Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
File: 5_y3rNVfY0m52BRheGwSRY-G9y4.mft (raw, json)
Hash identifier: eAvJ7As/zGS1mqP4F8pLCtPMpRIWve81eNAJoi+Ctvg=
Subject key identifier: 44:D3:51:3E:62:1B:0E:D3:13:EE:BC:39:2E:F7:8E:C8:D8:D4:88:A9
Authority key identifier: E7:FC:B7:AC:D5:5F:63:49:B9:D8:14:61:78:6C:12:45:8F:86:F7:2E
Certificate issuer: /CN=e7fcb7acd55f6349b9d81461786c12458f86f72e
Certificate serial: 01989600970C58B735EE869C15ECE639ED96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
Manifest number: 1625
Signing time: Sun 10 Aug 2025 22:01:17 +0000
Manifest this update: Sun 10 Aug 2025 22:01:17 +0000
Manifest next update: Mon 11 Aug 2025 22:01:17 +0000
Files and hashes: 1: 5_y3rNVfY0m52BRheGwSRY-G9y4.crl (hash: nCJzHLP6QrMmr60fXPAhQMhFwlL/Q36LGLHb1xmTdhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:97:0c:58:b7:35:ee:86:9c:15:ec:e6:39:ed:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fcb7acd55f6349b9d81461786c12458f86f72e
Validity
Not Before: Aug 10 22:01:17 2025 GMT
Not After : Aug 11 22:01:17 2025 GMT
Subject: CN=44d3513e621b0ed313eebc392ef78ec8d8d488a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d5:dd:62:5e:39:e6:1c:96:98:3e:7c:7a:64:
7e:ab:58:03:94:11:99:67:99:8e:b1:82:fa:01:70:
fb:f2:9f:0d:0f:3d:13:67:8c:ef:04:e3:9c:f9:3c:
21:31:13:c5:3a:9c:06:7f:9d:59:af:d9:e8:58:dd:
44:5d:55:49:d3:27:bc:7b:58:b7:5e:bf:b3:b7:04:
09:12:47:ac:bd:58:d0:5b:ca:26:7e:aa:2b:1e:ba:
4b:64:e8:d6:d0:47:b0:f5:fa:5f:8f:2f:ad:f2:c0:
f7:51:93:a4:e3:f3:1a:a3:4e:91:a9:e1:ef:f8:a1:
c3:f8:94:c5:c4:6e:3b:aa:d8:9a:cd:4a:a8:59:d7:
05:e5:90:d0:48:52:dc:79:ec:eb:ca:d3:81:bf:96:
3e:f3:4c:82:1a:bc:22:dd:e5:60:d4:7c:2a:17:a2:
d9:e1:e2:36:19:1b:dc:33:02:6d:8b:bb:a1:31:6b:
0b:eb:a5:80:ff:31:a8:20:b8:58:9a:a2:da:f3:5c:
c8:8a:1f:de:b1:c9:7f:ad:ab:ee:f9:ea:b7:60:c1:
b0:b8:3d:36:d2:4e:84:40:a0:4a:72:68:6f:f5:5b:
57:65:ff:eb:18:c7:1a:c2:71:ba:85:6d:93:60:81:
1a:14:5c:db:00:e3:d6:40:7d:d6:e2:0a:0c:a4:e7:
87:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D3:51:3E:62:1B:0E:D3:13:EE:BC:39:2E:F7:8E:C8:D8:D4:88:A9
X509v3 Authority Key Identifier:
keyid:E7:FC:B7:AC:D5:5F:63:49:B9:D8:14:61:78:6C:12:45:8F:86:F7:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ce:d0:91:71:9c:25:1d:e3:ca:37:05:b5:7b:a9:3e:46:64:
46:e0:b7:ce:0d:e4:d2:c7:7f:57:ba:ac:b5:6d:df:a8:44:0d:
61:04:c1:24:d8:e6:c8:fb:d7:bd:36:03:0f:a3:ca:ac:62:a0:
19:8d:89:de:23:ee:74:37:cc:17:3e:f3:47:6b:42:60:b5:51:
ba:e2:ba:f9:a0:b7:1a:ea:bd:2f:07:f5:d5:73:f8:da:f2:f8:
e4:38:80:33:7c:cc:80:65:e1:58:d2:71:ba:a7:38:ee:04:c2:
9a:95:92:05:66:ec:4b:28:d9:41:f7:7e:aa:01:4d:bb:34:de:
df:2f:d2:fd:1d:ae:41:2b:ab:7f:70:d3:4e:d5:2b:b5:4a:37:
9d:fb:24:60:e0:4c:02:fa:45:af:ac:c5:02:a3:ed:bf:42:9c:
51:1e:ed:41:3e:18:0c:f3:04:48:77:69:b3:aa:f8:7c:78:32:
d2:21:09:50:47:cd:ac:6c:03:41:0c:cf:b6:12:38:00:64:77:
e6:0c:80:07:3c:ff:0e:65:de:93:19:f9:a3:67:a7:71:55:2d:
cb:f5:7a:55:87:9d:50:71:5d:55:d8:32:89:45:d8:34:c8:44:
3f:a6:5e:85:15:91:ce:88:43:ef:85:28:13:d3:53:c2:99:a3:
e5:27:49:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWAJcMWLc17oacFezmOe2WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmNiN2FjZDU1ZjYzNDliOWQ4MTQ2MTc4NmMxMjQ1OGY4
NmY3MmUwHhcNMjUwODEwMjIwMTE3WhcNMjUwODExMjIwMTE3WjAzMTEwLwYDVQQD
Eyg0NGQzNTEzZTYyMWIwZWQzMTNlZWJjMzkyZWY3OGVjOGQ4ZDQ4OGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NXdYl455hyWmD58emR+q1gDlBGZ
Z5mOsYL6AXD78p8NDz0TZ4zvBOOc+TwhMRPFOpwGf51Zr9noWN1EXVVJ0ye8e1i3
Xr+ztwQJEkesvVjQW8omfqorHrpLZOjW0Eew9fpfjy+t8sD3UZOk4/Mao06RqeHv
+KHD+JTFxG47qtiazUqoWdcF5ZDQSFLceezrytOBv5Y+80yCGrwi3eVg1HwqF6LZ
4eI2GRvcMwJti7uhMWsL66WA/zGoILhYmqLa81zIih/escl/ravu+eq3YMGwuD02
0k6EQKBKcmhv9VtXZf/rGMcawnG6hW2TYIEaFFzbAOPWQH3W4goMpOeHJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETTUT5iGw7TE+68OS73jsjY1IipMB8GA1UdIwQY
MBaAFOf8t6zVX2NJudgUYXhsEkWPhvcuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV95M3JOVmZZMG01MkJSaGVHd1NSWS1HOXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82OTgzMzktNTkwNS00NjM3LWI5ODMt
Y2RiM2E2NTdkOWVlLzEvNV95M3JOVmZZMG01MkJSaGVHd1NSWS1HOXk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82OTgzMzktNTkwNS00NjM3LWI5ODMtY2RiM2E2NTdkOWVl
LzEvNV95M3JOVmZZMG01MkJSaGVHd1NSWS1HOXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVc7QkXGc
JR3jyjcFtXupPkZkRuC3zg3k0sd/V7qstW3fqEQNYQTBJNjmyPvXvTYDD6PKrGKg
GY2J3iPudDfMFz7zR2tCYLVRuuK6+aC3Guq9Lwf11XP42vL45DiAM3zMgGXhWNJx
uqc47gTCmpWSBWbsSyjZQfd+qgFNuzTe3y/S/R2uQSurf3DTTtUrtUo3nfskYOBM
AvpFr6zFAqPtv0KcUR7tQT4YDPMESHdps6r4fHgy0iEJUEfNrGwDQQzPthI4AGR3
5gyABzz/DmXekxn5o2encVUty/V6VYedUHFdVdgyiUXYNMhEP6ZehRWRzohD74Uo
E9NTwpmj5SdJDQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:29:42 2025 by rpki-client