Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
File: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft (raw, json)
Hash identifier: NIhWRmEcmkca7pERHCbIezPRJBy90klgKujAj7wfInE=
Subject key identifier: 44:A7:54:EA:36:A3:6D:FE:0B:ED:1F:7D:1F:BA:A4:52:75:D9:EE:7C
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Certificate issuer: /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial: 01987450B3C67D1B8D175B75DAD4F7A8EBCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
Manifest number: 0D98
Signing time: Mon 04 Aug 2025 09:01:42 +0000
Manifest this update: Mon 04 Aug 2025 09:01:42 +0000
Manifest next update: Tue 05 Aug 2025 09:01:42 +0000
Files and hashes: 1: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl (hash: oil0LIWRIwP6pQYqFs9ZGmrLZa5d9KO5K8QFk/ncUKw=)
2: vhYKMa2Z6sRh78styyEQC2ay13Y.roa (hash: q6ISR7QoOYSfixxm6mwluVodtW8Dzcm/t68jGp50cGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:b3:c6:7d:1b:8d:17:5b:75:da:d4:f7:a8:eb:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Validity
Not Before: Aug 4 09:01:42 2025 GMT
Not After : Aug 5 09:01:42 2025 GMT
Subject: CN=44a754ea36a36dfe0bed1f7d1fbaa45275d9ee7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:51:2c:52:ef:3d:f4:7e:e4:d1:78:42:e2:
27:bc:3a:13:39:18:ad:ae:b3:e6:e2:f8:d8:c3:c5:
15:9e:5c:ac:e9:83:46:ed:cb:93:50:67:ac:fe:0b:
a7:79:85:c7:52:3c:77:f2:34:b6:d5:19:e3:f6:6e:
7a:a8:23:b5:21:75:c6:7a:9d:5e:67:20:c0:be:3d:
be:c6:6d:cd:82:96:ac:16:a8:9a:79:bc:c1:69:53:
16:bc:02:5d:98:c3:dd:3d:62:6d:29:fe:a8:af:12:
42:67:36:a6:e6:f2:41:e1:3d:67:1e:f0:84:a6:5d:
74:56:9c:50:96:9f:b1:81:bc:b7:2b:ee:22:41:3c:
3f:ba:f4:f2:33:61:ce:f3:72:1e:a6:a2:0f:a4:5a:
db:47:5c:5b:5c:19:af:0f:56:b0:6f:44:fd:32:d1:
7d:bc:44:8c:9d:ed:3e:8d:6e:ce:50:16:54:33:bf:
49:7f:ab:dd:6e:e2:57:1a:a7:73:88:d3:53:bb:80:
60:22:a9:31:15:ac:c9:8a:17:4e:44:66:55:5f:45:
dc:e2:a5:79:78:9b:6c:7c:53:07:4e:da:ff:1e:de:
18:ab:d2:c1:57:29:e4:af:b2:91:0a:50:4b:22:ae:
d3:4d:e6:73:2a:78:24:ea:49:09:7f:b8:9b:da:e0:
5e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A7:54:EA:36:A3:6D:FE:0B:ED:1F:7D:1F:BA:A4:52:75:D9:EE:7C
X509v3 Authority Key Identifier:
keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:13:3d:ea:45:8f:b8:e4:fb:db:b8:9f:ca:33:48:b8:42:1e:
bb:5c:1a:51:92:60:3f:c4:cc:fc:39:6a:45:aa:4f:19:98:37:
fd:fc:61:0a:fb:c3:9f:55:49:a4:6f:d9:e3:ab:b0:99:02:bc:
87:6b:02:51:86:43:02:ca:8b:39:b0:d3:1b:ab:dc:15:61:01:
04:5c:30:88:3f:16:27:28:c4:ca:72:97:1b:80:45:0c:47:82:
f0:88:d0:7d:f0:d8:25:9b:f7:2a:73:ce:3e:aa:ec:47:b3:90:
2c:41:b5:30:06:b5:ae:08:3b:cb:b2:d6:e1:ec:aa:a3:c4:0d:
aa:29:cb:31:e8:f3:da:cf:6e:c2:3b:70:94:5d:7e:87:45:12:
59:2b:cf:2e:32:7a:1d:c0:4d:16:46:29:ec:46:93:bd:25:88:
f9:33:20:22:93:e5:f9:b7:70:1a:fc:ef:53:38:3e:c9:1c:ee:
da:1c:73:cc:24:f6:76:b6:50:de:a8:f3:72:13:52:7f:51:29:
39:92:b4:04:2d:1b:cf:3a:e4:1b:19:11:63:c3:39:49:24:f7:
7b:58:1b:e8:77:1c:51:97:77:11:13:ec:72:38:02:07:15:15:
74:a2:35:58:26:cb:e0:13:0c:11:a4:ed:00:50:8a:d0:4d:ba:
80:80:f2:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0ULPGfRuNF1t12tT3qOvLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZmY1YmJmNTQwYzY1OTU0Yjk5MTNhNjhjMjRkMTc0ZGU5
N2Q4MjkwHhcNMjUwODA0MDkwMTQyWhcNMjUwODA1MDkwMTQyWjAzMTEwLwYDVQQD
Eyg0NGE3NTRlYTM2YTM2ZGZlMGJlZDFmN2QxZmJhYTQ1Mjc1ZDllZTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ5RLFLvPfR+5NF4QuInvDoTORit
rrPm4vjYw8UVnlys6YNG7cuTUGes/guneYXHUjx38jS21Rnj9m56qCO1IXXGep1e
ZyDAvj2+xm3NgpasFqiaebzBaVMWvAJdmMPdPWJtKf6orxJCZzam5vJB4T1nHvCE
pl10VpxQlp+xgby3K+4iQTw/uvTyM2HO83IepqIPpFrbR1xbXBmvD1awb0T9MtF9
vESMne0+jW7OUBZUM79Jf6vdbuJXGqdziNNTu4BgIqkxFazJihdORGZVX0Xc4qV5
eJtsfFMHTtr/Ht4Yq9LBVynkr7KRClBLIq7TTeZzKngk6kkJf7ib2uBejQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESnVOo2o23+C+0ffR+6pFJ12e58MB8GA1UdIwQY
MBaAFOT/W79UDGWVS5kTpowk0XTel9gpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80MzkzZTgtNWY1OS00ZDU3LTgxOTgt
NWMwYzQ2ZDA0ZWUxLzEvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC80MzkzZTgtNWY1OS00ZDU3LTgxOTgtNWMwYzQ2ZDA0ZWUx
LzEvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxM96kWP
uOT727ifyjNIuEIeu1waUZJgP8TM/DlqRapPGZg3/fxhCvvDn1VJpG/Z46uwmQK8
h2sCUYZDAsqLObDTG6vcFWEBBFwwiD8WJyjEynKXG4BFDEeC8IjQffDYJZv3KnPO
PqrsR7OQLEG1MAa1rgg7y7LW4eyqo8QNqinLMejz2s9uwjtwlF1+h0USWSvPLjJ6
HcBNFkYp7EaTvSWI+TMgIpPl+bdwGvzvUzg+yRzu2hxzzCT2drZQ3qjzchNSf1Ep
OZK0BC0bzzrkGxkRY8M5SST3e1gb6HccUZd3ERPscjgCBxUVdKI1WCbL4BMMEaTt
AFCK0E26gIDypQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:55 2025 by rpki-client