Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
File: 5fmtISzWWrTuK46bP4uDPDkA6n0.mft (raw, json)
Hash identifier: ulEUaqw42ysyv3IA+eH8QXEev5fUk6K3xhShY5t8Kkk=
Subject key identifier: 75:EF:A0:FD:BB:51:49:D6:9A:EE:44:E5:44:35:51:93:78:6D:50:AC
Authority key identifier: E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
Certificate issuer: /CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
Certificate serial: 01987374358504B382937983167036B9AE01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
Manifest number: 0959
Signing time: Mon 04 Aug 2025 05:00:52 +0000
Manifest this update: Mon 04 Aug 2025 05:00:52 +0000
Manifest next update: Tue 05 Aug 2025 05:00:52 +0000
Files and hashes: 1: 5SbPyjmIYXelitOmA1AVO3bhm0Q.roa (hash: 1XIxpyYBD9DDRIa0BTpbMKp2ZvPzaojB9NovyRazhxQ=)
2: 5fmtISzWWrTuK46bP4uDPDkA6n0.crl (hash: lgNnDWIC9SFTE5NlBc9F5fzG91qTqbbr5ZU1MOBXPpw=)
3: 7HHw1TGIKZGT4OMQXJ2kcRpWokQ.roa (hash: MAqlIYjH1775SsM1oEUQoqGZ7ZtgZ752pYJj6tU1DkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:35:85:04:b3:82:93:79:83:16:70:36:b9:ae:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
Validity
Not Before: Aug 4 05:00:52 2025 GMT
Not After : Aug 5 05:00:52 2025 GMT
Subject: CN=75efa0fdbb5149d69aee44e544355193786d50ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9c:cb:60:0a:ec:97:92:97:23:80:2e:fc:ce:
24:b7:c8:24:56:88:3d:5b:b8:81:6e:e0:cc:1a:ae:
af:8f:77:54:02:ff:5a:fc:69:e4:f4:a0:d6:46:d1:
ee:e5:ff:93:72:77:2f:c1:fe:3e:8b:e3:d1:75:48:
e7:6a:b4:67:30:d4:7c:c4:6d:79:6f:a9:f1:93:1d:
76:00:81:7e:ad:d7:d9:49:ff:bb:be:59:95:b3:be:
da:91:34:dd:77:21:31:17:ab:da:74:13:ab:b2:7c:
47:28:60:04:0a:ec:48:d8:a9:ee:c5:bc:fa:69:5c:
77:5b:55:b2:f3:94:0d:31:62:e6:b2:e0:07:fb:c5:
d0:70:52:7b:07:7e:fe:49:fe:3f:c7:92:57:72:77:
f5:ba:ed:66:1c:8d:92:ce:03:47:67:f4:26:39:b4:
52:fa:29:e5:5b:d0:7f:67:20:20:32:0e:7a:f7:5d:
ab:ae:d5:2c:23:9e:07:b0:d5:65:44:fb:d8:c5:c2:
89:8f:41:59:ee:b2:de:21:59:79:76:35:35:61:c5:
60:59:e8:3b:e8:64:ec:e3:68:7e:34:7c:dd:40:66:
78:97:7c:92:0a:bd:36:21:39:20:62:bb:c7:72:82:
96:9b:d5:d0:5a:b2:82:28:cc:9e:bf:d0:e1:80:00:
09:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EF:A0:FD:BB:51:49:D6:9A:EE:44:E5:44:35:51:93:78:6D:50:AC
X509v3 Authority Key Identifier:
keyid:E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f5:e0:4f:37:81:b7:5e:68:aa:db:a4:19:61:2f:b2:c4:10:
69:1a:ea:42:19:89:64:f2:05:69:fe:05:1a:c4:d9:b9:a3:1f:
81:fa:f3:df:5f:1d:6e:49:e4:b8:0e:fb:dc:a3:c8:bc:6a:db:
6a:0d:47:d8:e6:d9:b1:84:de:ee:b5:1e:97:48:fd:0a:ce:eb:
ca:4a:dd:72:8b:f8:42:62:dd:3f:65:db:a1:fc:a4:be:75:51:
0a:c5:2e:1c:a8:53:9c:54:31:25:a8:f4:06:41:ce:a5:a2:8b:
b8:82:f0:9a:07:ef:ca:99:ff:55:70:25:a5:99:cd:d8:9f:44:
a2:c2:12:30:82:86:a2:7d:2e:da:95:7b:2f:d9:92:f1:aa:10:
86:05:29:a6:e2:8f:e9:b8:fc:ee:2c:61:1f:9f:26:ba:d4:da:
06:21:da:8e:dc:09:a3:7d:96:c7:17:45:be:84:b6:f4:43:fb:
8f:42:de:ca:89:49:ef:27:59:e7:4a:dc:d7:8e:e0:86:e3:fe:
9d:d2:85:75:87:a7:8a:7d:c3:e8:de:a2:cb:54:eb:17:11:0c:
bd:29:28:cb:10:9f:4f:f1:e6:a5:0b:05:ce:29:39:63:43:7d:
df:1c:07:b2:6a:c8:eb:fd:4e:f2:5d:6d:07:57:54:30:5c:29:
35:e1:1f:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdDWFBLOCk3mDFnA2ua4BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZjlhZDIxMmNkNjVhYjRlZTJiOGU5YjNmOGI4MzNjMzkw
MGVhN2QwHhcNMjUwODA0MDUwMDUyWhcNMjUwODA1MDUwMDUyWjAzMTEwLwYDVQQD
Eyg3NWVmYTBmZGJiNTE0OWQ2OWFlZTQ0ZTU0NDM1NTE5Mzc4NmQ1MGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JzLYArsl5KXI4Au/M4kt8gkVog9
W7iBbuDMGq6vj3dUAv9a/Gnk9KDWRtHu5f+Tcncvwf4+i+PRdUjnarRnMNR8xG15
b6nxkx12AIF+rdfZSf+7vlmVs77akTTddyExF6vadBOrsnxHKGAECuxI2Knuxbz6
aVx3W1Wy85QNMWLmsuAH+8XQcFJ7B37+Sf4/x5JXcnf1uu1mHI2SzgNHZ/QmObRS
+inlW9B/ZyAgMg56912rrtUsI54HsNVlRPvYxcKJj0FZ7rLeIVl5djU1YcVgWeg7
6GTs42h+NHzdQGZ4l3ySCr02ITkgYrvHcoKWm9XQWrKCKMyev9DhgAAJmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXvoP27UUnWmu5E5UQ1UZN4bVCsMB8GA1UdIwQY
MBaAFOX5rSEs1lq07iuOmz+Lgzw5AOp9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWZtdElTeldXclR1SzQ2YlA0dURQRGtBNm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mODA5MjYtZTlhOS00MWY5LTk1YTAt
OWI4MTNhMjAwMmFhLzEvNWZtdElTeldXclR1SzQ2YlA0dURQRGtBNm4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mODA5MjYtZTlhOS00MWY5LTk1YTAtOWI4MTNhMjAwMmFh
LzEvNWZtdElTeldXclR1SzQ2YlA0dURQRGtBNm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPXgTzeB
t15oqtukGWEvssQQaRrqQhmJZPIFaf4FGsTZuaMfgfrz318dbknkuA773KPIvGrb
ag1H2ObZsYTe7rUel0j9Cs7rykrdcov4QmLdP2XbofykvnVRCsUuHKhTnFQxJaj0
BkHOpaKLuILwmgfvypn/VXAlpZnN2J9EosISMIKGon0u2pV7L9mS8aoQhgUppuKP
6bj87ixhH58mutTaBiHajtwJo32WxxdFvoS29EP7j0LeyolJ7ydZ50rc147ghuP+
ndKFdYenin3D6N6iy1TrFxEMvSkoyxCfT/HmpQsFzik5Y0N93xwHsmrI6/1O8l1t
B1dUMFwpNeEfog==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:39 2025 by rpki-client