Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
File: 5n17NXAHcGQBPaGOKeaQzUyb1xA.mft (raw, json)
Hash identifier: OYwuEJwMUoN328Hpdk2W4mbmZO8iIiWBE9sWH2eOfBI=
Subject key identifier: 5D:68:FA:F9:C6:85:47:B8:50:B2:0D:84:11:FE:DF:2E:19:DD:2A:FB
Authority key identifier: E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
Certificate issuer: /CN=e67d7b3570077064013da18e29e690cd4c9bd710
Certificate serial: 01993424F7D4FE6959FAA16A12FB30457545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
Manifest number: 035E
Signing time: Wed 10 Sep 2025 15:01:01 +0000
Manifest this update: Wed 10 Sep 2025 15:01:01 +0000
Manifest next update: Thu 11 Sep 2025 15:01:01 +0000
Files and hashes: 1: 5n17NXAHcGQBPaGOKeaQzUyb1xA.crl (hash: cUZ5cEiiM2StuFu+h9IwoLtQcnJO0ohYkkQnpsTzPW8=)
2: UXfwFJz04X4XmU1ABHkr-Q0ovq0.roa (hash: vTofq9wYPlysSoUgx6HvDr7C9PTa+inohQrNa6Pfbqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:24:f7:d4:fe:69:59:fa:a1:6a:12:fb:30:45:75:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67d7b3570077064013da18e29e690cd4c9bd710
Validity
Not Before: Sep 10 15:01:01 2025 GMT
Not After : Sep 11 15:01:01 2025 GMT
Subject: CN=5d68faf9c68547b850b20d8411fedf2e19dd2afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:47:c8:2b:6a:dc:c8:03:4f:5d:44:f9:e4:ac:
a0:1e:d6:1d:f1:4c:45:e4:10:a4:09:46:ff:86:30:
18:30:4f:e8:2c:16:7c:b6:86:86:96:8c:c8:1e:01:
85:56:f7:10:9a:fd:bf:e7:b6:b5:fc:48:ca:50:28:
99:7d:8f:b9:f2:1f:43:3e:3e:65:43:24:18:57:dc:
3a:af:1f:f1:08:5c:6f:bc:96:ca:67:73:0d:c2:58:
8f:df:7f:cd:1f:c3:fa:f5:9d:56:58:73:43:07:f4:
75:7f:12:74:a1:8d:03:0c:66:b1:e1:c4:98:14:c3:
9f:b2:2b:33:aa:6e:9c:e8:ca:91:b0:95:69:e4:44:
4a:ea:0c:d9:07:2d:67:a0:fa:e3:0b:6d:36:90:78:
54:0c:01:b3:f2:04:5d:ca:d2:c6:3c:a5:5f:be:d9:
6b:7e:f7:b9:52:f0:aa:ac:c3:33:e9:ac:5c:0b:0b:
7b:67:6f:86:fb:f4:18:a6:c0:1c:67:03:c1:34:7e:
b1:41:bd:09:bf:ff:68:f6:24:14:b1:28:c7:86:fb:
31:a6:ac:b6:9d:01:49:b3:bf:df:5e:7d:0b:40:40:
34:2d:00:8f:27:f4:d8:bb:9b:84:45:5f:e3:df:9a:
ac:2d:e9:0e:1b:47:a2:69:24:cf:8c:cf:69:92:c6:
33:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:68:FA:F9:C6:85:47:B8:50:B2:0D:84:11:FE:DF:2E:19:DD:2A:FB
X509v3 Authority Key Identifier:
keyid:E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3e:2b:ba:bc:12:87:bb:b9:03:bd:99:ae:2d:13:f9:73:39:
a8:f8:48:f4:01:55:54:38:71:ee:32:a4:76:ee:be:15:45:bf:
e6:24:3a:53:89:c0:4d:16:dc:2e:95:bf:6a:fc:0f:74:df:42:
59:1f:54:da:7c:15:64:35:dd:58:67:73:84:4b:c0:a6:d6:81:
1f:58:8c:11:c4:9f:4a:c8:c5:a5:5a:da:0c:2c:2e:23:23:05:
52:3f:b3:56:51:e7:dd:74:b8:3b:6b:7c:e4:a7:19:8c:ec:bf:
59:d9:5c:9d:58:7b:9f:d3:f2:4b:6b:d5:42:e7:77:63:39:d4:
ad:87:4c:bb:73:8c:45:8e:91:43:86:5d:e4:86:ff:6e:aa:07:
59:04:01:8d:34:39:d2:7c:86:76:ab:79:49:f3:12:6c:ac:f4:
35:46:37:9c:b5:cc:69:32:a0:eb:8b:59:8e:71:4a:95:8b:f6:
37:4d:57:4d:cf:79:d0:31:c0:e7:c1:b5:6c:6f:86:bd:d9:10:
a9:21:3b:77:a1:de:8f:99:b2:25:9e:d1:87:8f:03:53:1f:60:
eb:79:97:d3:d7:f3:0b:78:63:46:09:95:dc:28:f4:70:b1:65:
5d:6a:47:a4:29:e2:04:52:8b:62:56:6e:4f:b1:4b:46:8b:6b:
b2:bd:a7:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk0JPfU/mlZ+qFqEvswRXVFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2N2Q3YjM1NzAwNzcwNjQwMTNkYTE4ZTI5ZTY5MGNkNGM5
YmQ3MTAwHhcNMjUwOTEwMTUwMTAxWhcNMjUwOTExMTUwMTAxWjAzMTEwLwYDVQQD
Eyg1ZDY4ZmFmOWM2ODU0N2I4NTBiMjBkODQxMWZlZGYyZTE5ZGQyYWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EfIK2rcyANPXUT55KygHtYd8UxF
5BCkCUb/hjAYME/oLBZ8toaGlozIHgGFVvcQmv2/57a1/EjKUCiZfY+58h9DPj5l
QyQYV9w6rx/xCFxvvJbKZ3MNwliP33/NH8P69Z1WWHNDB/R1fxJ0oY0DDGax4cSY
FMOfsiszqm6c6MqRsJVp5ERK6gzZBy1noPrjC202kHhUDAGz8gRdytLGPKVfvtlr
fve5UvCqrMMz6axcCwt7Z2+G+/QYpsAcZwPBNH6xQb0Jv/9o9iQUsSjHhvsxpqy2
nQFJs7/fXn0LQEA0LQCPJ/TYu5uERV/j35qsLekOG0eiaSTPjM9pksYzLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1o+vnGhUe4ULINhBH+3y4Z3Sr7MB8GA1UdIwQY
MBaAFOZ9ezVwB3BkAT2hjinmkM1Mm9cQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lYjdlMGMtNTlhMS00ZjkzLThiMjct
YWM0ODgzZTQ3NjY1LzEvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lYjdlMGMtNTlhMS00ZjkzLThiMjctYWM0ODgzZTQ3NjY1
LzEvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYD4rurwS
h7u5A72Zri0T+XM5qPhI9AFVVDhx7jKkdu6+FUW/5iQ6U4nATRbcLpW/avwPdN9C
WR9U2nwVZDXdWGdzhEvAptaBH1iMEcSfSsjFpVraDCwuIyMFUj+zVlHn3XS4O2t8
5KcZjOy/WdlcnVh7n9PyS2vVQud3YznUrYdMu3OMRY6RQ4Zd5Ib/bqoHWQQBjTQ5
0nyGdqt5SfMSbKz0NUY3nLXMaTKg64tZjnFKlYv2N01XTc950DHA58G1bG+GvdkQ
qSE7d6Hej5myJZ7Rh48DUx9g63mX09fzC3hjRgmV3Cj0cLFlXWpHpCniBFKLYlZu
T7FLRotrsr2niQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 22:57:58 2025 by rpki-client