Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
File: s5HsSXtk1hEkn95Zel7ofpM31e4.mft (raw, json)
Hash identifier: qcFAJ/KNwN425lCC/snHlq7icK5bHBYOPBdnreepYyE=
Subject key identifier: 02:1A:58:82:47:35:71:9C:AD:02:87:6C:7B:64:73:1D:F9:D1:F2:54
Authority key identifier: B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
Certificate issuer: /CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Certificate serial: 019885445D9856BC24E1EBEEAC1276062FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
Manifest number: 05C2
Signing time: Thu 07 Aug 2025 16:01:46 +0000
Manifest this update: Thu 07 Aug 2025 16:01:46 +0000
Manifest next update: Fri 08 Aug 2025 16:01:46 +0000
Files and hashes: 1: 1SuRt4iJivWgTKWmk3XGm23S3is.roa (hash: QUGPW65YoJ5GDg5KCzuvySius0jxym8E1db1Hk83LWE=)
2: s5HsSXtk1hEkn95Zel7ofpM31e4.crl (hash: BiohBcRYXRK8cG43W1aAQrzZC2vN3VgaXG+2nUDnbKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:44:5d:98:56:bc:24:e1:eb:ee:ac:12:76:06:2f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Validity
Not Before: Aug 7 16:01:46 2025 GMT
Not After : Aug 8 16:01:46 2025 GMT
Subject: CN=021a58824735719cad02876c7b64731df9d1f254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:d2:ec:ee:81:f1:53:09:c7:ea:5f:57:e0:
ae:c1:2d:52:b9:a3:ab:7d:f5:0e:a4:8b:c8:78:b6:
a4:33:66:58:01:b6:41:89:de:c0:cc:57:3e:6a:ab:
ef:91:0a:f2:a4:7e:ca:fd:60:70:a0:3b:53:53:d1:
ca:6d:e2:72:ba:4d:7a:14:26:41:db:8c:a2:23:18:
72:18:fb:f4:d2:fa:e8:4e:f4:62:81:99:72:85:55:
1e:7a:e2:77:e1:2e:9f:3d:e9:51:3f:50:34:26:f0:
8b:7e:99:41:d4:f6:91:b3:d9:89:ad:67:78:ba:33:
10:72:3f:fa:f1:30:2b:05:4b:84:56:2a:23:1b:83:
2b:a2:91:3c:84:4e:75:04:8b:6c:1e:c3:fd:50:ee:
ea:cd:fd:20:01:9e:ce:51:48:0a:4a:24:a3:26:82:
3a:1b:16:3d:0d:e2:97:49:04:6d:ec:6e:7b:7d:24:
a8:eb:9b:1a:79:c8:90:1c:f8:4a:fb:45:b1:b8:65:
84:99:7f:85:d4:01:22:bd:59:6d:73:67:4a:6a:27:
a6:e0:20:b1:3c:72:e6:f1:d4:7f:eb:0b:50:bf:21:
83:eb:6d:07:73:73:a6:05:15:0e:fb:1e:92:18:e0:
dc:6f:b8:9c:8a:48:e2:d9:e0:91:f8:4c:4f:28:68:
4d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1A:58:82:47:35:71:9C:AD:02:87:6C:7B:64:73:1D:F9:D1:F2:54
X509v3 Authority Key Identifier:
keyid:B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0d:22:da:20:cd:cc:6f:a7:a9:fb:15:1d:75:04:db:22:a3:
34:25:70:e5:e5:c2:a1:66:20:aa:cf:f5:67:7a:d7:a8:98:a4:
3c:e9:c9:80:9f:d9:9a:0e:0d:45:1d:3f:80:f0:ef:1c:19:02:
06:9e:07:c0:ea:55:99:b8:92:1b:55:11:1a:93:d5:89:ea:b8:
ea:f6:20:d2:77:4a:28:17:19:c2:5e:ff:d2:8a:5f:ff:bc:fb:
99:ce:21:12:a8:eb:e3:9b:2f:86:b4:a9:64:e0:49:02:e7:c9:
be:68:d9:68:d8:d9:b8:77:5a:9b:85:60:29:ea:5c:84:34:c9:
f7:40:15:8b:bf:16:7b:75:cd:7b:d3:17:8f:d1:76:68:ce:f6:
39:61:d4:8a:fd:b9:95:17:4f:39:dc:f9:57:a2:e5:48:c4:54:
04:f3:1c:b9:6d:cc:85:95:f6:6b:0d:a4:91:6a:d4:e9:2e:25:
77:2b:af:ed:61:ca:73:78:30:5b:8a:24:38:ca:0d:c5:bc:95:
56:37:b2:50:b1:a6:a2:0e:6d:70:6d:dd:da:c1:fa:85:f6:66:
f9:5d:e1:6e:ed:76:67:a7:d8:59:5a:0c:dd:dc:bc:9e:78:f5:
d5:1f:57:92:97:fd:6a:8d:24:16:61:2e:00:1b:e6:e3:b0:40:
43:30:e2:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiFRF2YVrwk4evurBJ2Bi+qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOTFlYzQ5N2I2NGQ2MTEyNDlmZGU1OTdhNWVlODdlOTMz
N2Q1ZWUwHhcNMjUwODA3MTYwMTQ2WhcNMjUwODA4MTYwMTQ2WjAzMTEwLwYDVQQD
EygwMjFhNTg4MjQ3MzU3MTljYWQwMjg3NmM3YjY0NzMxZGY5ZDFmMjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK7S7O6B8VMJx+pfV+CuwS1SuaOr
ffUOpIvIeLakM2ZYAbZBid7AzFc+aqvvkQrypH7K/WBwoDtTU9HKbeJyuk16FCZB
24yiIxhyGPv00vroTvRigZlyhVUeeuJ34S6fPelRP1A0JvCLfplB1PaRs9mJrWd4
ujMQcj/68TArBUuEViojG4MropE8hE51BItsHsP9UO7qzf0gAZ7OUUgKSiSjJoI6
GxY9DeKXSQRt7G57fSSo65saeciQHPhK+0WxuGWEmX+F1AEivVltc2dKaiem4CCx
PHLm8dR/6wtQvyGD620Hc3OmBRUO+x6SGODcb7icikji2eCR+ExPKGhNmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIaWIJHNXGcrQKHbHtkcx350fJUMB8GA1UdIwQY
MBaAFLOR7El7ZNYRJJ/eWXpe6H6TN9XuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczVIc1NYdGsxaEVrbjk1WmVsN29mcE0zMWU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi82ZGMxMjEtMGE2Zi00NWFkLThhZjkt
ZTFhNDI5MzUyMGJlLzEvczVIc1NYdGsxaEVrbjk1WmVsN29mcE0zMWU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi82ZGMxMjEtMGE2Zi00NWFkLThhZjktZTFhNDI5MzUyMGJl
LzEvczVIc1NYdGsxaEVrbjk1WmVsN29mcE0zMWU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmA0i2iDN
zG+nqfsVHXUE2yKjNCVw5eXCoWYgqs/1Z3rXqJikPOnJgJ/Zmg4NRR0/gPDvHBkC
Bp4HwOpVmbiSG1URGpPVieq46vYg0ndKKBcZwl7/0opf/7z7mc4hEqjr45svhrSp
ZOBJAufJvmjZaNjZuHdam4VgKepchDTJ90AVi78We3XNe9MXj9F2aM72OWHUiv25
lRdPOdz5V6LlSMRUBPMcuW3MhZX2aw2kkWrU6S4ldyuv7WHKc3gwW4okOMoNxbyV
VjeyULGmog5tcG3d2sH6hfZm+V3hbu12Z6fYWVoM3dy8nnj11R9Xkpf9ao0kFmEu
ABvm47BAQzDirw==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:43:27 2025 by rpki-client