cd:73:c5:36:
21:fa:e8:02:99:bf:34:3d:ca:54:70:a8:75:39:06:
54:0f:5b:08:42:ac:0b:b5:8c:af:36:96:87:0a:dc:
73:ab:0b:19:6e:b9:cb:12:a1:85:31:fb:87:2a:c4:
3a:f1:21:79:54:eb:87:10:e4:54:5e:41:d9:ae:a6:
e8:38:18:38:d8:d0:12:19:c0:53:24:06:92:c3:2c:
24:67:36:c0:f2:73:78:ec:5a:c8:b3:a6:63:71:a5:
a9:95:3a:e1:f6:31:7a:69:a4:01:32:70:2b:8a:bc:
c3:6c:80:ef:55:ed:ad:e6:e4:26:9d:6d:57:1a:df:
56:3e:c2:fa:22:ba:d4:e2:b4:29:32:b7:cc:b6:c1:
49:19:23:25:3a:11:ca:86:4d:66:e7:cb:6e:0e:c2:
91:64:a7:23:97:e3:74:eb:88:58:fa:cf:5c:65:b5:
1c:8c:b6:61:f3:d4:e2:f4:05:7c:b0:b2:e5:13:73:
af:be:8b:e3:3e:37:c5:f5:5e:4d:0f:2f:6b:5b:2d:
4b:b6:bf:22:0a:b2:72:bd:33:c8:ae:da:67:95:be:
8a:55:18:40:ad:d0:57:4a:b1:6f:b4:e9:c6:0b:26:
47:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C7:C9:1F:9E:D3:A2:80:AF:2C:ED:97:08:15:C3:94:AD:A5:81:72
X509v3 Authority Key Identifier:
keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:fe:de:90:3e:a1:2b:18:4f:02:b1:42:f7:17:2d:c0:ac:61:
61:9b:72:73:2a:39:68:fe:ac:81:af:15:67:cd:10:1b:3e:ec:
77:03:bd:16:00:37:2a:55:92:e6:8e:7e:19:33:e1:b4:7f:6c:
92:b5:a1:93:19:e3:89:98:d1:cc:72:fe:27:02:7d:a8:c5:4d:
1a:50:74:11:16:39:f6:bf:60:5a:c9:db:98:b0:96:d1:1c:40:
07:63:45:ca:f7:87:89:3d:0a:74:08:05:64:89:89:ac:62:f2:
23:7e:80:02:a6:fe:b0:b0:82:89:ad:d0:f1:09:16:d0:89:7d:
ff:31:56:4d:6c:5d:7d:68:69:a7:7e:a0:bd:b5:8e:54:75:97:
ef:a5:35:83:aa:35:eb:44:1e:ac:eb:d4:55:b7:cf:55:db:23:
0e:8f:70:8e:97:1d:38:39:f8:6c:b3:0a:c4:4f:03:da:88:9e:
83:ff:b1:af:d7:3e:7d:fe:40:78:11:71:f2:a7:fd:62:82:ba:
6e:b7:45:e3:71:84:a2:e8:ed:9f:36:a7:4b:10:4c:67:d0:cb:
3e:1f:0a:b3:af:c3:b6:6f:06:51:39:52:27:76:c8:a9:82:79:
a3:25:a3:d2:55:ee:85:68:36:a7:3b:fb:65:62:d0:cc:59:de:
6c:bc:3e:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh50dnDhu6xOn5Et/oiCrgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2OTVjZmIzNmZlNWExZjM4NGNjNzc4YWUyOTlhY2FiODFj
MjdiZmEwHhcNMjUwOTA3MDIwMDI5WhcNMjUwOTA4MDIwMDI5WjAzMTEwLwYDVQQD
EyhkZGM3YzkxZjllZDNhMjgwYWYyY2VkOTcwODE1YzM5NGFkYTU4MTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHjqUEX17oc4b5mPd0iCiGruubO1
C41lYs1zxTYh+ugCmb80PcpUcKh1OQZUD1sIQqwLtYyvNpaHCtxzqwsZbrnLEqGF
MfuHKsQ68SF5VOuHEORUXkHZrqboOBg42NASGcBTJAaSwywkZzbA8nN47FrIs6Zj
caWplTrh9jF6aaQBMnArirzDbIDvVe2t5uQmnW1XGt9WPsL6IrrU4rQpMrfMtsFJ
GSMlOhHKhk1m58tuDsKRZKcjl+N064hY+s9cZbUcjLZh89Ti9AV8sLLlE3Ovvovj
PjfF9V5NDy9rWy1Ltr8iCrJyvTPIrtpnlb6KVRhArdBXSrFvtOnGCyZHnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3HyR+e06KAryztlwgVw5StpYFyMB8GA1UdIwQY
MBaAFOaVz7Nv5aHzhMx3iuKZrKuBwnv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80OGE4YmEtZGM2MS00MmJkLTk0M2Et
YzMxZmE3MWUyNjM1LzEvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi80OGE4YmEtZGM2MS00MmJkLTk0M2EtYzMxZmE3MWUyNjM1
LzEvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlf7ekD6h
KxhPArFC9xctwKxhYZtycyo5aP6sga8VZ80QGz7sdwO9FgA3KlWS5o5+GTPhtH9s
krWhkxnjiZjRzHL+JwJ9qMVNGlB0ERY59r9gWsnbmLCW0RxAB2NFyveHiT0KdAgF
ZImJrGLyI36AAqb+sLCCia3Q8QkW0Il9/zFWTWxdfWhpp36gvbWOVHWX76U1g6o1
60QerOvUVbfPVdsjDo9wjpcdODn4bLMKxE8D2oieg/+xr9c+ff5AeBFx8qf9YoK6
brdF43GEoujtnzanSxBMZ9DLPh8Ks6/Dtm8GUTlSJ3bIqYJ5oyWj0lXuhWg2pzv7
ZWLQzFnebLw+QQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:45 2025 by rpki-client