Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
File: 5UTrMoWRGEs_r55xqTHLMl3LEag.mft (raw, json)
Hash identifier: /34NsBg0kBK1UrKol20FB/UJhGHofONCbku5MtJsUDs=
Subject key identifier: 4A:A7:9D:24:7D:AB:01:B1:EB:D6:50:AB:D2:EE:34:A8:84:2A:84:2E
Authority key identifier: E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8
Certificate issuer: /CN=e544eb328591184b3faf9e71a931cb325dcb11a8
Certificate serial: 019939EF7C051D3062AEFE5272BE64DD5195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
Manifest number: 0298
Signing time: Thu 11 Sep 2025 18:00:20 +0000
Manifest this update: Thu 11 Sep 2025 18:00:20 +0000
Manifest next update: Fri 12 Sep 2025 18:00:20 +0000
Files and hashes: 1: 5UTrMoWRGEs_r55xqTHLMl3LEag.crl (hash: y9zH/4PlnduKnWIBKPmn+ZP0IMsfaKT4BWjhKU2w9VQ=)
2: WZ6QV7I388WfR1atNyelt0Q9Mso.roa (hash: KwrEk8zO8slIVjQv6gkfQCNK8LKZkPpOkNAIgKKlEQo=)
3: w3ygjB50ZRx92w3E54KyIR8KqJ8.roa (hash: cXhal8oweMGLldAVM2weLR4PJghtsshTj6l0MVxO5bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 18:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:ef:7c:05:1d:30:62:ae:fe:52:72:be:64:dd:51:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544eb328591184b3faf9e71a931cb325dcb11a8
Validity
Not Before: Sep 11 18:00:20 2025 GMT
Not After : Sep 12 18:00:20 2025 GMT
Subject: CN=4aa79d247dab01b1ebd650abd2ee34a8842a842e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:af:27:8f:b6:bd:b8:a8:e3:11:d8:ea:64:d5:
53:37:76:1b:cc:2a:07:98:61:aa:71:3d:47:ef:49:
65:35:08:54:9a:07:c4:c3:b5:ae:8d:45:3f:3e:b0:
27:a8:6a:4b:7c:b6:de:22:c9:1f:99:c1:ce:93:d8:
74:71:9f:47:79:eb:47:b2:0f:9a:d6:03:cc:65:51:
ff:12:36:6f:bd:c7:8a:3a:d8:4c:47:68:b6:f8:68:
37:6c:43:0d:63:9d:c6:a9:04:97:46:ef:94:57:34:
2c:2f:cf:62:31:31:45:2f:30:ab:f8:ae:01:69:74:
ef:da:01:6c:80:83:0f:ab:c5:64:d4:2e:4c:ef:c5:
93:c6:f1:bc:6f:62:98:6e:c9:c7:97:37:49:fa:50:
6b:bb:65:ac:14:d5:ac:59:0f:3f:62:16:1b:b2:d5:
b1:cb:d8:92:12:b0:23:5b:59:06:0e:4c:45:7f:99:
0f:6e:12:f0:b3:ff:39:fd:d9:d8:0e:a1:26:7d:4b:
dd:9e:8f:ca:fe:4c:57:6c:af:fa:2b:0b:b6:eb:59:
1b:b1:05:9c:04:b4:01:d7:89:87:54:46:e3:fa:71:
80:e4:7f:de:79:e1:26:26:ea:48:fd:fe:0b:f6:b5:
1c:ee:b3:15:c7:ce:7b:48:9e:f2:e4:08:68:90:f7:
03:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A7:9D:24:7D:AB:01:B1:EB:D6:50:AB:D2:EE:34:A8:84:2A:84:2E
X509v3 Authority Key Identifier:
keyid:E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:77:d9:e4:7c:f9:57:19:f0:4f:55:e5:30:a3:38:b6:10:9b:
2f:51:2d:c5:a7:ef:97:33:79:24:0a:cd:b4:a0:72:24:36:59:
0f:03:ac:04:a9:78:a3:29:8d:f2:ce:82:5e:24:dd:a8:b5:d1:
0a:d5:66:a5:8b:45:a3:70:44:c9:8d:ac:0f:5f:66:9a:36:6b:
5c:9a:a0:c1:2b:f7:82:3b:87:28:ee:39:9f:c7:47:a5:ca:c9:
62:be:f3:0d:e1:e7:87:a7:e8:b3:1e:18:60:c5:1f:62:4c:1c:
3b:88:5e:96:99:56:82:b6:4a:98:a6:6e:bd:68:8f:40:72:52:
41:a7:2a:3f:7f:d2:be:f7:3a:c2:64:2a:d1:43:8a:86:5a:ad:
08:f5:f5:f9:f1:2c:24:2e:61:2e:27:74:c6:c6:16:ab:25:16:
18:48:eb:94:dc:0e:60:42:83:14:3b:d8:3d:d7:76:b8:cc:e1:
7f:78:e5:cb:80:c6:a2:b1:b3:78:1d:8b:e1:6a:b6:f5:3e:d4:
ae:aa:8e:f8:9e:5f:c6:71:39:a2:44:e2:f9:09:80:02:05:b6:
07:92:8f:b3:ff:e8:a3:e1:fd:e2:00:98:42:e0:9e:cd:36:08:
fc:01:d7:2b:22:84:ea:4e:ea:56:c7:04:67:64:55:36:1c:cf:
d8:74:f7:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk573wFHTBirv5Scr5k3VGVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NDRlYjMyODU5MTE4NGIzZmFmOWU3MWE5MzFjYjMyNWRj
YjExYTgwHhcNMjUwOTExMTgwMDIwWhcNMjUwOTEyMTgwMDIwWjAzMTEwLwYDVQQD
Eyg0YWE3OWQyNDdkYWIwMWIxZWJkNjUwYWJkMmVlMzRhODg0MmE4NDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAia8nj7a9uKjjEdjqZNVTN3YbzCoH
mGGqcT1H70llNQhUmgfEw7WujUU/PrAnqGpLfLbeIskfmcHOk9h0cZ9HeetHsg+a
1gPMZVH/EjZvvceKOthMR2i2+Gg3bEMNY53GqQSXRu+UVzQsL89iMTFFLzCr+K4B
aXTv2gFsgIMPq8Vk1C5M78WTxvG8b2KYbsnHlzdJ+lBru2WsFNWsWQ8/YhYbstWx
y9iSErAjW1kGDkxFf5kPbhLws/85/dnYDqEmfUvdno/K/kxXbK/6Kwu261kbsQWc
BLQB14mHVEbj+nGA5H/eeeEmJupI/f4L9rUc7rMVx857SJ7y5AhokPcD4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqnnSR9qwGx69ZQq9LuNKiEKoQuMB8GA1UdIwQY
MBaAFOVE6zKFkRhLP6+ecakxyzJdyxGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVVUck1vV1JHRXNfcjU1eHFUSExNbDNMRWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFkMTMtY2M3YS00OWQ2LTkxYzQt
NzBhYTY0NWVjYzI5LzEvNVVUck1vV1JHRXNfcjU1eHFUSExNbDNMRWFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iNDFkMTMtY2M3YS00OWQ2LTkxYzQtNzBhYTY0NWVjYzI5
LzEvNVVUck1vV1JHRXNfcjU1eHFUSExNbDNMRWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnfZ5Hz5
VxnwT1XlMKM4thCbL1EtxafvlzN5JArNtKByJDZZDwOsBKl4oymN8s6CXiTdqLXR
CtVmpYtFo3BEyY2sD19mmjZrXJqgwSv3gjuHKO45n8dHpcrJYr7zDeHnh6fosx4Y
YMUfYkwcO4helplWgrZKmKZuvWiPQHJSQacqP3/Svvc6wmQq0UOKhlqtCPX1+fEs
JC5hLid0xsYWqyUWGEjrlNwOYEKDFDvYPdd2uMzhf3jly4DGorGzeB2L4Wq29T7U
rqqO+J5fxnE5okTi+QmAAgW2B5KPs//oo+H94gCYQuCezTYI/AHXKyKE6k7qVscE
Z2RVNhzP2HT3Rg==
-----END CERTIFICATE-----
Generated at Fri Sep 12 00:47:42 2025 by rpki-client