Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
File: 5LEwYQHMnsn86YUoDB2w83wTWjo.mft (raw, json)
Hash identifier: DI+1aTK6QE+izCiU14DQClKldrKiymG6SMPclCJ6ks8=
Subject key identifier: 3C:A7:4F:11:9B:28:DA:82:F9:24:97:3E:16:61:D5:32:EA:38:EB:C3
Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
Certificate issuer: /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Certificate serial: 019896374A301BDB0019C27A950127451300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
Manifest number: 116B
Signing time: Sun 10 Aug 2025 23:01:02 +0000
Manifest this update: Sun 10 Aug 2025 23:01:02 +0000
Manifest next update: Mon 11 Aug 2025 23:01:02 +0000
Files and hashes: 1: 5LEwYQHMnsn86YUoDB2w83wTWjo.crl (hash: +xQRBfi9SBW2eAFtiHtQ/5A3V+NyPP1U2HZHo6nhQpI=)
2: kI0vHB0itKLKV54MYG6cGrVo0eY.roa (hash: C5TgalX0uC/rPE4DDIN7aoT3cFXmNAi4cZYsmZl5eDw=)
3: u8V02AIoZzOPfjpi5j7wtSWVgSg.roa (hash: 9pvkolnrpZjRfbBA2Q8IhG+FM5X8l0p9e5PvDFmhqmQ=)
4: y-M_EBDyqDFIVawFxida8qjR5Co.roa (hash: OVypj78ZSdDN2W9JmlOfV0llyXCESZchLL8yqQ85v9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:4a:30:1b:db:00:19:c2:7a:95:01:27:45:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Validity
Not Before: Aug 10 23:01:02 2025 GMT
Not After : Aug 11 23:01:02 2025 GMT
Subject: CN=3ca74f119b28da82f924973e1661d532ea38ebc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:3c:58:a2:52:8b:e6:45:ad:5b:91:c9:e7:
f5:4c:80:9b:00:45:10:b5:45:3b:e9:bf:07:c9:d1:
6f:a9:7c:eb:1a:fb:9e:e4:08:ff:9e:6c:ce:26:4f:
07:a5:3e:6c:88:4d:a7:95:4e:b9:bd:b3:43:da:0e:
a3:39:54:48:d2:8b:99:62:85:1a:cf:9f:be:25:12:
2f:7b:ab:89:34:2c:c3:02:c6:9d:9f:0c:90:3a:64:
a3:76:cf:62:15:7d:77:96:52:df:db:f5:3a:a4:6d:
22:8e:cb:21:43:96:9e:f1:8e:26:ee:fd:d6:a0:ef:
4d:d5:80:b4:bf:85:06:99:c9:c3:58:0b:fa:c5:4a:
91:60:4e:81:ee:56:c2:08:98:cf:ed:9f:89:d4:e7:
fa:53:57:38:98:75:9d:e6:cc:a6:48:e4:06:a9:42:
02:c7:a8:b7:ce:00:a9:a3:96:0b:50:75:01:d5:ff:
c5:9d:35:da:e1:a2:53:7c:10:cf:e7:d2:b6:19:95:
6c:40:de:79:7a:40:ea:5c:4e:81:24:90:9a:24:ef:
45:d5:81:5c:d4:5c:9d:42:8a:16:cb:9e:d8:15:c1:
e7:b7:99:23:45:7f:96:80:19:68:e4:52:85:27:8f:
78:5a:31:2c:33:2b:92:0e:6d:d7:ef:1a:1d:b9:5f:
e8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A7:4F:11:9B:28:DA:82:F9:24:97:3E:16:61:D5:32:EA:38:EB:C3
X509v3 Authority Key Identifier:
keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:82:3e:83:c3:dc:02:fe:6e:ad:05:93:62:2a:5c:78:c9:6e:
fc:e6:6f:89:59:dd:7f:41:0a:a2:8f:01:23:50:5a:44:b8:65:
77:d1:84:5e:38:67:97:2a:1e:23:b8:30:6b:48:d0:cc:8f:62:
22:11:0e:58:7a:0f:84:8e:3e:d2:07:a0:19:dc:e9:1d:0e:d6:
e2:b2:e6:36:6d:3c:9f:67:74:c3:5c:9b:b2:09:f9:66:f3:4b:
6d:7c:b1:19:99:1d:a0:21:c7:6f:ce:87:45:ac:f6:c5:e3:f9:
96:98:e0:bf:2d:54:06:c8:c7:08:df:07:0b:78:7b:6a:9a:03:
cd:51:07:ee:bc:57:18:26:1d:f5:5e:54:22:c6:65:ce:b8:37:
07:56:8d:ed:86:84:54:6d:3d:8a:48:1d:47:65:77:d0:b2:a8:
23:bc:53:32:99:44:f3:93:47:53:ea:a5:61:5f:94:21:e1:d7:
cc:37:91:dd:73:a1:9b:23:47:9c:2d:57:bc:fb:5a:0a:9d:08:
73:88:82:a1:5c:b7:be:72:86:c5:24:e9:ac:1d:e5:91:48:bb:
63:58:98:b0:13:d1:e8:5a:27:20:d7:1e:dc:6d:94:79:67:50:
53:84:90:e7:56:52:66:91:d3:92:3f:56:b1:a0:58:a2:af:7c:
d2:f3:d1:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWN0owG9sAGcJ6lQEnRRMAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YjEzMDYxMDFjYzllYzlmY2U5ODUyODBjMWRiMGYzN2Mx
MzVhM2EwHhcNMjUwODEwMjMwMTAyWhcNMjUwODExMjMwMTAyWjAzMTEwLwYDVQQD
EygzY2E3NGYxMTliMjhkYTgyZjkyNDk3M2UxNjYxZDUzMmVhMzhlYmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGw8WKJSi+ZFrVuRyef1TICbAEUQ
tUU76b8HydFvqXzrGvue5Aj/nmzOJk8HpT5siE2nlU65vbND2g6jOVRI0ouZYoUa
z5++JRIve6uJNCzDAsadnwyQOmSjds9iFX13llLf2/U6pG0ijsshQ5ae8Y4m7v3W
oO9N1YC0v4UGmcnDWAv6xUqRYE6B7lbCCJjP7Z+J1Of6U1c4mHWd5symSOQGqUIC
x6i3zgCpo5YLUHUB1f/FnTXa4aJTfBDP59K2GZVsQN55ekDqXE6BJJCaJO9F1YFc
1FydQooWy57YFcHnt5kjRX+WgBlo5FKFJ494WjEsMyuSDm3X7xoduV/oFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDynTxGbKNqC+SSXPhZh1TLqOOvDMB8GA1UdIwQY
MBaAFOSxMGEBzJ7J/OmFKAwdsPN8E1o6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUt
ZmE2MzQ4ZjY5NWI1LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUtZmE2MzQ4ZjY5NWI1
LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4I+g8Pc
Av5urQWTYipceMlu/OZviVndf0EKoo8BI1BaRLhld9GEXjhnlyoeI7gwa0jQzI9i
IhEOWHoPhI4+0gegGdzpHQ7W4rLmNm08n2d0w1ybsgn5ZvNLbXyxGZkdoCHHb86H
Raz2xeP5lpjgvy1UBsjHCN8HC3h7apoDzVEH7rxXGCYd9V5UIsZlzrg3B1aN7YaE
VG09ikgdR2V30LKoI7xTMplE85NHU+qlYV+UIeHXzDeR3XOhmyNHnC1XvPtaCp0I
c4iCoVy3vnKGxSTprB3lkUi7Y1iYsBPR6FonINce3G2UeWdQU4SQ51ZSZpHTkj9W
saBYoq980vPRkw==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:51 2025 by rpki-client