
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
File: 5aiGWRTezNyYByQf1wtrsIOkRLM.mft (raw, json)
Hash identifier: PEwII5KxxEpE6dwGNGcifmQ1BBw6jlA3/3afKKefcgU=
Subject key identifier: 00:AD:E1:C4:97:CD:F4:45:BB:D3:B3:17:1E:94:CE:96:DD:14:C8:6A
Authority key identifier: E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
Certificate issuer: /CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Certificate serial: 019873E29E8E41181F65D8BA8C6837152C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
Manifest number: 0F92
Signing time: Mon 04 Aug 2025 07:01:28 +0000
Manifest this update: Mon 04 Aug 2025 07:01:28 +0000
Manifest next update: Tue 05 Aug 2025 07:01:28 +0000
Files and hashes: 1: 5aiGWRTezNyYByQf1wtrsIOkRLM.crl (hash: jd3Ie6UcLxJVo9ETKLB+WcxFzY1/1gwVQxJ5HRZ9FMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:9e:8e:41:18:1f:65:d8:ba:8c:68:37:15:2c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Validity
Not Before: Aug 4 07:01:28 2025 GMT
Not After : Aug 5 07:01:28 2025 GMT
Subject: CN=00ade1c497cdf445bbd3b3171e94ce96dd14c86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:a0:52:0f:9e:b9:15:86:33:59:6c:93:1c:
61:1a:21:9f:f2:b0:2d:e8:a3:86:3e:6a:be:b6:b9:
34:70:9b:bc:d3:e5:f8:19:2a:86:e3:e0:c0:1e:e4:
b1:d4:49:bb:99:fc:78:a5:e7:ee:ec:14:b8:2f:06:
a9:87:77:95:34:83:af:2e:d7:fb:ce:ad:bb:73:55:
73:e0:06:7e:36:4c:d3:32:5e:91:88:ff:2a:83:62:
62:be:08:97:b7:b3:b0:b9:8d:c4:b9:e9:fe:10:31:
9e:b1:5f:14:aa:d5:17:be:70:45:77:b6:c9:28:19:
45:f9:f5:16:93:4b:9f:29:f3:c7:cf:c5:4b:2c:a6:
89:c0:af:cd:42:35:93:93:1f:35:6a:f0:26:ea:a3:
ee:84:b6:a7:36:9c:7d:53:0c:7d:0e:07:6c:47:e8:
b2:b0:31:c8:c6:b3:b4:b4:39:d7:55:06:1c:8e:62:
8a:7a:12:bf:62:56:24:47:3a:8e:ea:0d:63:70:66:
df:62:03:fd:76:f6:2c:38:f0:0e:84:51:b3:5d:3d:
08:a6:a2:ef:19:fe:0f:ed:ce:2b:7a:53:af:ee:78:
38:54:51:05:6b:fe:3b:f5:9d:49:16:a8:59:d5:17:
d5:99:27:1c:c4:02:88:66:2d:0c:66:8f:e8:b8:fc:
65:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AD:E1:C4:97:CD:F4:45:BB:D3:B3:17:1E:94:CE:96:DD:14:C8:6A
X509v3 Authority Key Identifier:
keyid:E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:bd:6b:44:ac:16:22:1d:cf:8c:44:c2:97:67:d4:9a:2e:0b:
a5:39:98:06:47:04:98:a4:30:22:6a:57:c9:31:5c:cc:ff:91:
82:cd:9c:25:27:ba:7d:68:89:e1:6e:aa:59:d0:12:45:e6:a2:
7c:df:99:61:14:fc:d7:36:6e:cc:e9:33:b1:c7:b0:e6:38:6a:
80:1b:92:22:00:8e:43:1e:4f:d8:b6:a1:a3:36:09:1d:78:c6:
2d:c9:cd:b1:3e:84:6d:ef:2e:31:ad:3f:90:64:c0:56:97:ab:
57:11:78:fd:28:0d:7e:95:96:3a:95:59:66:03:3e:2f:6b:a9:
6e:3a:49:86:6a:08:46:21:fb:cb:30:2f:ec:5e:47:13:4f:52:
da:d5:10:85:53:70:14:c3:5c:d8:ca:86:44:d5:6f:bb:cc:5d:
92:c2:b0:7e:f9:cf:9e:31:8b:44:73:cb:f6:2e:0c:a8:d6:89:
20:0b:09:80:fc:8b:91:3c:d0:83:09:78:7e:8b:37:fd:81:2b:
61:93:69:be:9f:38:06:54:6c:0a:1f:9d:a5:e8:78:5e:f8:f5:
65:7c:a1:4e:9f:36:1d:30:41:15:92:e1:e6:88:7e:2a:fd:45:
34:4e:3c:c4:7e:0a:62:3e:0b:b3:3e:9d:aa:a7:1e:a0:75:52:
93:cd:f7:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4p6OQRgfZdi6jGg3FSw7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTg4NjU5MTRkZWNjZGM5ODA3MjQxZmQ3MGI2YmIwODNh
NDQ0YjMwHhcNMjUwODA0MDcwMTI4WhcNMjUwODA1MDcwMTI4WjAzMTEwLwYDVQQD
EygwMGFkZTFjNDk3Y2RmNDQ1YmJkM2IzMTcxZTk0Y2U5NmRkMTRjODZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9ygUg+euRWGM1lskxxhGiGf8rAt
6KOGPmq+trk0cJu80+X4GSqG4+DAHuSx1Em7mfx4pefu7BS4Lwaph3eVNIOvLtf7
zq27c1Vz4AZ+NkzTMl6RiP8qg2JivgiXt7OwuY3Euen+EDGesV8UqtUXvnBFd7bJ
KBlF+fUWk0ufKfPHz8VLLKaJwK/NQjWTkx81avAm6qPuhLanNpx9Uwx9DgdsR+iy
sDHIxrO0tDnXVQYcjmKKehK/YlYkRzqO6g1jcGbfYgP9dvYsOPAOhFGzXT0IpqLv
Gf4P7c4relOv7ng4VFEFa/479Z1JFqhZ1RfVmSccxAKIZi0MZo/ouPxlWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACt4cSXzfRFu9OzFx6UzpbdFMhqMB8GA1UdIwQY
MBaAFOWohlkU3szcmAckH9cLa7CDpESzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFpR1dSVGV6TnlZQnlRZjF3dHJzSU9rUkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8zYWZjODEtMzBlNi00YjhlLThkM2It
NTdmNTRlYTQzZTE2LzEvNWFpR1dSVGV6TnlZQnlRZjF3dHJzSU9rUkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8zYWZjODEtMzBlNi00YjhlLThkM2ItNTdmNTRlYTQzZTE2
LzEvNWFpR1dSVGV6TnlZQnlRZjF3dHJzSU9rUkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe71rRKwW
Ih3PjETCl2fUmi4LpTmYBkcEmKQwImpXyTFczP+Rgs2cJSe6fWiJ4W6qWdASReai
fN+ZYRT81zZuzOkzscew5jhqgBuSIgCOQx5P2LahozYJHXjGLcnNsT6Ebe8uMa0/
kGTAVperVxF4/SgNfpWWOpVZZgM+L2upbjpJhmoIRiH7yzAv7F5HE09S2tUQhVNw
FMNc2MqGRNVvu8xdksKwfvnPnjGLRHPL9i4MqNaJIAsJgPyLkTzQgwl4fos3/YEr
YZNpvp84BlRsCh+dpeh4Xvj1ZXyhTp82HTBBFZLh5oh+Kv1FNE48xH4KYj4Lsz6d
qqceoHVSk833jA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:10 2025 by rpki-client