Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
File: KE5esRLhOkJwPbs4e6V3oueTrDo.mft (raw, json)
Hash identifier: Td56FTM6A4EBL37eSdlSnZmF0JLOHVpoPcnjHJf61rM=
Subject key identifier: 0C:60:4B:1C:B9:38:77:B0:13:C8:82:68:0F:EA:15:C2:2F:0D:2B:B4
Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
Certificate issuer: /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Certificate serial: 01987DF8214C54F26E26674DEAA38E8984AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
Manifest number: 0C1B
Signing time: Wed 06 Aug 2025 06:01:10 +0000
Manifest this update: Wed 06 Aug 2025 06:01:10 +0000
Manifest next update: Thu 07 Aug 2025 06:01:10 +0000
Files and hashes: 1: 25RJ6ZVs0Rq2vgAnn5qDuc50gBc.roa (hash: E2CGstsnfAcGk1lBYwpyCPeNPt0F4yT/sEC2c5F9t8o=)
2: KE5esRLhOkJwPbs4e6V3oueTrDo.crl (hash: TIvtZrnMk3iB3LcqtOGMCTZofjOxCX+jI0Afs+O1VJw=)
3: jjRAP4ezNIauFNs_aNj_HcTXDg0.roa (hash: o0gv44QEwsOJL94wmCAslkIjvRv25nKBwW1R2foY/Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:21:4c:54:f2:6e:26:67:4d:ea:a3:8e:89:84:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Validity
Not Before: Aug 6 06:01:10 2025 GMT
Not After : Aug 7 06:01:10 2025 GMT
Subject: CN=0c604b1cb93877b013c882680fea15c22f0d2bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:98:ae:4e:2b:95:21:ac:60:a1:63:42:48:99:
01:f3:99:69:01:ac:40:54:17:87:dd:0d:2c:81:ce:
66:f1:5d:cb:d8:93:ee:86:26:96:2c:2c:21:aa:05:
de:d4:0c:95:76:41:d3:d8:56:eb:1b:60:f3:5f:b5:
09:c3:ba:b9:59:9d:cd:48:09:a0:c6:96:1d:cd:9e:
07:1b:82:3d:df:84:5b:5e:0e:4b:23:48:56:f4:c1:
ef:14:3b:4e:1b:9f:71:81:55:bb:a5:d2:8c:30:b7:
d1:7c:e2:8b:d0:0e:44:6c:be:bb:c7:b9:50:72:a9:
3e:75:13:df:a6:6a:ab:e3:ab:a5:da:ae:0f:1f:07:
77:78:e2:cc:8a:5e:e5:77:65:a5:e9:6f:49:a7:8e:
95:4d:f0:f0:3e:d1:b5:20:bc:f9:e9:c2:fe:ce:3d:
5e:9c:aa:3f:7c:bd:0e:2d:5d:fe:af:4a:c2:da:e4:
40:03:7a:99:e5:92:78:aa:78:95:a6:32:76:eb:69:
b3:7d:53:26:5d:10:9b:9b:54:bf:3f:3d:07:29:c2:
b1:33:90:77:ca:77:71:86:03:c7:b4:29:15:66:f7:
58:08:89:ca:9c:ad:5f:7e:5e:fe:8c:f2:1b:91:06:
8b:03:1c:b4:1f:cf:3d:11:4e:1e:d9:8b:96:f6:bb:
85:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:60:4B:1C:B9:38:77:B0:13:C8:82:68:0F:EA:15:C2:2F:0D:2B:B4
X509v3 Authority Key Identifier:
keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c8:57:26:8a:bf:3b:c8:5b:1f:e5:4c:89:0e:66:c7:24:13:
c0:65:e3:28:22:23:60:fe:51:c8:13:13:6f:15:12:39:38:e0:
e2:4c:84:7f:42:3d:ca:31:5b:c8:42:2a:53:a2:38:07:d4:8b:
0c:ef:31:1c:31:58:77:a7:13:9b:75:41:83:4f:84:ab:64:fe:
41:df:e2:24:86:1e:22:19:99:ed:b7:13:33:f2:3b:9e:56:0e:
79:6f:53:32:c5:ef:21:85:39:52:3f:66:41:0b:e2:47:32:97:
68:d1:d7:ca:71:db:b7:ee:82:5b:83:cb:dc:31:e5:f5:0c:71:
7d:2d:f0:82:04:87:8b:47:04:4c:1d:ae:07:fc:7c:d7:23:26:
58:fa:08:bb:1c:29:a9:78:b9:95:a2:2a:eb:f6:d8:a0:6a:08:
ff:09:e7:e5:60:84:83:aa:46:37:65:06:dd:7f:3a:01:31:1b:
79:c6:0c:ce:ab:d4:e8:93:ca:69:43:6b:b5:44:47:fb:e1:a2:
d0:4d:2f:91:c4:45:58:23:94:13:27:50:41:71:34:ed:c4:e4:
18:50:e5:60:a7:63:a5:30:2d:a6:ec:aa:4d:33:79:32:17:03:
09:fb:18:59:01:c1:ed:16:50:d6:96:d9:3e:7a:1e:fd:99:e4:
db:ff:9e:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9+CFMVPJuJmdN6qOOiYStMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NGU1ZWIxMTJlMTNhNDI3MDNkYmIzODdiYTU3N2EyZTc5
M2FjM2EwHhcNMjUwODA2MDYwMTEwWhcNMjUwODA3MDYwMTEwWjAzMTEwLwYDVQQD
EygwYzYwNGIxY2I5Mzg3N2IwMTNjODgyNjgwZmVhMTVjMjJmMGQyYmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5iuTiuVIaxgoWNCSJkB85lpAaxA
VBeH3Q0sgc5m8V3L2JPuhiaWLCwhqgXe1AyVdkHT2FbrG2DzX7UJw7q5WZ3NSAmg
xpYdzZ4HG4I934RbXg5LI0hW9MHvFDtOG59xgVW7pdKMMLfRfOKL0A5EbL67x7lQ
cqk+dRPfpmqr46ul2q4PHwd3eOLMil7ld2Wl6W9Jp46VTfDwPtG1ILz56cL+zj1e
nKo/fL0OLV3+r0rC2uRAA3qZ5ZJ4qniVpjJ262mzfVMmXRCbm1S/Pz0HKcKxM5B3
yndxhgPHtCkVZvdYCInKnK1ffl7+jPIbkQaLAxy0H889EU4e2YuW9ruFUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxgSxy5OHewE8iCaA/qFcIvDSu0MB8GA1UdIwQY
MBaAFChOXrES4TpCcD27OHuld6Lnk6w6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNmRlZjEtZjQyNS00OWE1LWFhYWYt
MDdjYmVkZGQ2NDE4LzEvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hNmRlZjEtZjQyNS00OWE1LWFhYWYtMDdjYmVkZGQ2NDE4
LzEvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8hXJoq/
O8hbH+VMiQ5mxyQTwGXjKCIjYP5RyBMTbxUSOTjg4kyEf0I9yjFbyEIqU6I4B9SL
DO8xHDFYd6cTm3VBg0+Eq2T+Qd/iJIYeIhmZ7bcTM/I7nlYOeW9TMsXvIYU5Uj9m
QQviRzKXaNHXynHbt+6CW4PL3DHl9QxxfS3wggSHi0cETB2uB/x81yMmWPoIuxwp
qXi5laIq6/bYoGoI/wnn5WCEg6pGN2UG3X86ATEbecYMzqvU6JPKaUNrtURH++Gi
0E0vkcRFWCOUEydQQXE07cTkGFDlYKdjpTAtpuyqTTN5MhcDCfsYWQHB7RZQ1pbZ
Pnoe/Znk2/+eMQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:17:36 2025 by rpki-client