
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
File: 5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json)
Hash identifier: 9qroLmp+qh+VQBfIeJFwhxiuTW2AKQkFBNrUqCKOZjQ=
Subject key identifier: 92:0C:C4:3A:7D:A6:61:47:60:BE:51:BE:F4:B7:32:39:88:97:43:32
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Certificate issuer: /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial: 01988BB3BFA162C3FA8140EFC62D0B5090AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
Manifest number: 1209
Signing time: Fri 08 Aug 2025 22:01:09 +0000
Manifest this update: Fri 08 Aug 2025 22:01:09 +0000
Manifest next update: Sat 09 Aug 2025 22:01:09 +0000
Files and hashes: 1: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: VNgq3Gpxt1c6NmMeFN1PIATJiqegK94pNoTocIVlnzw=)
2: Hhlf2TMcsBbO8FDcjvrbEjaLNJk.roa (hash: ZLATPH9bmMVI2zAzUVqtDm2hTynFHZLFVRo0ph7khAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:bf:a1:62:c3:fa:81:40:ef:c6:2d:0b:50:90:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Validity
Not Before: Aug 8 22:01:09 2025 GMT
Not After : Aug 9 22:01:09 2025 GMT
Subject: CN=920cc43a7da6614760be51bef4b7323988974332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4b:18:d2:22:76:2c:d4:49:d7:1f:68:7d:d8:
4e:c3:7b:5f:0d:ad:7a:47:2f:a1:e6:74:05:0d:f1:
98:61:f2:cb:0e:ca:e1:b1:d9:dd:10:e8:99:09:3f:
2f:c2:95:0e:bc:68:b0:1b:b3:23:98:a6:7b:84:94:
42:4e:50:cf:9d:59:c3:79:81:b2:4b:39:8a:48:5e:
8f:08:97:c9:d7:93:dd:b8:ae:0e:f9:d2:76:b8:86:
36:1e:cb:1f:f4:0c:64:7b:a4:c4:be:88:da:c9:8e:
0a:fe:e1:f8:e8:36:d0:a5:0f:90:94:18:6b:b3:87:
cb:67:03:d8:99:ca:99:ab:cc:37:9a:13:6a:2e:c0:
71:3d:04:0c:97:47:fd:e9:07:e6:a4:97:e8:98:ca:
6d:b2:1b:f6:aa:07:e5:a6:c0:84:90:5f:b1:f6:ca:
c2:d3:19:53:91:4c:ef:86:c6:58:88:f8:e1:17:fe:
39:47:b2:08:b8:8b:f5:92:c9:5a:de:48:ca:3d:60:
69:3e:cc:d4:52:d3:8d:70:0e:00:a3:8a:5c:9e:61:
72:12:7a:0e:91:70:0f:95:49:81:81:81:fe:03:ab:
27:dc:9b:82:2c:75:15:8c:07:71:c1:4c:ab:8f:29:
1a:93:53:b6:b8:ac:5b:57:7c:46:41:67:eb:70:a8:
dd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0C:C4:3A:7D:A6:61:47:60:BE:51:BE:F4:B7:32:39:88:97:43:32
X509v3 Authority Key Identifier:
keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:09:64:d7:69:b0:1c:08:ee:25:de:9e:ae:ae:71:80:45:7f:
67:83:49:6d:92:f8:83:f6:8d:43:24:2d:6f:cd:70:ff:77:d7:
ec:3d:d8:1a:85:19:36:8f:ef:6a:64:1b:ec:f1:5b:f2:41:25:
98:70:79:e8:b2:78:14:5e:51:05:52:fa:32:ac:cc:62:81:fa:
bd:f3:46:f4:67:eb:3d:1a:0c:b3:eb:48:af:1e:a6:d7:7c:22:
1e:a8:a2:9c:ce:a1:a7:d9:ed:35:8e:76:f1:97:5c:7e:82:e7:
f1:4e:3d:4a:40:e7:ef:ae:ec:5a:ae:5b:b6:d5:88:fc:dd:14:
4f:33:c6:3f:16:1c:75:a3:9a:ac:22:db:07:44:38:19:8f:a1:
20:62:0c:bb:f3:b5:9a:da:08:84:41:d1:ab:77:8e:08:47:f1:
5c:3c:03:d5:34:4e:55:ba:3c:65:90:fb:00:2c:41:5f:8f:78:
32:79:8f:3a:90:5e:4e:7f:7e:16:da:d5:d1:39:20:76:53:f5:
c0:48:bf:6a:b0:b1:49:d9:ed:38:cb:3f:35:ef:d6:31:fd:a1:
74:c4:4a:31:fb:37:10:38:f5:31:20:55:b6:0c:58:15:c2:b7:
dc:ca:2c:25:f2:c0:27:b6:a4:dd:8a:5d:48:69:c6:70:96:f5:
07:b7:2f:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLs7+hYsP6gUDvxi0LUJCqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZGIwMzAxZmUyNDYxYzZkZTNmNzE4ZDg0N2NiNWRjN2Mw
MGIyZDIwHhcNMjUwODA4MjIwMTA5WhcNMjUwODA5MjIwMTA5WjAzMTEwLwYDVQQD
Eyg5MjBjYzQzYTdkYTY2MTQ3NjBiZTUxYmVmNGI3MzIzOTg4OTc0MzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20sY0iJ2LNRJ1x9ofdhOw3tfDa16
Ry+h5nQFDfGYYfLLDsrhsdndEOiZCT8vwpUOvGiwG7MjmKZ7hJRCTlDPnVnDeYGy
SzmKSF6PCJfJ15PduK4O+dJ2uIY2Hssf9Axke6TEvojayY4K/uH46DbQpQ+QlBhr
s4fLZwPYmcqZq8w3mhNqLsBxPQQMl0f96QfmpJfomMptshv2qgflpsCEkF+x9srC
0xlTkUzvhsZYiPjhF/45R7IIuIv1ksla3kjKPWBpPszUUtONcA4Ao4pcnmFyEnoO
kXAPlUmBgYH+A6sn3JuCLHUVjAdxwUyrjykak1O2uKxbV3xGQWfrcKjdwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIMxDp9pmFHYL5RvvS3MjmIl0MyMB8GA1UdIwQY
MBaAFOTbAwH+JGHG3j9xjYR8tdx8ALLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82ZTY0MDUtZGJlNy00MmIyLTg4N2Mt
ZmZkZWJlYzhmNTA1LzEvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC82ZTY0MDUtZGJlNy00MmIyLTg4N2MtZmZkZWJlYzhmNTA1
LzEvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAlk12mw
HAjuJd6erq5xgEV/Z4NJbZL4g/aNQyQtb81w/3fX7D3YGoUZNo/vamQb7PFb8kEl
mHB56LJ4FF5RBVL6MqzMYoH6vfNG9GfrPRoMs+tIrx6m13wiHqiinM6hp9ntNY52
8ZdcfoLn8U49SkDn767sWq5bttWI/N0UTzPGPxYcdaOarCLbB0Q4GY+hIGIMu/O1
mtoIhEHRq3eOCEfxXDwD1TROVbo8ZZD7ACxBX494MnmPOpBeTn9+FtrV0TkgdlP1
wEi/arCxSdntOMs/Ne/WMf2hdMRKMfs3EDj1MSBVtgxYFcK33MosJfLAJ7ak3Ypd
SGnGcJb1B7cvRg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:39 2025 by rpki-client