Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
File: 5oBHj67Itn3f7OY1fPJc8sodhdA.mft (raw, json)
Hash identifier: Pf+3a8mHKEgxA53T9A8SUzgbimFDSWdvBF5oukPTFHU=
Subject key identifier: 8C:43:AF:52:FB:94:78:97:F5:A6:8B:6A:51:2F:F1:8B:76:90:2F:1C
Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
Certificate issuer: /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Certificate serial: 019875D17A9BC241D04E17B84038672ECBE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 16:01:59 +0000
Manifest this update: Mon 04 Aug 2025 16:01:59 +0000
Manifest next update: Tue 05 Aug 2025 16:01:59 +0000
Files and hashes: 1: 5oBHj67Itn3f7OY1fPJc8sodhdA.crl (hash: nvQk+tNqhrYWvY+QG6SkH3rfGn9ox5PMPgFO4dMufo0=)
2: tRzSJb7DVEfQEAa9U4BrDqM_SWA.roa (hash: XZPt+PoWwjSkw1pIWuwBcMWbKd9UU7K0EsDZzwNXa5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:7a:9b:c2:41:d0:4e:17:b8:40:38:67:2e:cb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Validity
Not Before: Aug 4 16:01:59 2025 GMT
Not After : Aug 5 16:01:59 2025 GMT
Subject: CN=8c43af52fb947897f5a68b6a512ff18b76902f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:cb:7a:49:ab:2e:7f:17:73:eb:92:77:4f:
48:d8:06:d1:9e:da:07:5e:28:24:48:34:f4:13:c0:
00:d5:93:dd:10:75:ae:4b:19:af:b8:ef:90:73:19:
f0:ee:c0:03:51:5e:db:78:94:90:bf:9b:6b:f5:b4:
33:f8:77:d4:75:75:ed:6b:82:cb:9c:49:11:86:27:
1a:92:26:25:d8:ae:9e:65:29:07:74:f0:97:29:c9:
0b:0d:c5:01:b7:d9:33:4f:2c:13:f8:82:88:f2:fc:
44:a8:19:9c:29:96:ce:48:5b:55:8a:e0:cf:8d:6b:
cc:a9:4a:90:af:0a:b5:ad:10:be:32:d7:39:c3:67:
c9:27:d7:b1:82:75:cb:54:18:1e:21:07:2c:89:11:
ea:4d:a4:fc:02:a2:01:1a:74:29:17:b1:9b:95:93:
ff:cd:fc:aa:dc:c6:c2:0a:7e:63:1e:e8:e4:d7:f2:
62:df:86:ed:67:68:c2:f3:63:0f:ad:11:eb:35:16:
59:30:7b:5a:31:1d:ca:d3:4f:90:87:2c:c2:2e:e9:
90:61:90:37:70:84:11:bf:da:f0:8a:c6:43:ec:09:
a5:40:c4:9a:36:6f:6d:00:81:3e:c5:6c:d2:a5:58:
c4:41:7f:b9:a0:8b:7e:fc:c2:42:e9:30:be:0d:a5:
00:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:43:AF:52:FB:94:78:97:F5:A6:8B:6A:51:2F:F1:8B:76:90:2F:1C
X509v3 Authority Key Identifier:
keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:be:5b:d7:fc:89:d7:da:6b:43:5d:c7:c1:b7:6b:c4:62:f2:
9f:d4:a2:97:0e:15:02:05:bb:79:c2:96:f5:00:6a:bb:f4:b4:
bb:14:9e:d4:86:09:ab:62:eb:80:81:c7:e1:c2:7e:c3:92:83:
17:3a:94:be:6d:1e:dc:18:e5:af:c5:20:54:3d:55:5e:97:9f:
17:cc:97:65:e5:34:b0:8e:44:56:65:68:af:9d:5f:4a:cd:b6:
79:44:91:3f:7a:35:4d:ab:7d:8a:3f:2a:86:66:d3:81:88:1f:
b2:53:7e:80:69:b6:49:a9:6c:13:d5:51:27:5f:2c:f8:55:d3:
e1:7c:74:06:fb:5b:12:77:c2:c9:60:2e:a9:49:12:2d:70:02:
69:0d:47:e1:5a:8d:df:2b:c1:fd:d2:cb:59:1a:48:3f:14:f9:
da:4a:61:c3:f9:c1:13:8e:e8:0c:e1:4b:75:2c:f0:91:59:3f:
b4:4f:5c:14:23:7f:8a:c5:cb:18:94:a5:d1:f0:18:23:a7:e4:
c4:e4:ea:c6:0e:a5:12:73:c7:53:c3:d7:25:a2:16:70:fa:79:
c1:b7:d1:ba:6f:6d:06:df:25:fa:2e:ce:a9:8e:14:ec:f1:df:
74:fb:ca:98:11:8e:e7:f2:24:37:d0:ba:74:be:bc:af:a8:56:
74:44:ae:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh10XqbwkHQThe4QDhnLsvmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ODA0NzhmYWVjOGI2N2RkZmVjZTYzNTdjZjI1Y2YyY2Ex
ZDg1ZDAwHhcNMjUwODA0MTYwMTU5WhcNMjUwODA1MTYwMTU5WjAzMTEwLwYDVQQD
Eyg4YzQzYWY1MmZiOTQ3ODk3ZjVhNjhiNmE1MTJmZjE4Yjc2OTAyZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSDLekmrLn8Xc+uSd09I2AbRntoH
XigkSDT0E8AA1ZPdEHWuSxmvuO+Qcxnw7sADUV7beJSQv5tr9bQz+HfUdXXta4LL
nEkRhicakiYl2K6eZSkHdPCXKckLDcUBt9kzTywT+IKI8vxEqBmcKZbOSFtViuDP
jWvMqUqQrwq1rRC+Mtc5w2fJJ9exgnXLVBgeIQcsiRHqTaT8AqIBGnQpF7GblZP/
zfyq3MbCCn5jHujk1/Ji34btZ2jC82MPrRHrNRZZMHtaMR3K00+QhyzCLumQYZA3
cIQRv9rwisZD7AmlQMSaNm9tAIE+xWzSpVjEQX+5oIt+/MJC6TC+DaUAfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxDr1L7lHiX9aaLalEv8Yt2kC8cMB8GA1UdIwQY
MBaAFOaAR4+uyLZ93+zmNXzyXPLKHYXQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW9CSGo2N0l0bjNmN09ZMWZQSmM4c29kaGRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yNWEwMWItNWZiMC00NDRlLWEyYzct
MzM5YzlkNDg3NzRjLzEvNW9CSGo2N0l0bjNmN09ZMWZQSmM4c29kaGRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yNWEwMWItNWZiMC00NDRlLWEyYzctMzM5YzlkNDg3NzRj
LzEvNW9CSGo2N0l0bjNmN09ZMWZQSmM4c29kaGRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkb5b1/yJ
19prQ13HwbdrxGLyn9Silw4VAgW7ecKW9QBqu/S0uxSe1IYJq2LrgIHH4cJ+w5KD
FzqUvm0e3Bjlr8UgVD1VXpefF8yXZeU0sI5EVmVor51fSs22eUSRP3o1Tat9ij8q
hmbTgYgfslN+gGm2SalsE9VRJ18s+FXT4Xx0BvtbEnfCyWAuqUkSLXACaQ1H4VqN
3yvB/dLLWRpIPxT52kphw/nBE47oDOFLdSzwkVk/tE9cFCN/isXLGJSl0fAYI6fk
xOTqxg6lEnPHU8PXJaIWcPp5wbfRum9tBt8l+i7OqY4U7PHfdPvKmBGO5/IkN9C6
dL68r6hWdESuxw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:36:52 2025 by rpki-client