Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
File: t5msmJxEsuHNq8JY6WypPKrUvWQ.mft (raw, json)
Hash identifier: JhqxfLRhOZ1z45RE7VbHdkrqjYPDF0HS5MYrkU+Cmoc=
Subject key identifier: BC:53:CF:9A:BE:5A:66:A7:18:D0:AC:6E:31:4F:5E:CB:1C:03:D8:21
Authority key identifier: B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64
Certificate issuer: /CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
Certificate serial: 019873E1E3A542B9E78B2EE284B6216C800D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
Manifest number: 09B9
Signing time: Mon 04 Aug 2025 07:00:40 +0000
Manifest this update: Mon 04 Aug 2025 07:00:40 +0000
Manifest next update: Tue 05 Aug 2025 07:00:40 +0000
Files and hashes: 1: N5hZORY6BH0_7cHTBNOVNkVCEYU.roa (hash: WR+MD/xxBtQVHPY1qaKKu6KnkMSkFI0jT+q93Z2CIUM=)
2: eG7qPRRyMuGDnTaL5wdOylUl9yc.roa (hash: wEVy8BCY3//obLJ2YEaxXlAcf2i+3jpwZETui93UpjU=)
3: eZ9lsBSBE-9HylowSORYyQP1H3Y.roa (hash: 4bc1g2EfiPBsisazV/A2lyPDwqt6FApY78qkMRjIEcc=)
4: t5msmJxEsuHNq8JY6WypPKrUvWQ.crl (hash: ces2Xo9NH1Bq3pJvXA89syXnuc73+jK8Cuoi6lNj+eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:e3:a5:42:b9:e7:8b:2e:e2:84:b6:21:6c:80:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
Validity
Not Before: Aug 4 07:00:40 2025 GMT
Not After : Aug 5 07:00:40 2025 GMT
Subject: CN=bc53cf9abe5a66a718d0ac6e314f5ecb1c03d821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:50:db:32:6d:be:f0:62:ad:ac:fb:ce:24:1c:
3c:47:61:26:79:cd:26:0d:0f:e2:2a:12:05:6d:f5:
e9:44:2b:a7:5c:1d:0e:b9:64:84:a4:d9:a5:81:1e:
1a:3c:29:a7:7b:70:4a:3f:58:5f:81:7d:47:29:89:
6b:8c:ec:cd:0d:1a:b2:7d:cb:a5:04:8d:ff:4d:fd:
98:94:e5:b3:2e:c8:a9:47:b5:fb:22:82:35:2a:29:
9a:97:73:23:6b:cf:b7:a2:ba:ef:95:bf:5e:59:db:
28:65:48:77:f1:52:87:f0:23:85:9d:4c:5b:42:6e:
5e:67:42:61:21:86:9a:ce:b3:b7:fa:85:16:c7:d7:
0b:e9:d6:a7:a7:38:b4:39:a5:df:da:d8:dd:b5:fb:
e0:00:a5:af:4a:e9:b1:3f:f6:46:c3:60:bd:a4:6f:
d4:67:94:6e:8b:49:cf:cf:1b:7b:f6:40:8e:e6:04:
ce:12:15:e9:a9:b4:50:c9:2c:9b:43:cd:fb:11:35:
c3:1b:26:e2:dd:1a:f7:07:03:d0:6a:f0:27:49:70:
31:14:2d:b4:9a:50:48:2f:48:f8:ae:cf:b0:2a:dd:
8e:1d:47:3a:81:51:5b:c7:7f:53:02:ee:88:5c:e2:
81:7f:f9:23:02:fe:58:d1:4f:50:a3:23:2b:66:02:
c9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:53:CF:9A:BE:5A:66:A7:18:D0:AC:6E:31:4F:5E:CB:1C:03:D8:21
X509v3 Authority Key Identifier:
keyid:B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a5:9d:13:41:17:12:33:5c:c5:8a:01:01:0d:3d:38:ed:01:
4c:09:77:d1:64:4a:82:b9:ef:02:11:48:6b:b4:ce:4c:7c:86:
4a:c8:97:77:88:32:f0:fa:ea:00:97:f8:bd:08:70:10:a4:b8:
16:01:31:19:91:02:ed:cb:45:db:dd:8c:0e:e5:5b:20:74:40:
84:5b:1f:0b:dc:0d:0a:00:cc:13:b6:71:bf:6b:c5:6f:64:b9:
85:5a:55:aa:1c:5d:96:d9:4e:2e:f5:4f:b6:b6:1b:09:46:b2:
7c:11:73:58:7f:94:48:b9:97:18:2e:7f:07:eb:24:df:45:7f:
ac:a2:b7:fc:b3:9f:00:5f:a8:3f:d5:54:9b:df:a3:9b:28:9c:
bc:dc:2e:a2:5e:8d:d3:95:bd:01:c4:6e:8a:c2:20:9e:9e:1e:
bf:e3:78:ec:d4:6a:a8:a2:74:0e:c6:de:37:54:d9:1d:81:b4:
d4:3f:09:f5:0e:51:9c:4d:d8:46:76:8d:a9:ed:63:e3:d1:72:
b9:9e:ec:d4:8f:43:2d:43:13:d1:86:8a:64:78:4f:ed:a6:a0:
85:b2:70:aa:23:05:dd:53:54:56:40:1e:b0:27:b9:43:b8:55:
4d:b4:6a:fe:2d:9d:36:e4:f3:5f:d2:92:d7:bc:6a:14:ef:6f:
70:ec:23:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4eOlQrnniy7ihLYhbIANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OTlhYzk4OWM0NGIyZTFjZGFiYzI1OGU5NmNhOTNjYWFk
NGJkNjQwHhcNMjUwODA0MDcwMDQwWhcNMjUwODA1MDcwMDQwWjAzMTEwLwYDVQQD
EyhiYzUzY2Y5YWJlNWE2NmE3MThkMGFjNmUzMTRmNWVjYjFjMDNkODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFDbMm2+8GKtrPvOJBw8R2Emec0m
DQ/iKhIFbfXpRCunXB0OuWSEpNmlgR4aPCmne3BKP1hfgX1HKYlrjOzNDRqyfcul
BI3/Tf2YlOWzLsipR7X7IoI1Kimal3Mja8+3orrvlb9eWdsoZUh38VKH8COFnUxb
Qm5eZ0JhIYaazrO3+oUWx9cL6danpzi0OaXf2tjdtfvgAKWvSumxP/ZGw2C9pG/U
Z5Rui0nPzxt79kCO5gTOEhXpqbRQySybQ837ETXDGybi3Rr3BwPQavAnSXAxFC20
mlBIL0j4rs+wKt2OHUc6gVFbx39TAu6IXOKBf/kjAv5Y0U9QoyMrZgLJjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxTz5q+WmanGNCsbjFPXsscA9ghMB8GA1UdIwQY
MBaAFLeZrJicRLLhzavCWOlsqTyq1L1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDVtc21KeEVzdUhOcThKWTZXeXBQS3JVdldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yZTVjNDktMGQ3NC00ODdhLWE4MWMt
OTE3NGRmNGRkYjlhLzEvdDVtc21KeEVzdUhOcThKWTZXeXBQS3JVdldRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8yZTVjNDktMGQ3NC00ODdhLWE4MWMtOTE3NGRmNGRkYjlh
LzEvdDVtc21KeEVzdUhOcThKWTZXeXBQS3JVdldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXaWdE0EX
EjNcxYoBAQ09OO0BTAl30WRKgrnvAhFIa7TOTHyGSsiXd4gy8PrqAJf4vQhwEKS4
FgExGZEC7ctF292MDuVbIHRAhFsfC9wNCgDME7Zxv2vFb2S5hVpVqhxdltlOLvVP
trYbCUayfBFzWH+USLmXGC5/B+sk30V/rKK3/LOfAF+oP9VUm9+jmyicvNwuol6N
05W9AcRuisIgnp4ev+N47NRqqKJ0DsbeN1TZHYG01D8J9Q5RnE3YRnaNqe1j49Fy
uZ7s1I9DLUMT0YaKZHhP7aaghbJwqiMF3VNUVkAesCe5Q7hVTbRq/i2dNuTzX9KS
17xqFO9vcOwj5Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:19 2025 by rpki-client