Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
File: C5DjdpRNMClN6kHyH7fx4co2ipM.mft (raw, json)
Hash identifier: opupK4LhJH2bb9eXZvTGHMcyALNQ4OvxfMYJVNaUKPY=
Subject key identifier: 39:40:7F:D4:ED:6F:7F:63:CD:5F:90:C7:68:D4:06:C0:F3:6F:3F:4F
Authority key identifier: 0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
Certificate issuer: /CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Certificate serial: 0198733D23F3D5EEF6931D9380A8A405E132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
Manifest number: 91
Signing time: Mon 04 Aug 2025 04:00:43 +0000
Manifest this update: Mon 04 Aug 2025 04:00:43 +0000
Manifest next update: Tue 05 Aug 2025 04:00:43 +0000
Files and hashes: 1: C5DjdpRNMClN6kHyH7fx4co2ipM.crl (hash: nGqU7Xq1qr3cIeh7AsSb4q9NIEaAtvSuYzw7sRy5LFQ=)
2: acXUcm42IS4pl31BFqGLL598V-g.roa (hash: tv2sOndhlPwn5kgKUF5qX+dekYD4mLLwcOPc7PK40dI=)
3: n3osC5rKdM6iHPZx6MqCr3JTQWc.roa (hash: suRQqEpXKgoazuJMwgkEGufz4KYSCm9sjlRmUwQJnrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:23:f3:d5:ee:f6:93:1d:93:80:a8:a4:05:e1:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Validity
Not Before: Aug 4 04:00:43 2025 GMT
Not After : Aug 5 04:00:43 2025 GMT
Subject: CN=39407fd4ed6f7f63cd5f90c768d406c0f36f3f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:78:c4:1b:ea:8f:b1:bf:8c:94:fd:35:3f:
da:c9:48:9c:81:50:c0:9e:c2:c3:ea:49:fb:96:1b:
5b:71:5f:eb:1e:f5:12:3b:b9:a5:a4:77:e7:cb:60:
d6:e4:91:88:e9:25:00:6b:50:a0:3f:e4:d2:d0:27:
d9:c9:03:bf:c7:9f:3e:7e:63:57:7f:55:4b:67:0a:
e3:82:4e:09:93:16:c1:05:69:62:f8:ce:af:b8:d2:
a5:71:66:c2:c4:de:25:45:be:66:2d:5e:4b:25:8b:
f4:26:83:d7:b4:d2:e9:f0:11:0d:82:7d:07:c7:d3:
16:dc:18:f5:09:04:20:e0:b9:34:68:a1:d8:24:50:
88:b5:c2:9e:b4:98:c9:ac:eb:3b:c6:5a:4c:20:33:
b5:ba:4a:43:d6:ed:bf:16:e0:66:27:07:cf:5a:14:
94:52:59:bc:de:3e:40:77:d5:be:9c:2d:60:3e:f9:
48:ca:2c:64:05:4e:ee:97:86:6b:75:d5:4a:45:ae:
4f:bc:6c:8a:0b:2b:90:ea:59:b9:d2:04:d1:4e:86:
b9:bf:99:09:1b:f3:21:e2:12:d5:93:45:44:b3:ac:
2a:8d:05:46:d2:59:51:5e:0b:84:ac:1b:bc:58:20:
28:c5:14:22:20:fb:df:c8:db:a8:1a:02:7b:13:27:
07:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:40:7F:D4:ED:6F:7F:63:CD:5F:90:C7:68:D4:06:C0:F3:6F:3F:4F
X509v3 Authority Key Identifier:
keyid:0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:bf:b5:e6:06:66:ab:66:68:12:1b:bf:17:9d:a3:e4:d0:7e:
4f:fc:15:3a:3d:d4:48:88:27:f5:f9:33:e7:85:6b:64:88:9b:
26:b5:a2:a7:95:6d:b7:22:20:78:b9:3f:23:66:2f:ad:9e:0e:
27:05:ea:0e:30:4c:fe:b0:2d:3d:66:0e:d3:67:6f:e7:41:d9:
73:34:9c:94:53:94:16:5d:f9:c8:b5:2c:ac:d5:49:2c:ca:b5:
59:e2:da:f1:37:da:93:fd:35:24:98:f7:03:dc:6b:9e:a1:01:
29:2b:44:92:b5:bd:55:07:34:0d:85:9b:4e:36:ff:25:44:59:
3a:2f:62:98:8c:84:12:78:c3:9e:ec:c8:f7:47:65:a8:3c:31:
65:fb:74:24:52:df:e3:5f:82:28:ba:10:8e:3c:14:95:61:57:
72:a6:ae:7f:c8:2a:72:6b:3c:9d:dc:ab:38:63:2e:b8:2a:60:
01:bd:d2:ad:53:c3:fc:e8:9e:f7:d6:1b:40:e9:e0:46:ad:4c:
5e:72:b0:cb:18:ed:a1:94:1e:c2:47:db:77:bd:cd:5a:27:24:
58:69:aa:91:1f:4b:35:c4:e5:31:50:c5:cf:50:52:6d:81:4c:
c8:00:5b:71:6f:60:88:7e:fe:16:a8:1e:6b:ea:cb:8f:aa:17:
e6:66:c8:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPSPz1e72kx2TgKikBeEyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOTBlMzc2OTQ0ZDMwMjk0ZGVhNDFmMjFmYjdmMWUxY2Ez
NjhhOTMwHhcNMjUwODA0MDQwMDQzWhcNMjUwODA1MDQwMDQzWjAzMTEwLwYDVQQD
EygzOTQwN2ZkNGVkNmY3ZjYzY2Q1ZjkwYzc2OGQ0MDZjMGYzNmYzZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp914xBvqj7G/jJT9NT/ayUicgVDA
nsLD6kn7lhtbcV/rHvUSO7mlpHfny2DW5JGI6SUAa1CgP+TS0CfZyQO/x58+fmNX
f1VLZwrjgk4JkxbBBWli+M6vuNKlcWbCxN4lRb5mLV5LJYv0JoPXtNLp8BENgn0H
x9MW3Bj1CQQg4Lk0aKHYJFCItcKetJjJrOs7xlpMIDO1ukpD1u2/FuBmJwfPWhSU
Ulm83j5Ad9W+nC1gPvlIyixkBU7ul4ZrddVKRa5PvGyKCyuQ6lm50gTRToa5v5kJ
G/Mh4hLVk0VEs6wqjQVG0llRXguErBu8WCAoxRQiIPvfyNuoGgJ7EycHhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlAf9Ttb39jzV+Qx2jUBsDzbz9PMB8GA1UdIwQY
MBaAFAuQ43aUTTApTepB8h+38eHKNoqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzVEamRwUk5NQ2xONmtIeUg3Zng0Y28yaXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84MjBlNzItNTcwNi00NjIwLWE5OTAt
MjBhMzIxOGI5OGNkLzEvQzVEamRwUk5NQ2xONmtIeUg3Zng0Y28yaXBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84MjBlNzItNTcwNi00NjIwLWE5OTAtMjBhMzIxOGI5OGNk
LzEvQzVEamRwUk5NQ2xONmtIeUg3Zng0Y28yaXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATL+15gZm
q2ZoEhu/F52j5NB+T/wVOj3USIgn9fkz54VrZIibJrWip5VttyIgeLk/I2YvrZ4O
JwXqDjBM/rAtPWYO02dv50HZczSclFOUFl35yLUsrNVJLMq1WeLa8Tfak/01JJj3
A9xrnqEBKStEkrW9VQc0DYWbTjb/JURZOi9imIyEEnjDnuzI90dlqDwxZft0JFLf
41+CKLoQjjwUlWFXcqauf8gqcms8ndyrOGMuuCpgAb3SrVPD/Oie99YbQOngRq1M
XnKwyxjtoZQewkfbd73NWickWGmqkR9LNcTlMVDFz1BSbYFMyABbcW9giH7+Fqge
a+rLj6oX5mbIdw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:17 2025 by rpki-client